Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3231372e3134302e302f32342d3234203d3e20383334.roa
File: 3138352e3231372e3134302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: G20M5JmfIMmOSRB0XUFKBlUN4VDztp0n+5lkN94HqZY=
Subject key identifier: 17:55:3B:09:6A:22:51:04:15:C6:4F:F2:0F:AA:60:C9:0E:53:62:B9
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 5E67445AF87D8BE30C7693C3B3F16A197EFAE5E5
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3231372e3134302e302f32342d3234203d3e20383334.roa
Signing time: Tue 26 Mar 2024 00:03:52 +0000
ROA not before: Mon 25 Mar 2024 23:58:52 +0000
ROA not after: Tue 25 Mar 2025 00:03:52 +0000
asID: 834
IP address blocks: 185.217.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 06:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:67:44:5a:f8:7d:8b:e3:0c:76:93:c3:b3:f1:6a:19:7e:fa:e5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Mar 25 23:58:52 2024 GMT
Not After : Mar 25 00:03:52 2025 GMT
Subject: CN=17553B096A22510415C64FF20FAA60C90E5362B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:99:cf:16:bc:8b:3c:e1:34:78:e7:60:7d:6f:
90:eb:9a:5c:af:37:6e:b5:ec:2e:37:10:dc:ec:81:
b8:6e:c2:18:1c:99:07:34:df:7a:04:a1:d8:ee:16:
08:15:d5:a9:38:e8:20:9e:10:e4:0f:a4:79:d8:4d:
cd:92:f4:ef:0f:97:3f:4c:12:07:f6:f2:c0:86:90:
84:8a:cb:15:2e:86:c4:df:56:1f:78:ec:ca:8e:cf:
a9:b0:ab:16:b8:02:94:db:9e:b7:8b:d7:8e:66:1f:
88:1e:2e:d4:f9:2d:7d:0e:6f:14:c7:b8:44:8e:e7:
4c:36:c2:0f:39:d6:39:b1:0a:5f:c1:01:f9:a6:10:
09:73:ed:c2:bd:04:6d:17:8c:f0:6b:b2:19:92:bc:
b7:c2:2a:3c:68:83:01:2a:d6:26:95:8e:00:7c:5f:
e2:f7:be:88:31:39:c2:26:64:23:43:4f:12:96:d0:
e7:29:3d:79:13:39:2e:97:82:10:d0:0c:d3:39:f5:
8e:ef:ff:05:71:09:f3:22:83:d0:38:5e:2b:0b:c4:
90:f9:7a:b3:06:08:c9:b5:57:b1:4e:53:b4:41:b9:
ec:26:1b:c3:03:0b:f9:2a:2b:8e:4d:f3:4f:db:bd:
2c:e4:3b:bc:f5:27:2b:f4:68:94:70:50:c1:72:64:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:3B:09:6A:22:51:04:15:C6:4F:F2:0F:AA:60:C9:0E:53:62:B9
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3231372e3134302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:fe:f1:07:cc:9d:ee:f7:19:1a:30:b3:56:ea:84:73:af:9e:
35:02:77:79:2d:ba:fa:1e:c6:0e:84:c6:e0:37:47:c7:f9:79:
16:4d:40:f9:85:f8:d4:f3:09:4b:87:ea:e8:20:fa:58:22:8c:
0e:ab:73:8c:5f:50:1b:ee:b8:23:33:89:47:eb:e1:33:8d:91:
b0:cc:f3:72:8e:f4:05:d6:02:1c:21:f1:97:e3:7c:48:16:e8:
ec:c0:a0:8a:8e:b4:37:0f:22:3f:db:c9:96:ca:3d:bd:53:4d:
ac:83:56:91:8d:c6:41:18:c9:90:35:1c:f0:a1:88:08:3a:2e:
86:ec:4f:7e:4c:43:9f:ab:d8:c6:e9:4d:37:2f:a7:dd:60:55:
46:af:b0:80:0b:b1:55:f8:f5:f0:db:73:64:fa:84:47:89:c0:
e6:31:54:dd:56:fd:6d:b1:40:f5:bf:d2:83:53:33:15:49:65:
93:fd:dc:dc:91:8e:59:c6:2f:1b:3c:09:d2:64:70:09:93:64:
f9:b8:89:ab:de:66:d4:f9:4f:19:9e:39:30:86:4e:03:47:cd:
ac:ba:bd:15:28:c3:ab:d7:e2:96:96:8e:dc:89:9a:36:a4:ce:
17:a9:b1:78:fe:d3:8a:f5:3e:d4:e3:bf:b8:ec:a8:e3:c7:5f:
10:96:28:26
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUXmdEWvh9i+MMdpPDs/FqGX765eUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNDAzMjUyMzU4NTJaFw0yNTAzMjUwMDAzNTJaMDMxMTAvBgNV
BAMTKDE3NTUzQjA5NkEyMjUxMDQxNUM2NEZGMjBGQUE2MEM5MEU1MzYyQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7mc8WvIs84TR452B9b5Drmlyv
N2617C43ENzsgbhuwhgcmQc033oEodjuFggV1ak46CCeEOQPpHnYTc2S9O8Plz9M
Egf28sCGkISKyxUuhsTfVh947MqOz6mwqxa4ApTbnreL145mH4geLtT5LX0ObxTH
uESO50w2wg851jmxCl/BAfmmEAlz7cK9BG0XjPBrshmSvLfCKjxogwEq1iaVjgB8
X+L3vogxOcImZCNDTxKW0OcpPXkTOS6XghDQDNM59Y7v/wVxCfMig9A4XisLxJD5
erMGCMm1V7FOU7RBuewmG8MDC/kqK45N80/bvSzkO7z1Jyv0aJRwUMFyZGk9AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUF1U7CWoiUQQVxk/yD6pgyQ5TYrkwHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMjMxMzcyZTMx
MzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnZ
jDANBgkqhkiG9w0BAQsFAAOCAQEAuP7xB8yd7vcZGjCzVuqEc6+eNQJ3eS26+h7G
DoTG4DdHx/l5Fk1A+YX41PMJS4fq6CD6WCKMDqtzjF9QG+64IzOJR+vhM42RsMzz
co70BdYCHCHxl+N8SBbo7MCgio60Nw8iP9vJlso9vVNNrINWkY3GQRjJkDUc8KGI
CDouhuxPfkxDn6vYxulNNy+n3WBVRq+wgAuxVfj18NtzZPqER4nA5jFU3Vb9bbFA
9b/Sg1MzFUllk/3c3JGOWcYvGzwJ0mRwCZNk+biJq95m1PlPGZ45MIZOA0fNrLq9
FSjDq9filpaO3ImaNqTOF6mxeP7TivU+1OO/uOyo48dfEJYoJg==
Generated at Tue Mar 26 09:32:33 2024 by rpki-client on console-fra.rpki-client.org