Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33322e302f32342d3234203d3e203335373538.roa
File: 3138352e39332e33322e302f32342d3234203d3e203335373538.roa (raw, json)
Hash identifier: DqFg+r3yKL4O+1e3VooKeQMIZScn5Cor2GuhgwDKjTQ=
Subject key identifier: 20:40:87:61:7E:50:6C:E7:F8:AB:4B:D0:D7:9C:F1:BD:19:38:78:C8
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 4F75FB380C9692843731CE6D3D06AB159C673BC1
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33322e302f32342d3234203d3e203335373538.roa
Signing time: Wed 08 Nov 2023 09:21:23 +0000
ROA not before: Wed 08 Nov 2023 09:16:23 +0000
ROA not after: Wed 06 Nov 2024 09:21:23 +0000
asID: 35758
IP address blocks: 185.93.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:75:fb:38:0c:96:92:84:37:31:ce:6d:3d:06:ab:15:9c:67:3b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:16:23 2023 GMT
Not After : Nov 6 09:21:23 2024 GMT
Subject: CN=204087617E506CE7F8AB4BD0D79CF1BD193878C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:ca:af:ea:87:c7:f2:17:6e:cc:cf:bb:3f:
cf:7e:c8:22:d7:55:74:91:80:19:82:24:99:8f:ed:
c5:a5:58:f2:d2:97:e4:79:ab:f0:6f:6e:74:6c:2b:
e3:df:48:82:31:ed:cd:a7:18:29:95:10:2f:75:0b:
84:76:7b:8e:a5:7f:72:d8:09:14:a0:3e:f8:8a:6d:
64:64:17:bc:c7:f6:7a:1c:1d:e7:1b:8e:df:21:f1:
b1:79:c6:9c:3b:c8:b4:f1:c7:22:7c:1b:f2:1e:f5:
31:48:6d:7f:25:19:f6:28:46:e9:fd:cb:38:cd:24:
7a:ba:76:fa:84:53:19:a6:50:44:36:24:1b:87:6c:
28:99:69:dc:3a:2b:a5:29:b6:c4:a5:d1:4c:70:92:
1c:c5:2f:24:a8:20:43:20:9a:ff:ca:b7:d9:65:73:
8c:5f:e4:9d:28:8f:ea:9f:c7:e2:cb:e4:b2:bb:83:
e2:11:52:d9:d2:04:34:c6:e1:d8:58:6d:23:8c:ae:
8a:d0:08:33:f5:a5:b2:10:7b:1a:8e:f5:32:b8:d3:
0d:13:83:45:b6:8c:60:53:1c:b8:9e:18:84:07:b9:
b2:b6:25:74:1e:96:06:29:cb:78:95:bc:c6:da:40:
34:88:07:2f:69:99:20:a1:8d:30:81:86:10:75:02:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:40:87:61:7E:50:6C:E7:F8:AB:4B:D0:D7:9C:F1:BD:19:38:78:C8
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33322e302f32342d3234203d3e203335373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
25:99:c7:0b:66:7c:cc:e7:a6:23:5e:97:eb:9b:f3:2b:0b:09:
ed:29:28:08:47:21:fa:69:5e:ba:32:2a:3c:d7:83:2a:60:9a:
b0:e3:54:fd:22:9d:0b:15:93:c7:01:08:97:e2:c0:bf:e1:a5:
c9:43:9d:b7:68:a0:33:6d:1f:bc:e6:eb:6f:6e:78:44:79:5a:
db:64:a8:e2:70:35:20:5a:fb:91:32:af:b8:d6:74:6d:f5:e3:
df:0c:9a:8f:b2:28:84:b8:44:59:d2:bf:89:1b:09:71:be:6c:
b6:5a:a1:e9:77:30:65:ef:8b:e1:3c:4e:d8:c9:cc:d4:56:40:
dd:0c:cf:3e:76:94:8e:2d:ae:99:d7:dd:06:b5:37:9d:01:98:
ae:ec:b7:c7:f3:d2:35:99:df:a5:08:a5:96:04:bd:c7:78:27:
4f:c2:f0:10:c1:08:c0:f2:36:f9:18:7b:27:8e:d1:54:ad:ab:
5e:bb:06:bf:21:04:dd:17:59:cf:5e:2c:81:eb:8b:73:5d:9a:
40:9a:26:e5:16:bd:b1:6c:ca:e5:a0:8a:3c:d9:07:95:ef:d6:
a0:96:63:b6:13:3e:3d:44:50:d6:d1:51:96:89:7b:63:88:58:
c5:6f:cf:00:f1:fc:55:3f:d2:83:3f:20:fd:e4:55:67:13:00:
69:5c:a6:79
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUT3X7OAyWkoQ3Mc5tPQarFZxnO8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yMzExMDgwOTE2MjNaFw0yNDExMDYwOTIxMjNaMDMxMTAvBgNV
BAMTKDIwNDA4NzYxN0U1MDZDRTdGOEFCNEJEMEQ3OUNGMUJEMTkzODc4QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjE8qv6ofH8hduzM+7P89+yCLX
VXSRgBmCJJmP7cWlWPLSl+R5q/BvbnRsK+PfSIIx7c2nGCmVEC91C4R2e46lf3LY
CRSgPviKbWRkF7zH9nocHecbjt8h8bF5xpw7yLTxxyJ8G/Ie9TFIbX8lGfYoRun9
yzjNJHq6dvqEUxmmUEQ2JBuHbCiZadw6K6UptsSl0UxwkhzFLySoIEMgmv/Kt9ll
c4xf5J0oj+qfx+LL5LK7g+IRUtnSBDTG4dhYbSOMrorQCDP1pbIQexqO9TK40w0T
g0W2jGBTHLieGIQHubK2JXQelgYpy3iVvMbaQDSIBy9pmSChjTCBhhB1AtMbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUIECHYX5QbOf4q0vQ15zxvRk4eMgwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzODM1MmUzOTMzMmUzMzMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNTM3MzUzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALld
IDANBgkqhkiG9w0BAQsFAAOCAQEAJZnHC2Z8zOemI16X65vzKwsJ7SkoCEch+mle
ujIqPNeDKmCasONU/SKdCxWTxwEIl+LAv+GlyUOdt2igM20fvObrb254RHla22So
4nA1IFr7kTKvuNZ0bfXj3wyaj7IohLhEWdK/iRsJcb5stlqh6XcwZe+L4TxO2MnM
1FZA3QzPPnaUji2umdfdBrU3nQGYruy3x/PSNZnfpQillgS9x3gnT8LwEMEIwPI2
+Rh7J47RVK2rXrsGvyEE3RdZz14sgeuLc12aQJom5Ra9sWzK5aCKPNkHle/WoJZj
thM+PURQ1tFRlol7Y4hYxW/PAPH8VT/Sgz8g/eRVZxMAaVymeQ==
-----END CERTIFICATE-----
Generated at Fri Jan 26 01:41:52 2024 by rpki-client on console-fra.rpki-client.org