Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32332d3234203d3e20383334.roa
File: 3138352e3232362e3135342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: OUII/ngG/GYd3POUae3Hue/x39VkmHAJJDaWvI+EbRM=
Subject key identifier: 50:5B:39:B7:FB:F6:7C:6A:BE:89:0D:C8:94:76:6A:CE:3C:41:4D:35
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 0A14D190D31B7A9EF0C8B21BE1E363DCE3B6F615
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32332d3234203d3e20383334.roa
Signing time: Sat 30 Sep 2023 00:00:14 +0000
ROA not before: Fri 29 Sep 2023 23:55:14 +0000
ROA not after: Sat 28 Sep 2024 00:00:14 +0000
asID: 834
IP address blocks: 185.226.154.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:14:d1:90:d3:1b:7a:9e:f0:c8:b2:1b:e1:e3:63:dc:e3:b6:f6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Sep 29 23:55:14 2023 GMT
Not After : Sep 28 00:00:14 2024 GMT
Subject: CN=505B39B7FBF67C6ABE890DC894766ACE3C414D35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:7d:c7:5a:9e:42:05:c3:b5:9a:8d:97:04:
a0:eb:a7:2d:e1:7c:f3:8a:8b:f7:8b:ca:fb:70:d8:
fd:ad:c6:d7:ab:5e:b6:8e:52:c6:d4:7b:4d:ee:6d:
84:3e:24:ad:92:18:c4:9f:ce:00:98:35:26:a5:bd:
12:da:28:71:78:6b:2a:13:28:ec:dd:50:05:4a:c6:
79:f5:1f:12:35:03:fb:40:e1:29:9e:a4:cb:7c:ef:
92:95:26:c5:a8:6f:fa:ad:80:73:1c:aa:73:34:21:
70:42:00:e9:6f:b0:65:02:64:16:2a:e4:80:4d:74:
28:13:67:67:be:9f:1a:62:6a:9d:ce:5f:cf:52:81:
af:81:59:f1:3b:d9:32:f3:98:e9:1e:24:d6:da:cb:
b4:33:7e:a0:39:3f:5a:0b:63:b1:7b:17:ee:b9:1e:
a6:a8:9c:e6:62:92:0a:52:6e:59:1a:a3:77:ca:da:
40:c3:b8:41:e6:a6:1d:9a:9e:8e:a9:96:01:28:a0:
1b:4d:94:02:ea:eb:39:b3:25:b7:c4:02:e4:0d:68:
e9:6d:25:d6:71:af:a7:68:c0:40:6d:2f:d8:5d:9b:
f2:d1:b8:a7:49:d1:a7:d6:ae:e4:56:87:fa:b6:15:
7d:7a:49:b8:f0:48:44:00:c6:ac:1d:c7:fb:4b:99:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5B:39:B7:FB:F6:7C:6A:BE:89:0D:C8:94:76:6A:CE:3C:41:4D:35
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.154.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:7e:2c:e6:14:a5:34:23:1a:73:03:3a:38:3e:0a:76:a3:58:
91:53:b5:50:5b:2a:6f:7e:0d:91:4c:54:30:3f:9a:63:2b:b0:
82:f6:e8:30:32:27:a4:af:fd:3e:c9:16:1e:af:17:d5:fd:1a:
8d:7f:99:78:b3:13:0b:04:63:96:90:dc:13:2d:97:e8:31:9c:
15:b9:72:36:25:a8:cd:cd:f4:09:8b:57:bd:db:a0:b7:37:d4:
4f:61:8b:88:ef:70:a3:0b:01:0c:84:7a:43:a9:27:c7:4a:6c:
79:5d:2e:64:7c:82:de:09:11:32:68:0c:7d:af:b1:a1:3b:0d:
c2:02:20:7b:e9:76:23:f7:fd:4d:ab:55:86:19:5f:84:34:78:
32:a5:11:56:44:1f:03:83:fb:f8:bb:48:65:50:4f:47:3e:88:
f2:f0:d8:5c:15:d2:28:78:96:ff:1c:af:01:60:00:79:d0:99:
bf:f1:c9:77:ca:c7:f5:30:c4:74:ca:6c:3e:1a:68:a6:12:5c:
6d:bb:7b:5e:72:5a:22:66:82:7b:e2:cc:3b:2b:f3:b8:2f:34:
86:50:d9:9f:c2:4e:b8:43:5d:3d:a0:31:ce:ca:bb:f3:20:03:
54:81:a4:6c:7f:01:df:f6:48:ce:a5:4b:d4:e9:91:da:c9:a1:
92:f3:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:26 2024 by rpki-client on console-fra.rpki-client.org