Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e20333937363330.roa
File: 3138352e3130302e3231352e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier: xZPgruIC0kp1KLSMFiJMRDeO5NWpL+YShpqTE5xCIwU=
Subject key identifier: EB:05:C2:2F:9F:49:A3:9F:DF:4C:04:82:08:6D:81:86:A3:29:13:3B
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 05BEBD29A35CA681E0AEFD28902E2CE576946BFB
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e20333937363330.roa
Signing time: Wed 08 Nov 2023 09:24:12 +0000
ROA not before: Wed 08 Nov 2023 09:19:12 +0000
ROA not after: Wed 06 Nov 2024 09:24:12 +0000
asID: 397630
IP address blocks: 185.100.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:be:bd:29:a3:5c:a6:81:e0:ae:fd:28:90:2e:2c:e5:76:94:6b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:19:12 2023 GMT
Not After : Nov 6 09:24:12 2024 GMT
Subject: CN=EB05C22F9F49A39FDF4C0482086D8186A329133B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:3a:de:e4:23:81:15:bf:aa:1e:83:bd:eb:
f0:2a:58:13:79:6d:e9:57:d2:58:14:1e:76:37:4f:
2f:84:82:d9:0d:bb:9d:ff:9d:f3:92:39:f5:8f:a2:
20:ae:28:7e:82:81:62:4d:19:95:50:88:80:93:fb:
49:f9:6c:e6:43:f7:62:fa:af:e8:b1:57:14:fb:24:
2a:9d:b9:3b:06:bb:2e:da:be:e0:3a:c1:b1:73:61:
ed:aa:97:9a:90:29:a8:97:b0:79:38:40:78:1d:f1:
24:2e:7f:79:13:01:4b:0f:89:09:22:d6:b1:ae:ca:
ee:3d:96:c9:f1:05:e2:6e:79:f3:0b:74:09:8b:f7:
94:c8:33:11:14:ed:3c:66:47:e3:59:ef:0f:59:73:
d9:23:1f:07:e5:83:74:8e:d1:1f:84:db:b3:84:1a:
c4:ac:9c:d4:ea:de:27:67:0d:48:c1:bd:7a:f6:98:
1d:58:31:af:3e:bc:c3:31:74:64:a5:5f:5e:3e:5f:
2f:c3:d6:da:94:09:51:28:e3:1f:04:1e:48:35:bb:
1e:94:26:a4:16:38:dc:48:57:4f:2c:fd:f2:ab:21:
9d:f5:a6:fe:18:f3:8a:c5:c8:3f:1d:1f:76:df:aa:
41:02:7e:ae:ce:de:b0:f4:03:27:31:37:b0:9d:0f:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:05:C2:2F:9F:49:A3:9F:DF:4C:04:82:08:6D:81:86:A3:29:13:3B
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e20333937363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.215.0/24
Signature Algorithm: sha256WithRSAEncryption
24:58:d9:fc:27:35:c2:df:16:2c:4b:a6:ac:41:6c:36:f2:be:
51:f6:57:ed:b5:39:09:96:af:fb:27:9b:d4:6d:fa:f5:e9:83:
5a:0f:b3:26:46:e3:21:56:b6:7c:69:7f:d2:ef:7e:8c:c2:81:
a7:35:20:c8:83:92:2d:f0:a6:8c:58:2a:6e:a3:66:e1:91:d1:
8f:4b:07:01:71:f1:a3:ac:f8:a1:10:12:01:26:fe:6f:01:af:
20:f2:6c:3b:e2:74:e0:fc:cd:d6:06:3a:b6:86:4e:ef:57:c7:
e9:d9:8b:d3:f1:66:6e:13:16:1e:65:2f:5b:01:f0:8a:e0:ed:
b0:55:8e:98:ea:f7:06:3b:c5:ae:c7:c0:3a:ac:34:05:d4:fd:
0b:6b:f7:f3:81:56:55:8e:98:85:7e:d0:c1:20:18:f2:4b:71:
d9:2c:3f:d3:f9:7f:75:b4:d5:53:0f:ab:46:bd:de:c6:1b:23:
12:8f:90:32:01:56:d2:d8:64:ab:24:e4:b4:95:7b:07:83:ac:
a9:a6:89:36:c2:06:d9:da:da:4c:ff:b0:7b:21:a2:56:e4:fd:
3b:5d:8d:47:55:b0:f6:69:4e:da:d0:20:7c:b0:07:57:7b:4f:
16:43:cc:9e:6e:a1:7a:89:70:73:be:69:78:fe:20:59:70:dc:
54:7b:ab:b7
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUBb69KaNcpoHgrv0okC4s5XaUa/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yMzExMDgwOTE5MTJaFw0yNDExMDYwOTI0MTJaMDMxMTAvBgNV
BAMTKEVCMDVDMjJGOUY0OUEzOUZERjRDMDQ4MjA4NkQ4MTg2QTMyOTEzM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2jre5COBFb+qHoO96/AqWBN5
belX0lgUHnY3Ty+EgtkNu53/nfOSOfWPoiCuKH6CgWJNGZVQiICT+0n5bOZD92L6
r+ixVxT7JCqduTsGuy7avuA6wbFzYe2ql5qQKaiXsHk4QHgd8SQuf3kTAUsPiQki
1rGuyu49lsnxBeJuefMLdAmL95TIMxEU7TxmR+NZ7w9Zc9kjHwflg3SO0R+E27OE
GsSsnNTq3idnDUjBvXr2mB1YMa8+vMMxdGSlX14+Xy/D1tqUCVEo4x8EHkg1ux6U
JqQWONxIV08s/fKrIZ31pv4Y84rFyD8dH3bfqkECfq7O3rD0AycxN7CdD6xRAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU6wXCL59Jo5/fTASCCG2BhqMpEzswHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzODM1MmUzMTMwMzAyZTMy
MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNzM2MzMzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALlk1zANBgkqhkiG9w0BAQsFAAOCAQEAJFjZ/Cc1wt8WLEumrEFsNvK+UfZX
7bU5CZav+yeb1G369emDWg+zJkbjIVa2fGl/0u9+jMKBpzUgyIOSLfCmjFgqbqNm
4ZHRj0sHAXHxo6z4oRASASb+bwGvIPJsO+J04PzN1gY6toZO71fH6dmL0/FmbhMW
HmUvWwHwiuDtsFWOmOr3BjvFrsfAOqw0BdT9C2v384FWVY6YhX7QwSAY8ktx2Sw/
0/l/dbTVUw+rRr3exhsjEo+QMgFW0thkqyTktJV7B4OsqaaJNsIG2draTP+weyGi
VuT9O12NR1Ww9mlO2tAgfLAHV3tPFkPMnm6heolwc75peP4gWXDcVHurtw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org