Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38302e36352e3230392e302f32342d3234203d3e203139343337.roa
File: 38302e36352e3230392e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: ZoQxzkAdrsIlm0smOTVfLrLSXt0q6HkOjysZzfMDQJQ=
Subject key identifier: 8F:C2:E4:D0:25:73:A4:57:AA:1F:A3:18:1D:D7:47:60:C8:BA:91:3C
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 2B23871016E7A55F0C6B85821B35DFE9DA016C0B
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38302e36352e3230392e302f32342d3234203d3e203139343337.roa
Signing time: Mon 26 Feb 2024 08:53:50 +0000
ROA not before: Mon 26 Feb 2024 08:48:50 +0000
ROA not after: Mon 24 Feb 2025 08:53:50 +0000
asID: 19437
IP address blocks: 80.65.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:23:87:10:16:e7:a5:5f:0c:6b:85:82:1b:35:df:e9:da:01:6c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:50 2024 GMT
Not After : Feb 24 08:53:50 2025 GMT
Subject: CN=8FC2E4D02573A457AA1FA3181DD74760C8BA913C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:24:fa:90:1c:b1:8e:27:24:ae:37:61:66:
59:56:e2:be:8f:e8:b9:61:84:02:9b:5f:3b:9c:31:
7d:20:23:31:9e:d9:ed:15:a5:2a:e9:92:5f:83:f6:
8c:9f:f4:dc:7e:90:a6:35:1a:44:0b:ec:08:a8:9a:
cb:37:f6:6f:9b:fe:45:58:4f:e2:d4:9c:44:df:72:
91:96:6d:65:43:0c:db:84:f7:8d:16:45:9e:fe:af:
be:56:70:6a:1e:15:66:3c:a1:60:da:7b:b6:f1:66:
5a:d0:18:5b:42:86:22:f6:0f:6c:80:ef:29:0b:39:
a5:3d:b4:d0:a7:0c:ba:b5:73:f0:62:c1:26:0c:16:
47:c4:7c:4e:6b:6c:11:d0:a3:eb:3d:90:db:26:34:
f4:19:16:ff:15:20:3e:50:41:b2:13:9b:4b:50:d6:
c4:12:7d:c9:ed:0e:c9:4b:bc:b8:3f:53:0a:57:60:
d4:62:bc:72:eb:93:4b:b2:32:f4:1a:47:e2:e7:2e:
7f:6c:30:19:8d:0f:9c:34:f7:59:f5:77:8d:79:5c:
d5:4c:b6:e5:cf:e7:24:0f:9f:79:99:42:17:27:7e:
06:f8:96:ac:73:1c:b4:15:ce:84:b1:52:07:d7:5e:
08:a1:73:a0:63:35:d2:21:56:28:7c:bd:48:8e:b2:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:E4:D0:25:73:A4:57:AA:1F:A3:18:1D:D7:47:60:C8:BA:91:3C
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38302e36352e3230392e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.209.0/24
Signature Algorithm: sha256WithRSAEncryption
60:70:7c:af:3e:42:f7:02:f0:f2:fc:fb:de:43:45:ed:e1:cc:
ac:cb:d2:dc:73:a9:43:70:41:bf:4c:bf:bb:7d:6d:50:df:7d:
aa:ff:78:d7:e5:c7:98:cb:4a:2a:6d:29:cb:4e:55:05:55:2d:
84:f0:5a:63:e7:09:3d:77:86:b6:62:7d:af:6d:da:88:f8:5e:
9f:7b:e0:ac:51:af:23:42:67:d8:83:12:c9:47:2d:d4:8d:f5:
b0:f3:86:56:e4:a3:6e:87:56:f2:7b:31:d8:b6:41:2c:1d:1d:
8c:cf:16:b2:2b:1f:71:8c:2b:2a:70:4e:d1:0c:70:28:a2:54:
5b:4d:28:34:42:cd:aa:81:57:fc:d0:79:84:17:26:3d:9b:87:
58:05:f6:c5:ae:bc:6d:67:7a:3d:f7:d4:f5:7f:fb:61:26:01:
bc:db:c9:f0:68:ed:13:48:e7:34:7e:5e:49:30:2d:51:18:6b:
9d:35:7f:7c:96:fc:a2:9f:27:c5:0e:bf:c2:2c:d0:91:bd:f8:
dd:06:e1:65:d3:0f:0e:ad:33:21:48:8b:27:e7:fb:7c:b1:bb:
2b:c7:00:ce:ac:a0:97:e4:c8:c6:91:ea:36:93:11:4b:62:0f:
b9:c9:1d:93:d7:d8:f4:5f:01:9f:68:97:52:d1:81:ad:ec:46:
ac:8b:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org