Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3231372e3134302e302f32342d3234203d3e20383334.roa
File: 3138352e3231372e3134302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: IcmYSTUOazplqAh64qNdR64IV2RyxRICI+FndOVT9V4=
Subject key identifier: C0:B0:9A:2F:38:91:D6:82:FA:B8:31:A6:98:B2:AE:D2:EB:69:66:78
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 2AE036ACE1BEA78D1F1F70BDA6A33994E813D8C5
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3231372e3134302e302f32342d3234203d3e20383334.roa
Signing time: Sat 02 Nov 2024 10:49:43 +0000
ROA not before: Sat 02 Nov 2024 10:44:43 +0000
ROA not after: Sat 01 Nov 2025 10:49:43 +0000
asID: 834
IP address blocks: 185.217.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 18:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e0:36:ac:e1:be:a7:8d:1f:1f:70:bd:a6:a3:39:94:e8:13:d8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Nov 2 10:44:43 2024 GMT
Not After : Nov 1 10:49:43 2025 GMT
Subject: CN=C0B09A2F3891D682FAB831A698B2AED2EB696678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:4a:ba:fe:0f:b8:ef:c9:26:27:98:b2:71:
80:b6:ef:65:5b:54:6c:9c:cb:50:af:6d:b8:4d:51:
1d:c9:a9:13:3d:6e:ce:a9:2a:a1:ca:f3:8c:3a:d6:
f6:40:19:8d:8f:d2:cc:27:87:17:53:4c:38:fc:42:
8d:64:11:73:e3:79:7a:78:5c:34:a8:c4:7f:0d:ac:
26:40:00:f5:d5:0d:84:a7:a1:cd:ed:6b:24:fa:7d:
a4:a2:88:2c:3d:94:ee:ca:df:d8:1f:4d:ad:52:62:
fb:f6:7a:86:28:dd:df:44:bf:74:af:89:13:3b:8d:
30:d1:95:f6:b2:0f:54:b5:72:b4:d6:e2:d3:87:c1:
8b:26:d3:06:de:d7:27:4e:c6:c3:22:7e:6c:cd:99:
bc:eb:00:30:10:bc:32:c7:a0:f1:22:57:fc:c2:d2:
60:ee:5a:2e:e7:39:72:03:de:6e:64:25:ac:af:97:
6d:ac:fe:87:c4:a2:5d:f7:7b:ce:16:48:e6:e6:18:
04:c4:57:90:48:a9:08:d1:0e:fc:7a:af:d4:05:01:
f3:65:d2:9c:cb:85:6c:31:8e:82:be:8b:66:b4:f2:
78:fe:79:91:ce:50:57:d8:64:31:89:8b:76:b3:44:
00:e8:c7:21:d7:34:e8:b4:15:45:26:27:b2:8d:0d:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B0:9A:2F:38:91:D6:82:FA:B8:31:A6:98:B2:AE:D2:EB:69:66:78
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3231372e3134302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.140.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:63:55:ff:34:1e:a7:53:7b:87:2f:28:e1:95:ef:02:84:bf:
ac:5b:2a:b2:91:f4:e6:ea:e3:67:93:d7:19:c4:97:8f:44:e6:
ba:62:15:65:8c:23:8f:ba:b8:24:56:d4:56:3d:d7:cd:87:c0:
ce:d3:e5:58:5f:b5:ee:c9:9a:d0:34:00:86:0d:50:28:95:ad:
14:aa:41:e7:d9:bc:ac:a0:c0:44:0a:c9:e9:2b:99:2a:b0:da:
99:d5:4b:38:fc:ea:a6:e2:6a:3b:7f:ec:87:0a:a6:19:57:c6:
bc:f0:62:79:19:e6:ab:75:3c:97:8c:1d:78:5c:ae:33:07:bc:
e5:6d:74:d7:46:2c:f0:b8:03:4d:79:56:e3:06:24:b8:3c:ae:
00:3d:20:cb:7e:b2:b7:89:a6:3b:ab:37:b1:29:f8:00:64:19:
01:1c:6e:b6:75:61:b0:3c:4c:42:af:ba:d8:bd:0b:4d:0b:35:
12:af:67:87:f0:61:fc:d3:09:23:ab:fd:77:81:74:91:e9:d3:
df:be:df:a3:e1:a5:89:ae:d3:a2:3c:7b:d9:69:c0:75:c0:c6:
21:17:1a:e2:18:bc:fb:71:d9:07:37:9e:17:c6:10:16:72:18:
2c:b2:77:af:86:1d:32:0c:8a:0e:16:70:9b:8e:1e:12:bd:d5:
d4:db:01:6c
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 2 19:25:19 2024 by rpki-client on console-fra.rpki-client.org