Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e203135333533.roa
File: 3138352e3232362e3135342e302f32342d3234203d3e203135333533.roa (raw, json)
Hash identifier: YuervKFV8KVjBefdFm+Evty/EpTsFtD0qrSFfrrDeOQ=
Subject key identifier: A2:1A:82:D3:79:A6:89:BF:79:AC:EC:8A:05:58:6A:07:C8:F9:35:EF
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 73DAAFB60B9AE655186AD27D1EDDCD841B678695
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e203135333533.roa
Signing time: Fri 28 Jun 2024 08:52:46 +0000
ROA not before: Fri 28 Jun 2024 08:47:46 +0000
ROA not after: Fri 27 Jun 2025 08:52:46 +0000
asID: 15353
IP address blocks: 185.226.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:da:af:b6:0b:9a:e6:55:18:6a:d2:7d:1e:dd:cd:84:1b:67:86:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jun 28 08:47:46 2024 GMT
Not After : Jun 27 08:52:46 2025 GMT
Subject: CN=A21A82D379A689BF79ACEC8A05586A07C8F935EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:c3:76:9e:33:28:91:48:31:01:dc:ca:01:
5a:8d:5d:48:9c:18:ca:29:2d:74:26:ce:43:3e:93:
d3:d9:a7:c2:bd:95:1c:d3:47:0f:09:f1:f2:3c:f8:
5d:57:d6:91:42:6c:23:97:3a:fa:9c:c5:b3:1b:82:
d7:1a:87:86:87:06:35:da:38:75:69:38:d9:fb:59:
03:a9:be:9b:af:82:78:78:9a:18:62:28:f4:57:91:
78:86:ac:e9:0d:0b:be:42:36:18:82:79:d9:2a:e8:
a4:d6:11:d9:d3:ea:56:bc:6f:fd:0e:0c:f0:09:3e:
0d:89:f1:76:48:b6:d1:a3:79:68:b8:24:f1:56:c8:
08:5f:30:2b:96:33:5e:c8:d4:3d:9b:0c:b4:2e:79:
ea:cf:58:3b:71:f1:10:dc:d8:70:60:8a:9f:c3:f0:
cd:b6:17:b4:3c:0d:2c:03:c8:be:d7:9e:03:87:85:
58:9d:e0:c5:0d:f1:16:ee:0a:9f:28:87:02:32:27:
c1:6c:c2:84:88:34:37:70:8c:c7:ae:18:73:0a:ca:
49:2d:80:dc:19:cb:b9:cd:e8:e6:cb:d8:bf:8f:c2:
b6:c6:5b:5f:fd:c7:d1:e1:d8:9b:55:93:d8:88:53:
f0:f2:dd:fb:89:2d:26:33:a5:b1:f6:14:38:9a:0f:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:82:D3:79:A6:89:BF:79:AC:EC:8A:05:58:6A:07:C8:F9:35:EF
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e203135333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.154.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:9c:99:47:67:26:1d:63:8c:f6:72:bb:e9:1a:5d:44:77:b5:
15:ce:50:5d:3c:ed:2a:d9:5b:71:15:e9:71:aa:9a:62:7e:9a:
f9:d7:75:7e:93:ec:4f:be:a3:eb:2d:17:90:0a:de:d1:6f:6e:
47:5e:9c:f3:33:54:f3:42:62:cb:ab:ba:b7:ab:3a:fb:da:9f:
e4:1b:af:1c:4c:1c:cb:5d:98:9c:52:c7:f8:2e:2c:78:7c:d0:
99:2a:74:25:64:b5:61:c0:a0:b7:95:ea:6d:9c:e5:04:dd:eb:
b5:3c:f9:3f:09:fa:70:70:fa:4b:e1:4c:41:2d:82:13:6f:7c:
0a:8d:2d:aa:ff:b8:28:03:bc:c6:67:18:af:21:8c:46:45:89:
d9:72:0b:c1:f9:ea:de:fd:e0:fa:5d:8a:a8:2a:00:9a:e7:ad:
e4:e9:d2:74:30:2d:4e:51:3e:ad:54:03:c3:a4:9c:eb:7a:96:
6a:b4:87:b6:bb:72:27:7e:24:cf:7f:91:21:9e:59:f2:90:fe:
ee:0d:63:e4:56:ff:5d:86:84:e8:ef:6a:33:f3:e1:02:8c:fb:
ed:5a:29:21:af:6d:bb:9a:c7:84:fd:7d:be:d1:b2:d7:5b:44:
9d:a0:84:6d:e6:1e:20:53:cc:f9:9a:1d:65:59:1c:98:07:2c:
73:82:8b:ca
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUc9qvtgua5lUYatJ9Ht3NhBtnhpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNDA2MjgwODQ3NDZaFw0yNTA2MjcwODUyNDZaMDMxMTAvBgNV
BAMTKEEyMUE4MkQzNzlBNjg5QkY3OUFDRUM4QTA1NTg2QTA3QzhGOTM1RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6cN2njMokUgxAdzKAVqNXUic
GMopLXQmzkM+k9PZp8K9lRzTRw8J8fI8+F1X1pFCbCOXOvqcxbMbgtcah4aHBjXa
OHVpONn7WQOpvpuvgnh4mhhiKPRXkXiGrOkNC75CNhiCedkq6KTWEdnT6la8b/0O
DPAJPg2J8XZIttGjeWi4JPFWyAhfMCuWM17I1D2bDLQueerPWDtx8RDc2HBgip/D
8M22F7Q8DSwDyL7XngOHhVid4MUN8RbuCp8ohwIyJ8FswoSINDdwjMeuGHMKykkt
gNwZy7nN6ObL2L+PwrbGW1/9x9Hh2JtVk9iIU/Dy3fuJLSYzpbH2FDiaDy7jAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUohqC03mmib95rOyKBVhqB8j5Ne8wHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMjMyMzYyZTMx
MzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC54powDQYJKoZIhvcNAQELBQADggEBAKycmUdnJh1jjPZyu+kaXUR3tRXOUF08
7SrZW3EV6XGqmmJ+mvnXdX6T7E++o+stF5AK3tFvbkdenPMzVPNCYsururerOvva
n+QbrxxMHMtdmJxSx/guLHh80JkqdCVktWHAoLeV6m2c5QTd67U8+T8J+nBw+kvh
TEEtghNvfAqNLar/uCgDvMZnGK8hjEZFidlyC8H56t794PpdiqgqAJrnreTp0nQw
LU5RPq1UA8OknOt6lmq0h7a7cid+JM9/kSGeWfKQ/u4NY+RW/12GhOjvajPz4QKM
++1aKSGvbbuax4T9fb7RstdbRJ2ghG3mHiBTzPmaHWVZHJgHLHOCi8o=
-----END CERTIFICATE-----
Generated at Sat Sep 28 02:00:29 2024 by rpki-client on console-ams.rpki-client.org