Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35372e302f32342d3234203d3e203631333137.roa
File: 38352e3135382e35372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: tmatPGzMWIm6PbyCbdo+mM6O730/ecy2mG6MYmO9wHg=
Subject key identifier: 7A:30:24:EE:5C:B5:46:A3:3E:E9:AD:95:3C:E8:A8:FD:1F:06:ED:F9
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 4145DF5E250B9BE372AE202838DB2E5B28049563
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35372e302f32342d3234203d3e203631333137.roa
Signing time: Wed 09 Oct 2024 09:43:22 +0000
ROA not before: Wed 09 Oct 2024 09:38:22 +0000
ROA not after: Wed 08 Oct 2025 09:43:22 +0000
asID: 61317
IP address blocks: 85.158.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 13:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:45:df:5e:25:0b:9b:e3:72:ae:20:28:38:db:2e:5b:28:04:95:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Oct 9 09:38:22 2024 GMT
Not After : Oct 8 09:43:22 2025 GMT
Subject: CN=7A3024EE5CB546A33EE9AD953CE8A8FD1F06EDF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:89:12:e1:66:4e:67:07:21:7e:e1:7c:c5:
68:14:cf:4e:ef:0a:83:bb:ae:8e:b6:e9:b1:f8:ab:
a7:6e:7d:bf:5a:05:17:ff:af:2e:fd:c4:3b:e0:0f:
e3:5e:aa:4b:67:69:ea:2d:ed:ae:98:66:48:61:88:
0a:5b:0f:2f:83:c9:1c:d0:38:0b:05:29:a3:f8:07:
b9:aa:3d:d5:ea:9c:2e:bf:68:41:bb:92:6d:a9:e8:
75:82:f6:b6:49:71:59:9b:a9:20:f3:38:70:70:d8:
c6:86:6b:69:60:cf:20:06:05:65:2b:18:63:3f:2c:
fa:b1:81:8e:5d:e0:87:f4:40:ea:9f:8a:d8:2e:e3:
1d:fa:0d:7e:c1:ea:b9:46:59:f0:70:f5:57:fb:73:
c5:88:06:e3:c4:74:25:27:a6:34:4e:d2:ad:54:05:
d4:83:70:67:7d:0e:49:45:ad:2f:2f:cb:e6:4c:fd:
b5:63:cc:9f:bb:ff:32:97:8b:ec:fd:d7:28:6f:6c:
86:eb:84:04:4f:88:d6:0f:95:a7:66:94:2f:c7:55:
95:f2:eb:01:e6:de:5d:3f:26:02:a6:dc:49:d7:6b:
94:9f:4b:79:4f:b2:5e:9a:14:6f:e0:41:df:b0:7e:
b9:59:73:7f:11:7e:f7:64:cb:66:77:c6:fd:59:59:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:30:24:EE:5C:B5:46:A3:3E:E9:AD:95:3C:E8:A8:FD:1F:06:ED:F9
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f7:6f:15:6a:2c:28:7b:0d:c7:b8:15:ca:87:ba:a9:ca:69:
a0:86:06:ce:26:4a:22:c7:21:ef:df:32:96:65:df:0c:d9:46:
d7:4d:7c:85:49:91:e8:e0:36:7f:4a:5b:ca:61:36:59:0b:06:
2d:25:2b:81:83:be:f7:82:a0:6a:fb:a7:3c:b7:c5:7a:0b:69:
cf:34:51:59:6d:74:c6:60:cd:9b:79:06:55:21:4c:5a:4d:9d:
5f:3d:92:5b:61:f3:fc:5b:fc:a6:f7:31:f6:fd:38:6f:3c:50:
51:36:d1:fc:2b:31:89:fd:1c:8e:40:c9:9b:e4:db:f3:66:8d:
6a:0e:2c:83:e5:28:64:09:22:98:37:92:a8:6e:71:57:4f:ed:
6e:3b:e3:b8:26:9c:50:99:60:d6:c3:79:7e:83:3f:b9:f4:f2:
48:2a:ad:d8:63:47:b1:72:c6:b5:3d:c8:9a:cb:02:08:1a:06:
fa:c8:e9:25:58:e1:ce:67:76:fe:c8:c2:5f:83:f4:dd:ae:b0:
69:a4:02:8b:8b:70:e8:65:90:2f:58:b6:7f:e5:0d:43:9a:a4:
cf:67:d6:e5:39:69:cd:56:22:1d:6b:a7:27:2a:d3:e3:fb:79:
b6:6a:da:cb:1c:6e:6e:42:e6:00:f9:bb:4d:b1:b8:0e:02:96:
e5:e3:c1:09
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUQUXfXiULm+NyriAoONsuWygElWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDEwMDkwOTM4MjJaFw0yNTEwMDgwOTQzMjJaMDMxMTAvBgNV
BAMTKDdBMzAyNEVFNUNCNTQ2QTMzRUU5QUQ5NTNDRThBOEZEMUYwNkVERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3y4kS4WZOZwchfuF8xWgUz07v
CoO7ro626bH4q6dufb9aBRf/ry79xDvgD+Neqktnaeot7a6YZkhhiApbDy+DyRzQ
OAsFKaP4B7mqPdXqnC6/aEG7km2p6HWC9rZJcVmbqSDzOHBw2MaGa2lgzyAGBWUr
GGM/LPqxgY5d4If0QOqfitgu4x36DX7B6rlGWfBw9Vf7c8WIBuPEdCUnpjRO0q1U
BdSDcGd9DklFrS8vy+ZM/bVjzJ+7/zKXi+z91yhvbIbrhARPiNYPladmlC/HVZXy
6wHm3l0/JgKm3EnXa5SfS3lPsl6aFG/gQd+wfrlZc38Rfvdky2Z3xv1ZWbFVAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUejAk7ly1RqM+6a2VPOio/R8G7fkwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzgzNTJlMzEzNTM4MmUzNTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFWe
OTANBgkqhkiG9w0BAQsFAAOCAQEAevdvFWosKHsNx7gVyoe6qcppoIYGziZKIsch
798ylmXfDNlG1018hUmR6OA2f0pbymE2WQsGLSUrgYO+94KgavunPLfFegtpzzRR
WW10xmDNm3kGVSFMWk2dXz2SW2Hz/Fv8pvcx9v04bzxQUTbR/Csxif0cjkDJm+Tb
82aNag4sg+UoZAkimDeSqG5xV0/tbjvjuCacUJlg1sN5foM/ufTySCqt2GNHsXLG
tT3ImssCCBoG+sjpJVjhzmd2/sjCX4P03a6waaQCi4tw6GWQL1i2f+UNQ5qkz2fW
5TlpzVYiHWunJyrT4/t5tmrayxxubkLmAPm7TbG4DgKW5ePBCQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:14 2025 by rpki-client