Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e20323130313634.roa
File: 3138352e3133392e32362e302f32342d3234203d3e20323130313634.roa (raw, json)
Hash identifier: gg7pJxc3V/GLLftn6brGNhgf9XFsEL1dAEgasI6VrI0=
Subject key identifier: 48:27:38:E2:BF:17:6B:00:ED:B4:D0:0B:39:1C:30:2B:8E:FA:10:20
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 3DD4F9C413ECAC923B64DB4E1C807C82CBF25BCB
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e20323130313634.roa
Signing time: Sun 04 Feb 2024 14:48:23 +0000
ROA not before: Sun 04 Feb 2024 14:43:23 +0000
ROA not after: Sun 02 Feb 2025 14:48:23 +0000
asID: 210164
IP address blocks: 185.139.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d4:f9:c4:13:ec:ac:92:3b:64:db:4e:1c:80:7c:82:cb:f2:5b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Feb 4 14:43:23 2024 GMT
Not After : Feb 2 14:48:23 2025 GMT
Subject: CN=482738E2BF176B00EDB4D00B391C302B8EFA1020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:1e:dc:18:6d:85:04:09:75:4b:3a:b8:c1:
83:d9:7b:02:5b:41:c2:b4:ce:97:76:64:d3:30:cc:
76:d0:40:ec:d1:70:48:f7:69:2c:09:e4:0a:e2:52:
1d:33:02:ee:d5:6b:1a:d6:34:04:3f:b3:d0:42:d6:
99:40:a7:90:a0:75:3c:20:66:21:ac:df:98:60:20:
f3:be:2b:5e:7d:ba:05:68:d5:4b:4d:3a:41:f5:a6:
4d:81:f7:b8:a5:38:f9:60:1f:41:29:03:b6:de:53:
30:6b:9b:6a:68:84:b7:3c:6d:84:64:e8:9d:69:03:
0f:7e:3f:68:c7:fb:bf:fd:e9:27:f8:a8:6c:5c:86:
3a:37:7e:b6:e7:78:44:78:ba:8d:d6:5a:8e:a4:39:
38:83:dd:85:a4:40:ee:1a:cc:91:f6:2b:af:0e:0c:
5c:66:49:96:ae:89:a2:30:9d:c8:86:80:99:36:b0:
84:d0:a5:f3:9e:91:20:67:b2:24:13:11:0f:1e:a0:
89:d0:b5:52:2f:d9:cb:e8:d0:53:36:dc:28:7e:89:
08:8e:4b:f2:a3:ef:d8:a6:39:a5:18:76:50:84:35:
e9:10:67:b9:87:d4:6b:36:64:b8:b2:5f:65:40:9e:
c4:42:82:55:d9:d4:c0:b4:92:5e:ac:e1:51:ff:ab:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:27:38:E2:BF:17:6B:00:ED:B4:D0:0B:39:1C:30:2B:8E:FA:10:20
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e20323130313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.26.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f4:d3:82:b2:2b:4e:90:65:59:60:0a:10:8c:e9:c5:cd:49:
74:c9:01:3d:76:9f:e1:55:76:28:53:67:69:34:14:7c:05:7b:
55:d1:9c:a8:fa:bd:96:70:84:5a:4d:a5:29:d4:df:dc:df:b3:
2d:82:14:cb:5b:ff:56:77:a6:0e:b6:ed:58:4a:b0:cf:94:07:
15:9f:21:31:43:e9:20:35:50:da:0e:f3:ae:94:3a:8c:f0:01:
18:a7:28:9c:3e:31:84:ed:01:5b:08:69:03:b1:21:8b:31:3a:
c6:06:9f:74:bf:38:49:68:53:15:d1:70:a6:c8:20:10:1b:c3:
e5:e1:75:60:61:2e:a0:47:d0:6d:de:57:a7:34:2b:c5:63:2d:
e0:d5:26:03:4d:45:8a:fe:92:b4:d5:32:1e:c8:37:f3:8e:b7:
0e:ff:2f:ea:5a:ff:2c:86:4d:5f:b2:41:52:4e:fe:4c:ff:fe:
15:b8:51:4c:43:e1:06:42:78:e4:d0:c2:56:84:d4:4d:7f:c8:
e8:fc:3f:01:87:55:7f:0d:20:61:e5:ed:29:e1:77:f3:b0:a3:
32:dc:45:ce:29:12:40:41:80:5a:e3:4c:d5:45:cd:fd:10:60:
9d:f1:15:66:e8:95:5e:20:0b:57:50:5b:0a:38:5f:3f:3d:61:
e0:ac:b5:a9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUPdT5xBPsrJI7ZNtOHIB8gsvyW8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDAyMDQxNDQzMjNaFw0yNTAyMDIxNDQ4MjNaMDMxMTAvBgNV
BAMTKDQ4MjczOEUyQkYxNzZCMDBFREI0RDAwQjM5MUMzMDJCOEVGQTEwMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2R7cGG2FBAl1Szq4wYPZewJb
QcK0zpd2ZNMwzHbQQOzRcEj3aSwJ5AriUh0zAu7VaxrWNAQ/s9BC1plAp5CgdTwg
ZiGs35hgIPO+K159ugVo1UtNOkH1pk2B97ilOPlgH0EpA7beUzBrm2pohLc8bYRk
6J1pAw9+P2jH+7/96Sf4qGxchjo3frbneER4uo3WWo6kOTiD3YWkQO4azJH2K68O
DFxmSZauiaIwnciGgJk2sITQpfOekSBnsiQTEQ8eoInQtVIv2cvo0FM23Ch+iQiO
S/Kj79imOaUYdlCENekQZ7mH1Gs2ZLiyX2VAnsRCglXZ1MC0kl6s4VH/qy03AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUSCc44r8XawDttNALORwwK476ECAwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzODM1MmUzMTMzMzkyZTMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzAzMTM2MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5ixowDQYJKoZIhvcNAQELBQADggEBACX004KyK06QZVlgChCM6cXNSXTJAT12
n+FVdihTZ2k0FHwFe1XRnKj6vZZwhFpNpSnU39zfsy2CFMtb/1Z3pg627VhKsM+U
BxWfITFD6SA1UNoO866UOozwARinKJw+MYTtAVsIaQOxIYsxOsYGn3S/OEloUxXR
cKbIIBAbw+XhdWBhLqBH0G3eV6c0K8VjLeDVJgNNRYr+krTVMh7IN/OOtw7/L+pa
/yyGTV+yQVJO/kz//hW4UUxD4QZCeOTQwlaE1E1/yOj8PwGHVX8NIGHl7Snhd/Ow
ozLcRc4pEkBBgFrjTNVFzf0QYJ3xFWbolV4gC1dQWwo4Xz89YeCstak=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org