Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20323132313530.roa
File: 38352e3233372e3231312e302f32342d3234203d3e20323132313530.roa (raw, json)
Hash identifier: r1BNelFbqsHvEncAxxEw6rLvZOszzOwvwsctKTH9N8Q=
Subject key identifier: 19:25:E8:BA:E7:94:B6:0F:27:40:93:11:64:81:F0:AE:2A:27:70:A8
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 4262A9F6A5BC9583426FD1D536A360B2742F4DA6
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20323132313530.roa
Signing time: Fri 22 Mar 2024 16:12:51 +0000
ROA not before: Fri 22 Mar 2024 16:07:51 +0000
ROA not after: Fri 21 Mar 2025 16:12:51 +0000
asID: 212150
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:62:a9:f6:a5:bc:95:83:42:6f:d1:d5:36:a3:60:b2:74:2f:4d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Mar 22 16:07:51 2024 GMT
Not After : Mar 21 16:12:51 2025 GMT
Subject: CN=1925E8BAE794B60F274093116481F0AE2A2770A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:02:69:be:83:a6:2e:6a:c3:ac:2f:7d:03:
cf:2f:da:67:58:4b:c1:e5:06:4d:ac:e6:31:2d:d9:
11:35:1c:9d:47:bf:a4:e5:6a:c7:98:9c:78:ca:3d:
bb:13:77:4f:a9:46:28:3c:09:ab:3c:86:ed:36:5f:
ab:e2:69:12:c5:05:dd:e4:57:cf:4c:6b:c9:24:31:
3d:2f:ca:6f:43:63:05:03:4c:f7:66:2c:31:da:09:
44:d4:3f:e1:77:ae:68:9d:01:80:1e:29:d8:71:aa:
d5:a0:8e:f3:b9:c4:60:91:56:98:b1:40:b0:6c:30:
1f:3d:2c:2a:2c:0c:c9:50:21:0f:09:d0:c0:44:c4:
30:97:2b:49:3f:f5:26:1a:f4:17:8a:75:3e:fe:89:
66:fb:39:9c:f8:bd:01:f6:57:96:db:4b:f4:cc:33:
4d:ea:7a:34:a8:ab:6f:11:c9:0e:d4:de:3a:f2:a9:
1f:8e:8e:04:d0:13:a1:4b:00:29:90:2a:e6:82:a7:
36:76:3d:b5:03:2a:cd:96:07:74:6d:4d:fc:5a:35:
f5:d2:22:0b:76:f8:d2:a8:95:0c:e0:7e:68:0e:b9:
f6:a7:37:d5:8b:ec:33:bc:e2:b5:ca:73:db:86:f3:
83:48:6c:4f:6e:14:15:a3:58:89:60:90:58:7a:33:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:E8:BA:E7:94:B6:0F:27:40:93:11:64:81:F0:AE:2A:27:70:A8
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20323132313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7b:fa:d9:35:4a:06:f8:11:a8:3b:49:86:3b:f7:7f:22:b2:
2d:e8:24:8a:05:56:7a:c9:72:b0:30:10:af:e2:2a:be:48:78:
97:8b:65:8e:b3:6a:73:97:1d:f8:80:43:25:31:6f:76:ea:45:
91:4e:c8:6b:52:f5:73:d8:02:ae:82:8e:b2:e2:ce:3e:23:69:
ca:2a:43:07:63:2d:e7:35:b7:43:f9:85:2b:06:95:4e:34:1e:
b3:b7:8e:ca:9b:d2:71:82:2f:41:62:5b:13:85:2c:8f:58:d0:
84:52:f0:08:41:3a:19:88:dd:b1:d4:9e:7f:f9:dc:56:ee:b3:
e8:0d:c6:b0:81:89:be:f7:8d:c9:d9:7b:72:45:20:26:a5:39:
1e:2d:df:ba:f3:8f:5b:5c:e8:61:91:48:b0:68:c0:44:45:ec:
2d:57:87:4b:a0:36:16:e6:f5:0e:b0:b4:4b:a0:fd:4d:6b:e3:
c1:29:38:cb:e0:10:ee:29:1e:1e:8f:d0:77:af:18:48:17:8b:
ee:9f:87:78:62:26:fe:de:99:3c:28:d5:3d:4b:4a:6d:82:6e:
14:7f:c7:1b:5f:93:8a:4f:67:26:22:3a:8d:0d:da:b2:4b:43:
9a:ea:b7:10:3e:be:b4:0e:ce:0a:56:a2:e0:15:3e:08:94:53:
fb:2c:60:c1
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQmKp9qW8lYNCb9HVNqNgsnQvTaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDAzMjIxNjA3NTFaFw0yNTAzMjExNjEyNTFaMDMxMTAvBgNV
BAMTKDE5MjVFOEJBRTc5NEI2MEYyNzQwOTMxMTY0ODFGMEFFMkEyNzcwQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTQJpvoOmLmrDrC99A88v2mdY
S8HlBk2s5jEt2RE1HJ1Hv6TlaseYnHjKPbsTd0+pRig8Cas8hu02X6viaRLFBd3k
V89Ma8kkMT0vym9DYwUDTPdmLDHaCUTUP+F3rmidAYAeKdhxqtWgjvO5xGCRVpix
QLBsMB89LCosDMlQIQ8J0MBExDCXK0k/9SYa9BeKdT7+iWb7OZz4vQH2V5bbS/TM
M03qejSoq28RyQ7U3jryqR+OjgTQE6FLACmQKuaCpzZ2PbUDKs2WB3RtTfxaNfXS
Igt2+NKolQzgfmgOufanN9WL7DO84rXKc9uG84NIbE9uFBWjWIlgkFh6M00rAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUGSXouueUtg8nQJMRZIHwrioncKgwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzgzNTJlMzIzMzM3MmUzMjMx
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMTM1MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABV7dMwDQYJKoZIhvcNAQELBQADggEBAF57+tk1Sgb4Eag7SYY7938isi3oJIoF
VnrJcrAwEK/iKr5IeJeLZY6zanOXHfiAQyUxb3bqRZFOyGtS9XPYAq6CjrLizj4j
acoqQwdjLec1t0P5hSsGlU40HrO3jsqb0nGCL0FiWxOFLI9Y0IRS8AhBOhmI3bHU
nn/53Fbus+gNxrCBib73jcnZe3JFICalOR4t37rzj1tc6GGRSLBowERF7C1Xh0ug
Nhbm9Q6wtEug/U1r48EpOMvgEO4pHh6P0HevGEgXi+6fh3hiJv7emTwo1T1LSm2C
bhR/xxtfk4pPZyYiOo0N2rJLQ5rqtxA+vrQOzgpWouAVPgiUU/ssYME=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:36 2025 by rpki-client