Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135322e302f32332d3234203d3e20383334.roa
File: 3138352e3232362e3135322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: P7UNTYZDhg6TLL1ILOozMHg2yTrtmT2ybzpxOfYUC4Q=
Subject key identifier: 63:57:D5:47:81:11:D6:9A:AE:E0:72:02:50:62:7A:21:88:8E:96:14
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 67B0F8E7AD6068831BCCB481BD3B900BE84570E0
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135322e302f32332d3234203d3e20383334.roa
Signing time: Tue 09 Apr 2024 10:06:21 +0000
ROA not before: Tue 09 Apr 2024 10:01:21 +0000
ROA not after: Tue 08 Apr 2025 10:06:21 +0000
asID: 834
IP address blocks: 185.226.152.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 08:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b0:f8:e7:ad:60:68:83:1b:cc:b4:81:bd:3b:90:0b:e8:45:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Apr 9 10:01:21 2024 GMT
Not After : Apr 8 10:06:21 2025 GMT
Subject: CN=6357D5478111D69AAEE0720250627A21888E9614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:25:e6:b4:60:e0:29:16:f3:61:87:b4:77:
77:56:91:12:d6:f7:a0:57:28:f5:59:70:76:62:60:
14:cc:08:4b:b2:2f:c8:d6:15:e3:37:c3:b8:b0:ec:
ae:bc:76:c2:e7:6a:46:74:68:37:62:1c:e0:a8:53:
7f:4a:c8:f5:73:a3:db:a7:4d:15:20:f2:e7:51:1b:
54:41:00:be:7b:1b:f8:95:b1:7c:81:ad:b0:16:2b:
cd:5d:d9:ca:f7:23:3e:17:b3:a9:f6:6f:6d:97:6a:
c2:26:72:18:5a:46:bd:08:34:ff:4f:55:11:8b:94:
42:2e:ca:62:7a:fb:e6:86:22:ef:18:be:6e:dd:f0:
3a:d6:cd:20:07:ca:45:b1:62:eb:5c:71:c1:78:42:
bd:36:20:de:b0:68:f1:4c:b3:da:df:43:7a:00:c6:
51:ea:32:b3:b0:35:03:91:f6:41:98:0f:3e:88:a0:
a5:5d:70:d8:91:1e:d9:1f:38:25:e1:cd:fa:46:79:
c1:00:05:db:71:97:7f:5d:d0:ed:2c:5c:de:df:6f:
f0:4c:d4:a7:98:e7:7e:6b:a9:b1:b3:0d:a5:7d:8b:
e5:0a:d8:a8:de:8e:ba:8b:19:ee:5b:db:15:57:aa:
61:04:f2:29:d6:e3:20:23:53:02:87:36:71:ad:be:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:57:D5:47:81:11:D6:9A:AE:E0:72:02:50:62:7A:21:88:8E:96:14
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.152.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:66:e0:2d:69:1f:24:60:93:5b:0d:65:1d:7f:57:1c:f0:f5:
aa:82:55:20:94:f5:71:44:11:da:0c:7d:0d:34:0c:66:54:af:
6f:e3:b3:77:a7:f5:07:7d:1a:33:ff:1d:fc:4f:5c:df:97:90:
14:f0:33:d0:4e:67:82:9e:7a:25:ea:36:5d:52:a6:6d:9f:4e:
e3:54:41:5c:32:ad:09:18:76:5b:13:3c:0a:1a:18:cb:16:96:
ec:f0:44:a7:9e:ea:0c:7f:a4:ad:59:91:eb:d5:20:8a:40:3f:
17:a8:c6:48:06:1e:3c:5e:fa:7b:04:9f:ff:25:9c:df:b7:a1:
20:76:7d:c8:34:bc:8c:95:66:39:8a:89:34:99:36:5a:59:99:
40:28:a9:dc:3d:9c:16:80:36:06:b5:1b:fa:88:02:18:68:7f:
2c:75:e8:f6:44:4d:5d:34:d8:2d:f8:9b:b2:97:20:04:00:d6:
7d:bb:4b:54:6b:da:11:61:28:13:37:76:48:ac:21:74:30:de:
b9:cd:73:6c:a0:98:af:1c:f7:54:af:43:7a:65:ef:30:95:12:
c7:4f:17:4d:31:60:65:e7:09:0a:f9:6b:d7:05:ba:e0:a2:ed:
46:8b:41:cb:91:7e:16:66:b5:ad:1b:23:00:29:25:bb:55:01:
be:05:1c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 10:28:10 2024 by rpki-client on console-ams.rpki-client.org