Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e20323035363633.roa
File: 3138352e3232362e3135342e302f32342d3234203d3e20323035363633.roa (raw, json)
Hash identifier: jzFem4MJVmBophLfY7uc4jFKs8oXJBNGoLnW4APG7vI=
Subject key identifier: 86:EB:61:DD:00:52:52:9F:C3:3B:9F:BD:83:FD:69:AE:0C:31:CE:D5
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 62D27DF4DFCB819AB201DD48B7179B865EF2BF7B
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e20323035363633.roa
Signing time: Tue 05 Dec 2023 07:50:41 +0000
ROA not before: Tue 05 Dec 2023 07:45:41 +0000
ROA not after: Tue 03 Dec 2024 07:50:41 +0000
asID: 205663
IP address blocks: 185.226.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d2:7d:f4:df:cb:81:9a:b2:01:dd:48:b7:17:9b:86:5e:f2:bf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Dec 5 07:45:41 2023 GMT
Not After : Dec 3 07:50:41 2024 GMT
Subject: CN=86EB61DD0052529FC33B9FBD83FD69AE0C31CED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:ec:33:0b:e3:dd:b7:5b:52:80:30:15:26:
77:3c:55:af:3e:f0:09:91:9c:d8:29:93:f6:ce:c6:
c1:ae:66:fb:5a:ca:24:c3:fd:79:2a:1f:4b:6c:f4:
9e:d5:c9:d3:d5:1f:38:b3:bb:b3:4b:fe:bd:0f:be:
21:5f:bf:f6:3d:64:4c:c5:f5:f6:e1:0f:c0:52:85:
19:db:ee:85:a7:3b:f5:07:07:7f:d3:79:72:69:1b:
92:05:26:5a:a9:c4:b0:1a:cb:18:ec:60:a7:7f:1f:
08:0f:f6:53:85:0b:6b:41:10:54:7b:d6:2a:1f:08:
18:f2:e8:e5:d4:ba:53:ae:61:70:5e:1c:97:9c:fb:
13:d8:f8:8f:4d:ab:85:40:cf:49:d6:c3:7b:7b:b2:
2e:9c:df:1e:f2:55:2e:a7:5d:84:25:62:6b:48:c9:
d9:29:31:0e:0a:34:d9:18:bf:b0:8e:22:0a:77:27:
5c:c9:27:d3:d5:bf:27:b9:41:d8:94:3c:b7:77:31:
66:e2:9e:99:22:0e:a9:4d:dc:bd:43:a8:e6:c7:5b:
9f:2b:6d:f0:17:11:9a:e1:aa:cc:de:00:68:a8:24:
34:38:a3:05:bc:25:ed:d2:82:e4:d1:01:fb:04:e6:
64:5b:31:ff:fe:3d:f2:5f:98:13:3a:27:b4:79:5e:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EB:61:DD:00:52:52:9F:C3:3B:9F:BD:83:FD:69:AE:0C:31:CE:D5
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e20323035363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.154.0/24
Signature Algorithm: sha256WithRSAEncryption
00:4a:9b:e0:92:a1:79:36:1a:8d:14:d0:98:03:10:03:c1:72:
14:9e:3b:fa:c3:01:80:e7:2f:c6:08:54:b7:58:39:a1:55:d3:
46:fe:b3:31:90:23:65:9b:fb:43:40:26:61:36:ff:21:b6:dc:
74:99:80:1d:95:99:58:fd:cb:2e:ed:d6:5a:de:9f:14:b0:45:
2f:7e:4e:b5:d5:d8:5f:a9:dc:5d:e5:b0:4e:87:95:83:ca:f3:
05:d1:ad:76:77:f6:98:34:fa:93:2e:99:d9:2e:99:33:d5:79:
ae:4f:9b:e9:e1:6c:67:ea:39:da:0b:a9:8a:8b:92:13:68:23:
14:43:8a:0d:2d:ba:09:a9:3b:c7:0d:9b:ca:e1:78:83:35:ed:
a9:cc:da:e1:66:3c:b6:44:13:c2:b9:f1:40:dd:aa:ab:6d:a9:
7b:b7:cf:16:7d:9e:f3:a9:15:07:ff:70:61:43:c6:b9:c8:ed:
d8:c8:62:a1:23:6d:1e:51:a6:13:fa:7a:ba:b0:2f:6d:a7:91:
9a:da:c1:71:b0:37:ba:4d:1d:fd:0a:c4:52:b4:11:f4:70:54:
04:ea:30:1f:91:35:7e:62:21:ba:22:9d:6f:00:78:70:34:a6:
8f:59:1c:4d:dd:40:f4:0d:12:47:9a:8f:16:ec:de:8a:5a:1f:
a6:99:23:f7
-----BEGIN CERTIFICATE-----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Generated at Wed Jan 3 04:50:42 2024 by rpki-client on console-fra.rpki-client.org