Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e20313734.roa
File: 3138352e3232362e3135352e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: tNXKt3c//T/jQv742uvBpCFEBoAsN4Ei41mwfRrefsA=
Subject key identifier: 02:CB:78:B7:E4:FD:55:48:4C:8B:79:49:37:2B:6A:AC:3D:63:4F:0F
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 7371AD48DA3A9BB57357F4EC57B6575A0C8E0FC0
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e20313734.roa
Signing time: Tue 02 Jan 2024 14:02:58 +0000
ROA not before: Tue 02 Jan 2024 13:57:58 +0000
ROA not after: Tue 31 Dec 2024 14:02:58 +0000
asID: 174
IP address blocks: 185.226.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 18:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:71:ad:48:da:3a:9b:b5:73:57:f4:ec:57:b6:57:5a:0c:8e:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jan 2 13:57:58 2024 GMT
Not After : Dec 31 14:02:58 2024 GMT
Subject: CN=02CB78B7E4FD55484C8B7949372B6AAC3D634F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:0c:0a:39:fa:4b:95:c9:b2:d8:1f:d8:1b:
92:61:f7:2b:8a:2f:03:59:f9:57:73:4b:0c:f8:a0:
ff:8a:4b:99:14:20:a7:b7:97:af:e7:38:e7:f5:90:
aa:71:6b:72:79:53:b4:6e:70:7b:d1:f6:28:6e:6c:
aa:80:53:7c:2b:ae:70:a8:7d:19:3c:27:04:d0:70:
bd:9d:9e:ba:08:f6:04:11:10:c2:3e:3e:5c:86:52:
35:68:ea:7c:23:8d:65:56:93:bd:be:2d:73:57:a2:
a5:34:e4:23:50:0a:37:c8:5f:b4:55:85:51:f2:db:
63:13:cc:f0:91:1d:4a:0c:7f:e7:65:5c:20:b4:bd:
20:3e:d2:4c:d0:b5:6a:63:e2:a8:02:d5:ff:17:f6:
ed:eb:94:b4:15:f0:45:70:86:b5:2e:ee:6a:e2:f2:
63:1d:1b:63:83:49:a7:36:77:db:53:7d:32:b7:8f:
38:43:29:c6:f3:bf:90:8b:89:25:61:06:3d:9e:0a:
3f:5c:18:a9:90:69:61:e2:b3:ee:03:93:a6:74:c0:
f6:87:33:b3:68:06:3d:24:a4:56:c3:79:ec:fb:1c:
5c:22:25:b0:a6:0c:e5:38:4d:af:55:d4:9a:e4:f8:
b4:8d:be:99:2c:1c:93:a0:e2:16:c0:e1:37:9e:51:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:78:B7:E4:FD:55:48:4C:8B:79:49:37:2B:6A:AC:3D:63:4F:0F
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d1:12:74:a8:b1:6b:05:e0:70:d2:86:68:ff:23:5a:39:5b:
27:38:3d:f2:a3:79:d8:bb:1b:c9:9a:11:b0:59:ac:1a:46:04:
bf:8c:eb:8b:03:28:21:aa:66:95:83:ca:21:9d:ba:cc:d3:ff:
d3:0f:76:4e:a3:50:5b:34:f7:9c:30:1a:16:2b:58:5a:f8:25:
06:43:4b:9f:cf:bb:56:a3:8f:90:d5:20:25:20:75:f4:43:26:
0a:b2:df:8a:76:fc:a0:e3:03:4b:f6:46:4a:fa:09:73:9c:54:
1e:8a:76:ee:dd:b9:72:19:ad:de:fe:b0:f0:39:16:ff:ca:79:
bc:6b:60:b4:ba:b2:f0:6a:13:7d:48:4d:5b:0d:68:6a:2f:48:
41:50:a3:4f:ed:bf:e8:10:ca:6c:bf:0e:e8:6e:ca:4f:cb:58:
7e:2a:f5:5f:11:e7:85:53:fa:f3:53:61:09:43:45:6d:e7:5d:
7e:e7:02:fc:44:8f:c1:ca:54:7e:f5:7b:47:8a:76:82:22:a2:
4c:e2:8a:48:15:bf:74:1f:90:f4:0b:e9:b6:bb:9e:ab:79:46:
c0:eb:fe:23:b5:29:65:87:72:7f:10:57:02:bd:6e:64:fd:ed:
f5:81:e5:27:38:51:93:69:03:8b:78:8c:17:24:28:24:32:4b:
4e:b6:dd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 21:17:54 2024 by rpki-client on console-fra.rpki-client.org