Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e20383334.roa
File: 3138352e3133392e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Tcuw609JiD4X/WzHOOSwu3V+yv+1g2jHtnfX/K43RT4=
Subject key identifier: BE:19:25:26:32:88:56:DE:D5:BA:24:E4:3A:DA:C6:4E:33:59:94:94
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 30E068F239AA07E2DD8909954BA0FAFA2424DB5B
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e20383334.roa
Signing time: Tue 30 Apr 2024 00:02:06 +0000
ROA not before: Mon 29 Apr 2024 23:57:06 +0000
ROA not after: Tue 29 Apr 2025 00:02:06 +0000
asID: 834
IP address blocks: 185.139.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 14:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e0:68:f2:39:aa:07:e2:dd:89:09:95:4b:a0:fa:fa:24:24:db:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Apr 29 23:57:06 2024 GMT
Not After : Apr 29 00:02:06 2025 GMT
Subject: CN=BE192526328856DED5BA24E43ADAC64E33599494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:2d:25:bd:05:ed:55:9b:a0:82:09:55:3c:
45:69:48:e6:a5:49:a0:88:61:e5:ea:a6:fe:d2:9a:
86:5d:9a:ac:74:84:0a:d1:87:71:2b:24:29:6c:73:
7f:fe:ac:64:c7:4a:58:9a:e4:1f:78:17:01:01:d1:
e2:c1:5c:a5:ef:31:03:a0:61:68:fa:33:b9:26:56:
04:58:f9:16:28:8e:62:58:52:66:dd:d6:a7:4d:94:
26:ec:9c:21:a1:32:8f:49:e9:3a:0f:da:39:1d:33:
e4:21:0f:1b:51:82:5e:fe:cd:b1:59:50:84:55:96:
91:df:dc:a3:d7:5d:4a:23:85:56:19:0b:2d:fc:7c:
26:b5:ca:a5:b2:24:e9:24:76:b6:0d:53:e7:ef:85:
7d:23:d1:fd:64:8f:b6:c2:ad:bb:37:f4:6c:5e:b5:
89:33:fe:be:21:e2:91:cf:ca:27:76:85:df:86:cc:
c0:e9:8f:62:3f:57:55:d1:81:2c:2e:d0:ad:f2:67:
f8:02:44:1f:fe:fe:89:d0:ac:d6:73:0a:eb:17:80:
5c:4b:42:10:db:2a:e1:c1:e8:94:23:ab:a4:76:53:
c0:bb:d8:56:8e:34:c6:e2:c9:19:80:a5:7d:9c:ca:
ed:88:76:b7:39:17:7e:13:25:28:cb:d2:d1:76:f3:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:19:25:26:32:88:56:DE:D5:BA:24:E4:3A:DA:C6:4E:33:59:94:94
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.26.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5d:88:80:b3:20:6d:83:67:f5:84:09:50:9d:51:58:ac:5b:
ea:3d:44:9f:a0:20:68:1a:45:81:00:5f:c2:65:3a:00:51:f3:
3a:c2:ca:ad:3f:20:8b:8a:95:22:d7:62:d1:e9:26:34:0f:1d:
e8:51:9a:95:82:84:00:9b:d9:c0:5b:b6:5b:ef:f6:e5:c4:28:
cc:ad:86:86:5b:4a:6f:2d:bf:08:50:b7:7d:65:ea:99:6d:ef:
09:23:8e:a8:fa:0e:0e:86:37:6e:16:37:2a:83:d1:fb:33:91:
1e:d6:bb:30:22:e8:b5:6b:d2:46:c4:c8:7e:89:60:24:b0:42:
11:20:69:3a:9e:c2:16:33:73:43:6c:ec:29:92:8b:79:0a:b8:
30:07:b4:e0:ec:76:81:47:8a:4d:c4:ed:b5:62:39:6e:ee:c3:
dd:a4:4c:ed:4c:95:3d:2c:a4:41:a8:66:11:a4:46:25:52:2f:
ae:0d:f1:76:63:c3:54:97:14:e9:8b:57:b8:29:bb:e6:5f:a1:
96:a5:71:8e:7a:b1:06:b3:a2:65:71:69:1a:77:68:cc:c5:1e:
72:63:ee:1c:34:7f:14:27:25:ea:0f:5f:d5:f3:d7:45:10:3f:
3e:04:ce:54:a7:6f:22:98:27:49:e9:fe:23:9f:4c:a2:5a:51:
6b:c3:f6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 17:57:50 2024 by rpki-client on console-fra.rpki-client.org