Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135322e302f32342d3234203d3e20323035363633.roa
File: 3138352e3232362e3135322e302f32342d3234203d3e20323035363633.roa (raw, json)
Hash identifier: /zWLNMrOVEEeIAxW/TLKd9tj9D1oUYF/o5kDlHk1AsE=
Subject key identifier: A2:93:A3:59:E5:55:A6:F7:0C:B5:F6:FD:57:B3:AC:24:26:B1:0A:5C
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 6BEF918762AEEB283BB8144A034E498ACA74C32A
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135322e302f32342d3234203d3e20323035363633.roa
Signing time: Thu 16 Nov 2023 12:12:11 +0000
ROA not before: Thu 16 Nov 2023 12:07:11 +0000
ROA not after: Thu 14 Nov 2024 12:12:11 +0000
asID: 205663
IP address blocks: 185.226.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ef:91:87:62:ae:eb:28:3b:b8:14:4a:03:4e:49:8a:ca:74:c3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Nov 16 12:07:11 2023 GMT
Not After : Nov 14 12:12:11 2024 GMT
Subject: CN=A293A359E555A6F70CB5F6FD57B3AC2426B10A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:ce:35:c4:d0:58:f3:17:fb:5d:47:d3:74:
b7:33:5a:e9:d6:29:c7:c7:4c:dd:0b:72:f2:0e:f3:
92:e7:91:c3:af:55:91:0c:64:0b:0d:6f:88:c4:1b:
93:5b:2d:da:e3:14:ec:d2:b5:d1:a7:cc:5d:59:31:
cb:3e:82:4d:b3:21:ea:c0:b5:7c:98:f7:4d:6d:53:
a1:f4:93:77:09:0f:3c:2f:33:73:e0:5d:a3:7c:fd:
db:09:10:28:48:a8:68:d4:a3:f3:b5:3b:d1:74:ec:
2e:bd:42:db:7a:2a:32:2d:24:66:4b:66:e5:51:ae:
be:94:32:b4:62:93:30:f1:0b:d5:ed:3a:22:2d:bd:
55:2e:6b:3a:eb:06:7e:75:fb:23:28:db:3d:b5:6c:
7c:f2:57:20:7f:f8:74:88:e6:bf:3a:09:cd:e1:37:
21:46:30:ff:09:7d:6f:de:ac:fc:39:20:b0:bb:73:
e3:1d:5c:34:10:3f:0f:f3:c4:88:8e:c6:46:64:fc:
37:57:e9:66:23:0c:6a:d1:a1:73:09:8d:5e:21:64:
e8:d8:8f:55:8a:aa:12:ae:1c:6b:82:7e:af:0b:56:
fb:14:34:23:ed:90:7b:be:3e:44:82:ac:cf:05:0d:
b0:bf:97:20:be:03:f2:ed:ad:6e:db:f9:dd:8e:58:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:93:A3:59:E5:55:A6:F7:0C:B5:F6:FD:57:B3:AC:24:26:B1:0A:5C
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135322e302f32342d3234203d3e20323035363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:3b:f9:2b:95:1d:d4:24:d7:ae:a5:52:95:d3:37:3c:5c:70:
b5:3c:e1:4f:ea:f5:b1:7f:e6:56:1b:a4:9c:79:20:3a:ca:5a:
12:b9:05:5b:e3:46:61:43:62:9d:12:e1:6a:16:f3:db:cf:3c:
40:22:8e:3f:ca:07:c7:2f:7c:5d:5b:86:45:02:49:65:70:c4:
80:b0:7a:28:f5:44:24:e7:c9:c4:1c:50:7b:89:8b:9d:48:fc:
af:6c:07:59:fc:42:a7:7d:fe:a7:d4:3b:b7:26:8a:bf:b9:3a:
50:45:a5:9f:17:e0:a0:32:0a:04:67:02:da:4a:26:0f:dc:32:
bd:d8:3f:8c:fe:fe:39:92:63:5b:ff:9d:eb:5a:f7:14:a0:f3:
91:f5:96:80:4e:fc:8e:e6:18:3b:97:70:fd:57:bc:7a:7f:08:
29:03:1d:ec:e3:77:d7:23:11:70:c7:b3:2f:4d:83:f6:16:a5:
c4:e3:b4:23:33:93:27:19:0c:9c:a1:b2:42:aa:f4:9b:61:b8:
b0:15:41:f5:51:b1:66:52:ae:98:04:16:47:02:f0:64:0d:8b:
3a:61:7e:14:a8:4a:4d:7f:ae:1a:6c:44:85:07:e8:1f:ce:ad:
26:05:54:c1:05:e3:21:b2:70:8e:ad:5f:d2:4c:c7:9c:b1:40:
4b:98:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 01:05:58 2024 by rpki-client on console-ams.rpki-client.org