Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32312d3231203d3e203438353933.roa
File: 38352e33312e3232342e302f32312d3231203d3e203438353933.roa (raw, json)
Hash identifier: U+33qXvG1No0nuo0SCQKZfJuDB6Z+fHI8vO8xeXKEQo=
Subject key identifier: 8E:C2:D4:2A:72:85:49:1E:1F:54:C1:58:40:BC:52:5F:D6:93:3D:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3363EEEE4372821D36638021B4360A0DE82441B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32312d3231203d3e203438353933.roa
Signing time: Tue 09 Jul 2024 09:04:12 +0000
ROA not before: Tue 09 Jul 2024 08:59:12 +0000
ROA not after: Tue 08 Jul 2025 09:04:12 +0000
asID: 48593
IP address blocks: 85.31.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 09 Jul 2024 12:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:63:ee:ee:43:72:82:1d:36:63:80:21:b4:36:0a:0d:e8:24:41:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 08:59:12 2024 GMT
Not After : Jul 8 09:04:12 2025 GMT
Subject: CN=8EC2D42A7285491E1F54C15840BC525FD6933DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:e2:95:0b:ca:a6:b0:00:ef:cb:b7:26:ae:
ee:bc:f9:f5:51:79:37:29:c9:f5:cd:d3:4a:35:fa:
85:c6:c8:e1:f8:9b:8c:fc:09:20:0c:71:fa:4a:c8:
da:90:2c:86:ae:50:dc:2a:6f:bf:7b:0b:90:7b:80:
8f:43:03:30:24:bc:3f:d4:8f:7d:3b:37:24:c6:8f:
88:23:f6:a6:e6:bf:c4:0a:b0:20:76:12:a3:37:8a:
e8:4a:a0:7e:e2:76:b8:f2:a6:d6:e2:be:58:1d:e8:
b7:9d:b3:7a:05:90:76:68:0c:c7:50:96:c7:96:35:
33:b3:e4:ff:11:33:19:29:c2:1c:4f:3c:f3:15:1a:
55:87:4b:08:19:eb:68:02:ba:fa:1b:23:8f:f6:7a:
94:ae:87:e3:b0:2e:7f:87:43:45:c8:90:0a:dc:a0:
82:b5:53:c5:ef:02:6d:6f:4e:5a:4b:79:e1:f7:3b:
01:f4:e2:d8:a1:01:d8:9f:7d:83:91:d2:f2:49:ac:
0f:f3:eb:ab:93:cf:41:6b:30:b9:3e:ac:a5:f1:2a:
98:d2:04:27:a0:43:f3:be:49:43:75:82:1f:4e:fc:
5b:72:dc:3c:e6:1d:b5:53:63:da:5e:9a:05:7b:c9:
4c:af:91:2c:97:f2:b5:96:21:e4:63:30:11:7a:3a:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C2:D4:2A:72:85:49:1E:1F:54:C1:58:40:BC:52:5F:D6:93:3D:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32312d3231203d3e203438353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.224.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:76:75:1a:1e:77:ba:66:d9:95:4e:c5:32:cb:ee:a1:90:34:
0a:9b:4d:3d:cb:c9:fe:89:70:71:05:77:6c:72:c6:6d:1e:32:
24:92:ec:c4:71:c4:01:c6:df:4a:b0:f2:72:ae:c9:78:c7:f9:
76:a2:8f:9d:62:75:7c:68:8f:c7:c5:82:72:22:3e:23:20:24:
d1:a4:48:79:a9:17:26:83:79:c0:d0:71:5f:35:71:53:40:b5:
53:ff:7f:86:a0:d3:9d:62:16:e0:9e:e4:ae:a2:33:56:0d:b2:
ed:c3:2e:44:90:2d:a5:80:ee:7d:5b:b3:dc:c9:ea:2e:36:35:
34:9a:a4:37:0a:2f:cc:b1:1d:14:49:89:41:bf:c0:4d:55:27:
4e:cf:5a:03:f9:0f:29:55:86:0d:0b:2d:24:f7:de:15:79:ac:
c2:fc:75:53:08:80:6b:22:3c:9e:c3:d8:5f:c3:9d:16:e5:25:
f2:d8:01:7d:46:4a:ef:f5:bd:b5:2b:6b:89:67:30:66:6f:7e:
c0:29:63:b3:ab:6b:9d:5a:3c:54:cb:1a:af:b1:46:32:b9:f6:
b1:4e:2e:f3:0a:21:f3:cc:62:18:d6:e0:29:df:d6:50:c6:04:
62:e7:3b:95:7c:21:29:fc:11:9e:5c:e1:c5:1c:9f:92:37:bc:
21:bb:a5:a9
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUM2Pu7kNygh02Y4AhtDYKDegkQbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA3MDkwODU5MTJaFw0yNTA3MDgwOTA0MTJaMDMxMTAvBgNV
BAMTKDhFQzJENDJBNzI4NTQ5MUUxRjU0QzE1ODQwQkM1MjVGRDY5MzNEQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3eKVC8qmsADvy7cmru68+fVR
eTcpyfXN00o1+oXGyOH4m4z8CSAMcfpKyNqQLIauUNwqb797C5B7gI9DAzAkvD/U
j307NyTGj4gj9qbmv8QKsCB2EqM3iuhKoH7idrjyptbivlgd6Leds3oFkHZoDMdQ
lseWNTOz5P8RMxkpwhxPPPMVGlWHSwgZ62gCuvobI4/2epSuh+OwLn+HQ0XIkArc
oIK1U8XvAm1vTlpLeeH3OwH04tihAdiffYOR0vJJrA/z66uTz0FrMLk+rKXxKpjS
BCegQ/O+SUN1gh9O/Fty3DzmHbVTY9pemgV7yUyvkSyX8rWWIeRjMBF6On85AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUjsLUKnKFSR4fVMFYQLxSX9aTPa0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzMzMTJlMzIzMjM0
MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODM1MzkzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1Uf
4DANBgkqhkiG9w0BAQsFAAOCAQEAb3Z1Gh53umbZlU7FMsvuoZA0CptNPcvJ/olw
cQV3bHLGbR4yJJLsxHHEAcbfSrDycq7JeMf5dqKPnWJ1fGiPx8WCciI+IyAk0aRI
eakXJoN5wNBxXzVxU0C1U/9/hqDTnWIW4J7krqIzVg2y7cMuRJAtpYDufVuz3Mnq
LjY1NJqkNwovzLEdFEmJQb/ATVUnTs9aA/kPKVWGDQstJPfeFXmswvx1UwiAayI8
nsPYX8OdFuUl8tgBfUZK7/W9tStriWcwZm9+wCljs6trnVo8VMsar7FGMrn2sU4u
8woh88xiGNbgKd/WUMYEYuc7lXwhKfwRnlzhxRyfkje8IbulqQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:42 2025 by rpki-client