Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20323031353735.roa
File: 3138382e3136342e3135342e302f32342d3234203d3e20323031353735.roa (raw, json)
Hash identifier: aytUX00PlpYrDRqMezXx0Y1U34Pe/1tS3sKkKC6yZ00=
Subject key identifier: A5:FB:FC:F7:45:51:57:18:42:CD:9E:55:E6:A8:95:1E:BB:32:BA:31
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 15ABF66E667B15C4F4A3A34EEB6797B1F3FB714E
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20323031353735.roa
Signing time: Thu 28 Dec 2023 02:44:49 +0000
ROA not before: Thu 28 Dec 2023 02:39:49 +0000
ROA not after: Thu 26 Dec 2024 02:44:49 +0000
asID: 201575
IP address blocks: 188.164.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ab:f6:6e:66:7b:15:c4:f4:a3:a3:4e:eb:67:97:b1:f3:fb:71:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Dec 28 02:39:49 2023 GMT
Not After : Dec 26 02:44:49 2024 GMT
Subject: CN=A5FBFCF74551571842CD9E55E6A8951EBB32BA31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:9a:c6:67:f2:e3:c1:e3:29:5d:6d:35:31:
10:d7:b1:b6:1f:64:93:7b:3d:71:de:32:42:18:cd:
71:ca:8a:72:cc:55:3b:87:ba:94:58:df:ea:6e:54:
9c:99:09:4e:be:f3:8e:66:30:35:a3:06:b1:55:13:
b8:3f:4c:3c:23:b8:19:11:25:71:ce:8d:dc:49:81:
8e:23:9b:e8:1b:87:89:53:15:a1:cb:ef:07:e5:b0:
4e:9b:3c:73:18:6b:ca:32:1d:2c:0a:8f:d6:fb:12:
48:ff:17:15:23:d7:b2:b3:a5:5c:c8:08:a0:8e:34:
65:cf:f1:16:d5:46:6d:21:26:ba:ab:53:3b:23:b6:
94:54:86:0c:68:99:d4:28:6f:a9:db:48:76:57:17:
f9:b2:45:71:72:5d:f6:4b:f9:d4:eb:19:6e:a8:b8:
64:5b:51:7f:55:ed:22:94:56:5b:04:90:5f:1c:7b:
49:d0:cb:1c:81:de:66:a7:da:53:58:7a:c3:38:d6:
62:3c:92:0f:ba:bf:10:07:5a:1e:54:ca:06:88:39:
bf:50:4b:81:97:4b:52:a2:8d:d7:3d:55:94:c7:60:
f0:c2:ae:38:58:c0:f7:24:5e:b5:4c:d6:87:7c:3e:
0c:9b:00:fe:f3:5f:3e:d1:e3:14:d0:e8:b7:26:5d:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FB:FC:F7:45:51:57:18:42:CD:9E:55:E6:A8:95:1E:BB:32:BA:31
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20323031353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ad:b3:b1:d7:b5:f2:1f:16:69:2a:2e:a1:6c:bc:ea:e6:6a:
8c:46:a2:d0:c3:4d:e0:c4:33:4d:3e:b0:b7:37:a7:3a:ec:b9:
30:97:42:2f:42:de:9f:c8:6a:0f:7c:02:c9:b4:7d:52:17:12:
97:6f:ad:e2:3a:90:41:26:4f:eb:49:53:81:3c:aa:52:e1:31:
14:98:3f:49:da:87:6e:81:e0:af:e3:0f:a3:59:3b:32:84:36:
73:02:2a:7c:dc:52:92:db:1b:ff:26:ef:ec:58:bf:dc:b3:12:
78:a5:c1:5a:cb:ed:ee:b0:24:1a:28:bd:50:74:2b:26:e5:b1:
f1:5b:18:cf:b5:28:94:6b:85:96:1e:cf:66:dc:f0:58:3f:9d:
fa:59:92:80:56:58:90:c2:05:ae:80:05:3a:7a:e9:97:15:cd:
eb:87:0f:3f:50:d2:3a:67:95:d6:1f:e7:20:8e:33:ca:96:95:
26:f7:0d:bc:fb:2b:8c:01:de:12:87:69:2a:80:c8:a9:9d:2d:
be:d9:db:b2:fd:77:7c:f9:61:9d:c7:8c:32:50:5d:66:a3:28:
e4:79:60:1b:18:d4:54:e0:2b:4a:c0:df:ac:c0:59:3f:cb:8f:
e6:b5:56:8f:2e:db:6b:f4:ff:d2:e0:1b:5c:ff:8a:cf:79:60:
f8:d2:cb:0b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUFav2bmZ7FcT0o6NO62eXsfP7cU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz
MGY3YzRjYTAeFw0yMzEyMjgwMjM5NDlaFw0yNDEyMjYwMjQ0NDlaMDMxMTAvBgNV
BAMTKEE1RkJGQ0Y3NDU1MTU3MTg0MkNEOUU1NUU2QTg5NTFFQkIzMkJBMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUsJrGZ/LjweMpXW01MRDXsbYf
ZJN7PXHeMkIYzXHKinLMVTuHupRY3+puVJyZCU6+845mMDWjBrFVE7g/TDwjuBkR
JXHOjdxJgY4jm+gbh4lTFaHL7wflsE6bPHMYa8oyHSwKj9b7Ekj/FxUj17KzpVzI
CKCONGXP8RbVRm0hJrqrUzsjtpRUhgxomdQob6nbSHZXF/myRXFyXfZL+dTrGW6o
uGRbUX9V7SKUVlsEkF8ce0nQyxyB3man2lNYesM41mI8kg+6vxAHWh5UygaIOb9Q
S4GXS1Kijdc9VZTHYPDCrjhYwPckXrVM1od8PgybAP7zXz7R4xTQ6LcmXYuBAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUpfv890VRVxhCzZ5V5qiVHrsyujEwHwYDVR0j
BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj
M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE
M3hNby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAt
ZjZlMC00MTBjLWJjOTktYWYwOTIxZDFjM2E0LzAvMzEzODM4MmUzMTM2MzQyZTMx
MzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTM1MzczNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALykmjANBgkqhkiG9w0BAQsFAAOCAQEAIq2zsde18h8WaSouoWy86uZqjEai
0MNN4MQzTT6wtzenOuy5MJdCL0Len8hqD3wCybR9UhcSl2+t4jqQQSZP60lTgTyq
UuExFJg/SdqHboHgr+MPo1k7MoQ2cwIqfNxSktsb/ybv7Fi/3LMSeKXBWsvt7rAk
Gii9UHQrJuWx8VsYz7UolGuFlh7PZtzwWD+d+lmSgFZYkMIFroAFOnrplxXN64cP
P1DSOmeV1h/nII4zypaVJvcNvPsrjAHeEodpKoDIqZ0tvtnbsv13fPlhnceMMlBd
ZqMo5HlgGxjUVOArSsDfrMBZP8uP5rVWjy7ba/T/0uAbXP+Kz3lg+NLLCw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org