Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135392e302f32342d3234203d3e20333937353633.roa
File: 3138382e3136342e3135392e302f32342d3234203d3e20333937353633.roa (raw, json)
Hash identifier: ScevirL+vuiSSfhJIoIxA+r7CB+E7iQNNRJVWt3wchM=
Subject key identifier: 48:27:52:A3:19:AE:AD:79:D8:8E:5C:29:DF:48:60:EF:E0:77:FE:8A
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 5CA5EAE76CF6B550153E9F345D450FA9D182B21B
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135392e302f32342d3234203d3e20333937353633.roa
Signing time: Tue 20 Jun 2023 10:58:29 +0000
ROA not before: Tue 20 Jun 2023 10:53:29 +0000
ROA not after: Tue 18 Jun 2024 10:58:29 +0000
asID: 397563
IP address blocks: 188.164.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 18:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a5:ea:e7:6c:f6:b5:50:15:3e:9f:34:5d:45:0f:a9:d1:82:b2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Jun 20 10:53:29 2023 GMT
Not After : Jun 18 10:58:29 2024 GMT
Subject: CN=482752A319AEAD79D88E5C29DF4860EFE077FE8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:1c:6f:98:38:f7:ff:0b:dd:f5:57:85:f2:
6f:e0:52:0a:92:2e:5c:a9:ed:23:d0:6e:61:76:5f:
7e:ba:65:ca:64:fb:5e:31:26:e7:20:3e:bb:bd:38:
94:40:2a:b7:39:ed:a7:56:f2:37:a7:0f:25:69:72:
13:6e:c7:c6:b2:69:19:6c:df:d3:36:66:b6:14:4b:
47:d2:45:60:d2:7f:b8:6d:69:78:f3:b0:1e:2e:0b:
f9:44:ba:1e:a8:4a:3a:8a:97:b8:e8:c4:73:cf:5f:
2e:be:bc:22:d4:34:ad:6b:21:4c:50:34:8c:37:40:
db:00:44:c8:15:5f:b5:55:24:c8:ab:10:97:cf:83:
94:50:0c:26:e0:fd:cc:27:22:9d:48:c9:c7:85:3b:
47:48:ac:2a:3d:0a:f6:d5:34:a4:b0:54:2b:ca:ed:
eb:05:80:79:86:64:0a:98:9c:3b:d3:31:2f:26:51:
10:fc:68:8b:3f:7a:ef:a2:9e:cf:ef:c9:b4:60:8c:
64:db:23:e3:7e:19:9d:44:e1:65:55:62:1d:f4:e0:
31:de:fd:c0:53:18:e3:24:d6:20:8c:ed:46:66:4c:
7f:f7:9e:fb:3b:b2:58:b8:fb:c4:74:f8:93:f5:56:
84:2a:eb:ed:7d:7b:4b:ad:21:87:ae:8e:56:60:19:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:27:52:A3:19:AE:AD:79:D8:8E:5C:29:DF:48:60:EF:E0:77:FE:8A
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135392e302f32342d3234203d3e20333937353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.159.0/24
Signature Algorithm: sha256WithRSAEncryption
29:bc:07:b5:0f:c8:fa:ea:a5:63:28:75:b3:c6:d9:d6:78:71:
7b:bd:dd:84:9c:21:bd:2e:b0:f7:6b:e4:f8:2b:66:ba:b4:af:
ec:7f:b3:f8:57:0d:02:1b:d6:a4:88:61:88:a4:cb:fc:80:dc:
ed:f6:dc:50:6d:d7:b7:45:7c:25:8e:c5:04:4b:1e:08:b6:02:
2b:e8:45:fc:83:b6:fd:23:06:0d:e6:24:62:ea:cf:4f:cf:dc:
62:ae:79:63:40:83:33:99:ec:fc:f2:dd:13:91:b8:12:45:67:
4a:bc:e4:a1:5e:1c:86:86:56:48:f7:52:ea:c7:be:87:2e:d4:
c5:57:ca:24:b7:63:bc:77:3b:ee:ec:50:f2:92:c3:ea:68:05:
96:22:ad:26:f2:03:bc:ec:a8:34:1d:8f:5f:6e:96:01:5d:fa:
88:21:e2:2b:da:5e:ae:e8:34:90:1f:b7:f2:d9:78:ae:af:d8:
d1:86:72:71:9b:aa:7c:ad:aa:b1:f6:ee:c7:f0:31:4f:2c:07:
92:b0:80:94:95:7e:c7:85:cb:15:da:8b:1f:13:42:d1:df:fe:
ae:60:5a:1f:06:81:41:fc:5a:c5:d6:b0:e6:45:7f:84:74:c5:
b0:a4:2f:2e:5d:2d:9d:54:61:10:c2:0d:39:7d:13:62:11:87:
a1:1b:70:16
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUXKXq52z2tVAVPp80XUUPqdGCshswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz
MGY3YzRjYTAeFw0yMzA2MjAxMDUzMjlaFw0yNDA2MTgxMDU4MjlaMDMxMTAvBgNV
BAMTKDQ4Mjc1MkEzMTlBRUFENzlEODhFNUMyOURGNDg2MEVGRTA3N0ZFOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1xxvmDj3/wvd9VeF8m/gUgqS
Llyp7SPQbmF2X366Zcpk+14xJucgPru9OJRAKrc57adW8jenDyVpchNux8ayaRls
39M2ZrYUS0fSRWDSf7htaXjzsB4uC/lEuh6oSjqKl7joxHPPXy6+vCLUNK1rIUxQ
NIw3QNsARMgVX7VVJMirEJfPg5RQDCbg/cwnIp1IyceFO0dIrCo9CvbVNKSwVCvK
7esFgHmGZAqYnDvTMS8mURD8aIs/eu+ins/vybRgjGTbI+N+GZ1E4WVVYh304DHe
/cBTGOMk1iCM7UZmTH/3nvs7sli4+8R0+JP1VoQq6+19e0utIYeujlZgGcExAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUSCdSoxmurXnYjlwp30hg7+B3/oowHwYDVR0j
BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj
M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE
M3hNby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAt
ZjZlMC00MTBjLWJjOTktYWYwOTIxZDFjM2E0LzAvMzEzODM4MmUzMTM2MzQyZTMx
MzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNzM1MzYzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALyknzANBgkqhkiG9w0BAQsFAAOCAQEAKbwHtQ/I+uqlYyh1s8bZ1nhxe73d
hJwhvS6w92vk+CtmurSv7H+z+FcNAhvWpIhhiKTL/IDc7fbcUG3Xt0V8JY7FBEse
CLYCK+hF/IO2/SMGDeYkYurPT8/cYq55Y0CDM5ns/PLdE5G4EkVnSrzkoV4choZW
SPdS6se+hy7UxVfKJLdjvHc77uxQ8pLD6mgFliKtJvIDvOyoNB2PX26WAV36iCHi
K9perug0kB+38tl4rq/Y0YZycZuqfK2qsfbux/AxTywHkrCAlJV+x4XLFdqLHxNC
0d/+rmBaHwaBQfxaxdaw5kV/hHTFsKQvLl0tnVRhEMINOX0TYhGHoRtwFg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org