Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e20383334.roa
File: 3138352e3130302e3231352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5DXBw42TEDkun9vm91mjdpAo1ICIX5b6eX5Ay3zVxmI=
Subject key identifier: 21:98:84:1C:44:69:5C:E0:58:D7:88:7B:4F:73:B4:CC:02:41:42:28
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 7ACEBFD3CF5D6AB2805EBFDDBD480143165D8292
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Apr 2024 00:02:01 +0000
ROA not before: Wed 10 Apr 2024 23:57:01 +0000
ROA not after: Thu 10 Apr 2025 00:02:01 +0000
asID: 834
IP address blocks: 185.100.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ce:bf:d3:cf:5d:6a:b2:80:5e:bf:dd:bd:48:01:43:16:5d:82:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Apr 10 23:57:01 2024 GMT
Not After : Apr 10 00:02:01 2025 GMT
Subject: CN=2198841C44695CE058D7887B4F73B4CC02414228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:13:a2:e9:c8:38:b4:db:f1:c1:85:01:a0:
b4:6b:e7:aa:f8:96:f5:92:fb:8d:f3:e4:7a:fd:1f:
fb:c3:4d:8b:b1:0c:44:39:c2:22:e2:2a:93:5c:d7:
a7:ce:f9:8e:d0:a3:04:c6:9f:a8:b9:12:9c:ad:8d:
7b:66:26:f3:11:07:2c:77:d9:46:46:ee:81:17:8b:
d8:84:76:5e:87:7a:23:38:95:f4:23:d7:30:06:03:
71:35:0d:02:81:92:80:fc:83:e5:56:f5:a4:47:6e:
27:04:88:de:15:d0:c7:5e:3e:6d:e5:6c:4d:e7:25:
e7:d1:4d:7e:f7:77:de:44:79:ca:94:22:16:37:d6:
53:84:f3:42:d3:e0:55:a7:0c:9f:2d:7a:9f:bf:75:
9f:8c:15:26:af:95:d5:6b:af:1b:01:90:8c:f6:1a:
ff:8b:56:11:18:9c:30:34:2b:80:f9:29:50:6d:ab:
6c:cb:ea:78:a5:38:37:2d:bb:ea:9f:fb:31:1d:a4:
b0:d1:6f:fa:ad:ca:20:39:09:d0:0f:fb:3f:82:f2:
87:d2:48:37:29:d9:4d:47:78:5a:9e:61:3c:e7:2f:
3c:12:46:de:61:a0:b2:bd:61:e0:4c:31:0f:2b:2a:
fd:ff:42:19:da:0b:bc:70:8a:57:92:6f:0e:7d:fc:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:84:1C:44:69:5C:E0:58:D7:88:7B:4F:73:B4:CC:02:41:42:28
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.215.0/24
Signature Algorithm: sha256WithRSAEncryption
76:80:78:93:08:c7:1a:ad:8f:d8:c7:cc:d5:53:7e:08:7b:6a:
d8:eb:5c:75:24:af:82:29:0f:2e:c7:bc:0a:61:9f:b1:61:77:
b1:ea:fb:9d:86:f6:e5:bf:95:43:a2:c5:7e:b2:18:65:c1:7e:
fc:27:9e:dc:7b:95:61:ce:19:31:36:c9:5c:f2:df:a4:63:7a:
c4:fb:07:f6:5b:4b:6f:eb:21:f0:53:2c:67:96:a9:82:aa:b9:
b3:8f:2b:5f:c3:87:99:29:0f:d6:43:67:11:41:67:ed:4a:5d:
85:66:27:cf:66:73:ee:3a:39:34:78:ae:3d:7d:3a:84:54:fb:
55:eb:23:67:64:41:20:a9:8d:ab:8a:85:2a:31:04:ca:77:84:
33:47:bd:65:64:3d:3d:e7:9d:fb:b4:71:9e:b7:6c:b3:0f:ca:
74:6a:e0:53:7e:46:b9:4c:f9:9b:0c:dd:c9:6d:84:c3:84:e8:
10:34:59:39:47:4d:7a:95:64:bd:47:60:93:33:9a:0c:b0:ed:
a8:af:2e:b7:dc:8d:83:43:9c:64:56:0e:9b:2e:6e:38:53:63:
3e:22:b2:cf:7a:96:e7:ea:a6:4e:87:29:21:2c:66:ef:a1:21:
28:54:fb:e4:ea:b2:57:e8:3e:c2:a0:e8:0c:1a:ee:43:a7:6a:
c5:da:1f:42
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUes6/089darKAXr/dvUgBQxZdgpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDA0MTAyMzU3MDFaFw0yNTA0MTAwMDAyMDFaMDMxMTAvBgNV
BAMTKDIxOTg4NDFDNDQ2OTVDRTA1OEQ3ODg3QjRGNzNCNENDMDI0MTQyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYBOi6cg4tNvxwYUBoLRr56r4
lvWS+43z5Hr9H/vDTYuxDEQ5wiLiKpNc16fO+Y7QowTGn6i5EpytjXtmJvMRByx3
2UZG7oEXi9iEdl6HeiM4lfQj1zAGA3E1DQKBkoD8g+VW9aRHbicEiN4V0MdePm3l
bE3nJefRTX73d95EecqUIhY31lOE80LT4FWnDJ8tep+/dZ+MFSavldVrrxsBkIz2
Gv+LVhEYnDA0K4D5KVBtq2zL6nilODctu+qf+zEdpLDRb/qtyiA5CdAP+z+C8ofS
SDcp2U1HeFqeYTznLzwSRt5hoLK9YeBMMQ8rKv3/QhnaC7xwileSbw59/KYrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUIZiEHERpXOBY14h7T3O0zAJBQigwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzODM1MmUzMTMwMzAyZTMy
MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlk
1zANBgkqhkiG9w0BAQsFAAOCAQEAdoB4kwjHGq2P2MfM1VN+CHtq2OtcdSSvgikP
Lse8CmGfsWF3ser7nYb25b+VQ6LFfrIYZcF+/Cee3HuVYc4ZMTbJXPLfpGN6xPsH
9ltLb+sh8FMsZ5apgqq5s48rX8OHmSkP1kNnEUFn7UpdhWYnz2Zz7jo5NHiuPX06
hFT7VesjZ2RBIKmNq4qFKjEEyneEM0e9ZWQ9Peed+7Rxnrdssw/KdGrgU35GuUz5
mwzdyW2Ew4ToEDRZOUdNepVkvUdgkzOaDLDtqK8ut9yNg0OcZFYOmy5uOFNjPiKy
z3qW5+qmTocpISxm76EhKFT75OqyV+g+wqDoDBruQ6dqxdofQg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:55 2025 by rpki-client