Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e203432303535.roa
File: 3138352e3232362e3135342e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier: MWyQx/LHXURXJ2d/7L7QvYzv8a8/b+anhJORkXhiwB4=
Subject key identifier: 2E:97:8C:E0:F3:A3:0D:96:8D:01:2F:11:3B:2E:8A:CE:F3:92:B8:75
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 5184F97ACBA599DD025F754D48581D5DF9C9F9BB
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e203432303535.roa
Signing time: Thu 12 Oct 2023 13:17:06 +0000
ROA not before: Thu 12 Oct 2023 13:12:06 +0000
ROA not after: Thu 10 Oct 2024 13:17:06 +0000
asID: 42055
IP address blocks: 185.226.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:84:f9:7a:cb:a5:99:dd:02:5f:75:4d:48:58:1d:5d:f9:c9:f9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Oct 12 13:12:06 2023 GMT
Not After : Oct 10 13:17:06 2024 GMT
Subject: CN=2E978CE0F3A30D968D012F113B2E8ACEF392B875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:85:18:3d:2e:06:0d:37:29:d2:24:a2:97:
56:76:ae:56:df:94:cb:8d:a9:ca:b7:17:cc:14:1e:
6b:a1:cd:59:f4:b4:5d:7e:f8:bc:e0:25:e1:19:5a:
d4:6a:54:c4:34:f1:57:ce:30:48:ce:c7:e1:2c:cd:
f1:f6:26:aa:2a:08:1c:12:5a:67:b0:04:3a:ae:b8:
08:48:4a:97:c6:8c:90:8e:76:1e:db:55:db:1b:9d:
c6:6e:16:a2:9b:ff:17:32:ac:58:1e:d4:e5:07:57:
52:32:f2:92:83:04:a8:1d:e2:f7:ff:01:f5:e4:29:
ff:83:2d:84:0b:31:b1:cc:e5:31:72:26:0b:da:d0:
94:72:72:b2:2b:a9:d0:64:12:4f:15:15:28:32:fa:
62:a3:79:56:e4:ba:0c:f7:cd:b9:5b:b9:d7:3e:57:
83:2d:b2:80:90:6b:dc:1f:52:ff:17:f5:15:6f:ac:
7f:3f:1e:83:c0:2a:52:54:2a:15:94:86:f4:46:e7:
c9:bd:75:aa:1e:d7:d4:6a:4f:bf:de:00:13:af:9c:
d7:22:f6:fe:39:f2:29:a1:4f:b4:a9:4b:54:21:83:
99:2b:9d:ef:bb:f5:83:68:c3:ca:5c:fd:1b:e8:0d:
74:91:e6:b4:86:72:76:d5:94:3b:fc:ef:2c:9a:3e:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:97:8C:E0:F3:A3:0D:96:8D:01:2F:11:3B:2E:8A:CE:F3:92:B8:75
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e203432303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.154.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2a:43:c8:d2:38:03:f5:34:df:54:a8:92:3e:69:24:d1:3f:
77:1f:34:46:a4:a7:f5:50:6f:b6:fd:be:b7:c1:8f:3c:05:d4:
e1:13:69:d4:c9:8d:26:6e:e1:e3:c3:07:37:36:03:6d:4a:75:
57:d2:f2:9b:7f:69:a7:d9:c2:79:f4:b7:fc:a5:58:53:48:fa:
f2:41:69:71:e7:b9:d4:91:ea:41:00:d5:55:84:54:d8:10:36:
00:df:7e:03:5c:a9:01:c5:fe:87:01:f2:45:9d:44:9a:61:ee:
45:1a:11:ab:20:b7:97:37:8a:5d:50:96:f3:9e:47:ae:85:97:
76:94:f0:b0:82:5a:a2:99:7b:dc:91:31:11:6c:4a:d3:07:72:
98:27:b9:11:e3:7f:b5:ed:8b:13:bd:2a:4c:4d:9d:b0:51:f5:
eb:ff:55:6d:b3:95:70:99:f4:b6:e7:ca:2e:2c:70:cd:c4:0f:
b0:f6:9c:c5:69:55:23:5a:e0:d8:ef:f3:48:fb:25:7c:fd:9f:
9a:03:59:18:18:79:54:b4:d3:12:02:cb:c1:25:9a:b1:51:d2:
1f:05:ab:7a:6e:b8:36:98:44:33:bf:92:0f:0b:f7:da:7d:46:
a4:9b:e4:4d:4b:2f:11:77:07:99:16:2f:42:e4:b0:7c:d1:c5:
35:1b:2c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 09:21:48 2023 by rpki-client on console-fra.rpki-client.org