Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234332e302f32342d3234203d3e203432333636.roa
File: 38352e3139302e3234332e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: ZEDsKHpAqjKvY/n7oyhTrFF+JQRJm5tpf2SsENLN0DE=
Subject key identifier: 3D:DD:AD:1F:24:DB:50:91:D3:3F:44:D8:73:AF:39:51:57:89:E5:84
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 48EC46469DAAAAD615F903CB8684C7F9AC733616
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234332e302f32342d3234203d3e203432333636.roa
Signing time: Tue 26 Mar 2024 18:03:16 +0000
ROA not before: Tue 26 Mar 2024 17:58:16 +0000
ROA not after: Tue 25 Mar 2025 18:03:16 +0000
asID: 42366
IP address blocks: 85.190.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 07:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ec:46:46:9d:aa:aa:d6:15:f9:03:cb:86:84:c7:f9:ac:73:36:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 26 17:58:16 2024 GMT
Not After : Mar 25 18:03:16 2025 GMT
Subject: CN=3DDDAD1F24DB5091D33F44D873AF39515789E584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:59:80:3a:70:6c:a4:a9:a2:5c:3c:95:1c:
2a:df:02:6b:9f:bd:80:a6:70:f3:07:3b:41:dd:51:
79:d9:78:f7:83:34:35:89:e7:57:b5:d0:6b:47:ec:
5b:33:7c:ec:8c:b1:5a:54:cb:dc:0e:65:34:38:fe:
a8:34:93:6d:9b:9d:ac:12:c5:c0:4b:a8:59:86:51:
5f:2b:73:ea:f5:a4:ef:ea:b3:4d:e3:31:b7:a1:a3:
06:95:5c:0e:d1:a3:95:dc:d2:4a:40:e8:49:68:5e:
2a:3d:3c:7c:d2:f8:e7:59:42:8f:ac:40:e8:54:d2:
4f:a2:ad:80:25:6f:64:e9:65:8b:e6:e9:d7:1f:f2:
1a:36:29:11:f5:8b:6f:cb:60:d5:3e:ed:ae:38:a4:
ac:ef:24:a9:26:f5:cf:fc:2b:b1:cd:42:88:31:f5:
5b:36:5d:3a:79:4d:15:50:64:39:8a:53:ec:28:c8:
07:d1:75:2a:99:96:b2:d1:39:b4:d3:04:de:ce:15:
ba:cc:62:a2:ba:a2:e5:de:c1:dd:3c:53:99:c9:e1:
35:de:f5:ca:dd:29:1a:4e:06:04:17:2a:b4:fd:d8:
02:84:e8:b3:e3:68:09:2e:55:2c:9a:38:23:49:15:
a8:81:d6:32:be:c9:0b:22:20:36:fd:d5:15:b4:d3:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DD:AD:1F:24:DB:50:91:D3:3F:44:D8:73:AF:39:51:57:89:E5:84
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234332e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:22:68:9f:c6:ac:a4:79:7f:a9:eb:9e:8b:7d:87:ae:38:f2:
1b:2a:c2:bc:62:16:5c:f6:43:48:c2:69:a4:45:f9:10:b8:43:
ff:54:b0:1f:32:d4:97:ca:9f:53:27:da:b2:85:45:96:3d:d2:
c7:a6:7e:44:c7:16:c6:c8:d5:c6:5c:a1:57:d1:df:4a:89:9d:
96:46:c0:d8:ba:f1:e7:e1:8f:7c:28:63:5d:5e:3f:92:80:a6:
4c:4d:be:e3:32:5e:5f:6c:c6:81:0c:8d:1a:33:5c:61:9a:a9:
4f:b6:1b:76:46:83:b0:14:b3:c9:99:04:f4:1c:18:3e:d0:b2:
4b:cd:17:25:85:6c:32:50:83:76:c0:9d:29:0c:c4:26:0a:82:
35:09:48:87:92:14:90:3a:3c:89:c6:94:4c:32:05:f3:c7:57:
6d:d2:7b:d2:ce:fb:43:05:c8:2a:70:bd:c3:dc:c2:b1:6a:6a:
b6:bf:26:cf:d9:e8:64:b0:ce:20:ef:de:6b:3d:e7:64:3e:e7:
1e:00:4f:ff:9c:37:33:ba:8b:34:39:17:17:f8:2a:26:dd:85:
8a:da:df:fd:c9:dd:63:91:30:8c:0a:df:f3:95:9e:4c:65:65:
46:dd:8f:fc:51:5b:c9:f2:a3:79:dd:33:b4:b4:b5:90:ba:f6:
f3:ab:d4:fe
-----BEGIN CERTIFICATE-----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Generated at Tue Apr 9 12:12:03 2024 by rpki-client on console-ams.rpki-client.org