Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134392e302f32342d3332203d3e20313336373837.roa
File: 38322e3138302e3134392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: /GvT2B5dqtWtUtEOUhabH8cS2E426Vk/5//Y7pgwXiE=
Subject key identifier: 81:DE:45:D4:AF:58:CC:7E:1C:06:18:D6:75:3F:39:1D:90:F4:64:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 04E0E1990547AC2B0223AD9B8EB220FEC23FF4A4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134392e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:28:35 +0000
ROA not before: Mon 27 Mar 2023 08:23:35 +0000
ROA not after: Mon 25 Mar 2024 08:28:35 +0000
asID: 136787
IP address blocks: 82.180.149.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sat 10 Feb 2024 19:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e0:e1:99:05:47:ac:2b:02:23:ad:9b:8e:b2:20:fe:c2:3f:f4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:35 2023 GMT
Not After : Mar 25 08:28:35 2024 GMT
Subject: CN=81DE45D4AF58CC7E1C0618D6753F391D90F46410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:9e:a6:ce:e1:5e:bd:c1:11:5a:92:f5:73:
29:5e:60:4f:6a:d0:64:3c:1d:c4:54:a1:5f:e4:3d:
d5:e1:08:d8:42:bc:3f:c8:8f:39:09:ac:82:22:6d:
48:25:3e:e8:82:2f:ec:55:29:a3:a3:5b:99:9b:44:
29:2b:f8:a8:70:22:3b:1c:b1:ae:09:14:fd:dc:f3:
f9:37:af:d9:d0:04:bc:50:09:39:4f:54:21:e9:70:
c7:a7:38:62:30:36:cb:7a:5d:53:34:4a:1f:67:fa:
8c:c7:94:b0:5a:72:b5:15:da:21:4a:65:20:b0:04:
1b:e4:46:34:f0:f3:31:f1:67:da:ca:1f:fc:a2:a5:
13:f9:87:72:f8:ce:61:71:e0:3e:a3:55:f1:78:d8:
f5:70:15:3b:c1:1d:4d:26:1c:05:43:b8:36:22:7d:
8b:d1:b2:64:4e:80:f2:7d:4a:9f:11:e0:8d:08:d1:
e9:dd:58:90:c5:36:c8:e7:31:f9:5d:42:9b:7c:17:
0e:3b:d9:42:88:92:54:77:c5:a3:fb:dc:16:61:5f:
4d:f4:86:c3:cf:d1:31:85:95:3d:18:3c:9b:21:84:
2e:94:49:86:bc:5f:51:74:00:6e:de:bf:45:9f:e3:
95:b8:07:ad:e4:df:cb:7e:b8:0b:2f:50:c6:41:c2:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:45:D4:AF:58:CC:7E:1C:06:18:D6:75:3F:39:1D:90:F4:64:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.149.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:14:d9:7f:44:c1:3d:7e:b6:50:9c:bd:3a:fe:0f:e9:b1:26:
47:d7:28:cb:d7:8d:55:42:ef:1e:6e:e6:61:ad:d9:b6:2f:d5:
fd:24:d7:dd:e9:23:17:fb:6e:d1:9d:31:b6:c5:01:ca:d4:49:
1e:25:47:ac:87:20:78:d6:fe:89:a7:3c:63:0a:88:e6:af:f1:
40:35:bb:7f:ce:e2:0c:db:87:f8:8e:c9:d1:95:c7:c9:95:23:
4a:9f:19:4b:fa:33:dc:d6:ef:93:78:0d:45:46:d9:b3:7b:07:
55:b0:82:56:7b:8f:1b:72:61:b2:63:b8:cf:68:22:9b:27:b0:
85:6e:74:9c:20:dd:ff:d8:ee:95:45:db:ac:54:ab:27:70:83:
bc:c7:c6:f3:19:96:2e:c2:13:41:88:ef:94:6c:ec:1d:13:5a:
71:16:f1:fa:1f:f5:fa:a1:d5:e4:bf:98:14:1b:7a:e8:e1:ae:
ba:68:55:7d:bc:43:db:af:5b:5d:54:e1:f6:fd:64:43:ab:29:
97:27:25:c8:ca:a1:03:82:ee:76:38:7d:ed:48:7d:15:d0:1b:
c9:2f:a4:23:4c:ba:1d:04:72:24:79:6f:6c:27:c4:59:c0:9b:
66:02:f4:25:b1:eb:d8:33:98:3c:18:56:23:cd:f2:54:d9:d1:
d8:ad:05:81
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 10 20:59:07 2024 by rpki-client on console-fra.rpki-client.org