Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e203631313335.roa
File: 3138352e3133392e32362e302f32342d3234203d3e203631313335.roa (raw, json)
Hash identifier: vfMmPVyV1qX+qiwX75ohLCuRqvxxj8BSCItMQYTZS3s=
Subject key identifier: 54:69:AB:16:EC:16:27:D7:A4:CB:5B:59:74:82:EF:B1:83:77:63:29
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 4D2CA6972A3ADDC7B453F3BF88A5D55292A093DC
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e203631313335.roa
Signing time: Wed 31 Jan 2024 15:41:42 +0000
ROA not before: Wed 31 Jan 2024 15:36:42 +0000
ROA not after: Wed 29 Jan 2025 15:41:42 +0000
asID: 61135
IP address blocks: 185.139.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 14:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:2c:a6:97:2a:3a:dd:c7:b4:53:f3:bf:88:a5:d5:52:92:a0:93:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jan 31 15:36:42 2024 GMT
Not After : Jan 29 15:41:42 2025 GMT
Subject: CN=5469AB16EC1627D7A4CB5B597482EFB183776329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:c7:5a:42:f3:b1:25:bf:8b:32:77:25:99:
30:57:8d:67:4f:a8:b2:b0:62:29:df:d2:41:a6:74:
c6:6b:ba:5d:ea:a7:46:dd:fe:ff:b6:ec:2e:c2:a3:
49:d2:3f:00:3b:d3:81:02:91:b7:d7:23:a3:6b:78:
0c:5a:3b:d4:14:f4:93:5a:28:3a:7b:13:39:ee:41:
d2:d2:d0:64:d8:c5:1a:0f:d1:01:43:64:33:f6:e3:
34:c2:ca:c9:17:99:82:b4:c5:ac:5d:d2:90:f9:cf:
f6:3c:45:77:b1:de:20:95:88:a4:db:4f:f5:37:0a:
80:a2:d5:0a:0b:c5:20:3c:ac:b5:04:c2:ba:9f:02:
0a:39:9b:b9:4d:a3:81:f2:0f:ba:68:d5:18:0a:5f:
4f:56:d1:34:a3:7d:00:9c:13:01:35:a1:ff:bd:84:
69:37:bc:ac:3a:f4:aa:3e:f3:67:92:df:bd:9a:53:
f2:6b:ba:53:b0:77:90:0c:ac:13:56:61:e0:61:ef:
50:75:19:d3:f5:11:4d:cf:b4:89:f6:e6:b0:ba:0a:
23:0d:63:4a:1e:50:56:d8:d4:04:5e:71:e4:4a:87:
83:0a:89:92:c9:7a:27:5e:71:d0:19:90:08:ea:ad:
62:7a:e6:d2:7f:f7:28:10:fb:9c:e1:46:15:f0:e1:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:AB:16:EC:16:27:D7:A4:CB:5B:59:74:82:EF:B1:83:77:63:29
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e203631313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.26.0/24
Signature Algorithm: sha256WithRSAEncryption
60:60:fb:94:11:fe:f8:dd:27:b5:e0:cf:42:8b:68:72:b3:1f:
10:52:95:fa:a8:3b:e4:52:a9:96:dd:00:f4:3f:b1:4d:10:51:
7a:b2:96:6f:58:b5:7b:03:62:f8:9d:a4:38:f1:a3:f8:15:9f:
fa:0c:41:14:ba:bc:66:bb:11:8f:56:1c:cf:ba:fb:30:59:0d:
a1:79:9d:fe:65:7e:bb:36:7f:b9:94:e3:02:1f:13:7a:e1:ed:
49:dd:ad:68:21:3b:1f:e7:85:72:d6:21:1e:ab:18:eb:e5:eb:
d7:7f:c7:02:a3:78:8b:60:60:45:c8:d1:47:23:eb:79:08:ef:
30:7a:b4:ab:5e:b6:05:d5:dc:ee:f9:f4:6c:4f:10:aa:33:33:
af:9b:e6:32:ac:84:68:e5:d9:e9:df:82:f6:8a:3d:e7:47:c2:
3e:38:57:b5:74:4d:03:7a:68:8f:b6:5e:0d:1b:9a:a0:38:92:
7a:82:72:58:77:fd:23:6f:86:2b:0c:3b:c7:64:c5:ce:37:6c:
1a:ee:bb:57:8a:aa:06:42:d7:d7:9a:f7:d3:7d:95:10:49:e3:
5f:0d:a8:55:be:01:c9:aa:35:f7:be:c5:ce:e1:02:a0:e6:86:
e0:33:3d:0d:ed:32:6c:13:bc:57:ff:69:9f:92:b8:f2:fb:0e:
70:0c:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 17:21:09 2024 by rpki-client on console-fra.rpki-client.org