Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233362e302f32342d3234203d3e203432333636.roa
File: 38352e3139302e3233362e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: YToZw9axaeAUzf2kc1EEluCAZ2pcyd74Ath0ASNfQd8=
Subject key identifier: 6D:EB:98:27:4A:50:45:4E:CA:12:F2:EA:51:23:22:06:DC:6D:77:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 303B468E875559073A760131D8718071B2195451
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233362e302f32342d3234203d3e203432333636.roa
Signing time: Tue 25 Apr 2023 17:57:20 +0000
ROA not before: Tue 25 Apr 2023 17:52:20 +0000
ROA not after: Tue 23 Apr 2024 17:57:20 +0000
asID: 42366
IP address blocks: 85.190.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3b:46:8e:87:55:59:07:3a:76:01:31:d8:71:80:71:b2:19:54:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 25 17:52:20 2023 GMT
Not After : Apr 23 17:57:20 2024 GMT
Subject: CN=6DEB98274A50454ECA12F2EA51232206DC6D77FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:44:d2:a4:17:1c:f1:28:13:90:08:6e:7e:
d6:bf:99:c9:d7:ca:4a:77:f0:8e:cf:b5:5d:c5:ca:
04:ec:32:4d:92:91:a0:0b:86:59:a4:41:25:75:75:
68:dd:a1:65:4e:c7:89:6e:8c:27:45:00:83:ac:5f:
63:8c:ae:13:42:67:b2:22:cc:77:f3:1c:cb:c8:89:
b3:67:aa:28:89:41:37:8f:2d:80:51:47:6e:5b:95:
93:46:1a:8d:6b:77:0b:dc:51:10:c2:65:1f:08:5a:
3e:c5:cc:15:92:3d:b9:08:50:6d:c2:a9:65:00:20:
de:16:30:bb:bd:40:f3:07:f4:df:f6:46:5b:73:24:
e2:5d:90:cc:62:b4:13:bc:4c:76:32:f9:6d:65:b8:
27:2e:53:1c:bd:d8:d5:28:b2:84:2b:ac:5a:b6:3d:
a2:2a:7e:26:99:ca:11:ea:75:d5:5c:6b:bd:3d:06:
db:ba:11:e8:72:02:74:82:a4:f0:ad:bc:7d:cc:80:
ba:48:c0:34:9d:51:38:85:c8:18:57:b1:d9:87:71:
5c:4e:17:e3:66:87:8c:30:43:ed:08:4b:c6:fe:10:
6b:04:76:5c:d5:75:b2:6c:25:af:65:3e:40:fe:ee:
d1:fe:59:5c:13:a0:c3:c6:c2:d7:3f:5d:9d:55:08:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:98:27:4A:50:45:4E:CA:12:F2:EA:51:23:22:06:DC:6D:77:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233362e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.236.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a7:2f:fb:60:f8:dd:10:6d:e0:ce:cf:d1:da:c0:27:db:94:
dd:f6:1f:ce:3d:50:04:6e:66:aa:64:b4:ec:e2:2c:02:f2:90:
4e:6a:20:5f:91:7d:24:04:6f:cc:fa:95:28:cd:e3:5a:f0:45:
78:2e:75:fc:36:4a:51:e8:df:45:c6:88:37:66:53:c7:e8:06:
91:dd:4a:92:1a:01:ea:dc:e9:d3:2f:1e:4c:ae:6b:b5:51:4f:
5d:9f:c7:63:5c:18:85:75:32:8f:3b:d9:4e:2c:27:b4:64:5f:
b7:30:cc:d3:10:7a:cb:0f:2d:92:f3:d7:5d:3d:ef:7d:e3:0f:
c7:10:52:6e:04:4f:dc:b5:7a:e1:de:d1:e6:0d:b8:66:c2:d8:
81:5d:52:f2:94:27:2b:74:dc:78:a2:e4:bf:87:1c:40:79:39:
4b:40:a8:3e:ee:ec:04:02:9d:60:1a:1c:c9:20:c8:3a:6e:1b:
a0:6d:6d:b4:ef:43:98:d0:ab:8a:9a:9b:d5:f0:55:47:7e:c3:
23:9a:f2:81:0b:1f:f4:1c:ae:d2:f4:20:b2:e5:3a:be:a3:88:
4f:a2:93:2c:16:97:7f:7c:27:66:c9:d7:01:65:1d:a8:af:a7:
4e:86:4f:52:e6:4e:92:42:ed:3d:22:66:c8:d3:8b:27:12:c6:
4d:6c:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 20:57:27 2023 by rpki-client on console-fra.rpki-client.org