Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e20323031353735.roa
File: 3138352e3232362e3135352e302f32342d3234203d3e20323031353735.roa (raw, json)
Hash identifier: 1JMEMsq22kcffbRIqa4vIsKw5Xk3wf964RWsuhSxw4o=
Subject key identifier: C3:41:15:EF:80:F6:2B:A1:C4:B7:6B:97:A2:AA:AF:53:BD:83:B6:0B
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 0F64928101347834BFD8B9A66EDEA95D6B2A8F1D
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e20323031353735.roa
Signing time: Tue 30 Jan 2024 15:11:55 +0000
ROA not before: Tue 30 Jan 2024 15:06:55 +0000
ROA not after: Tue 28 Jan 2025 15:11:55 +0000
asID: 201575
IP address blocks: 185.226.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 03:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:64:92:81:01:34:78:34:bf:d8:b9:a6:6e:de:a9:5d:6b:2a:8f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jan 30 15:06:55 2024 GMT
Not After : Jan 28 15:11:55 2025 GMT
Subject: CN=C34115EF80F62BA1C4B76B97A2AAAF53BD83B60B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:8c:72:e0:b6:be:c1:2e:5f:a7:6c:f1:fb:
e7:e2:21:c5:5a:32:71:c1:9c:54:82:57:b7:2e:d9:
11:eb:b3:b1:1c:1f:ee:60:41:25:17:00:6c:13:51:
e1:5d:d0:43:c1:1c:df:3e:80:b2:fa:9b:13:e1:40:
ab:0b:6b:6f:e2:ae:ad:09:38:43:51:46:be:e4:16:
39:24:c8:e0:13:b1:11:b2:34:0c:63:f5:91:3d:00:
3b:e2:76:81:81:48:1d:7c:e4:96:ba:cf:ea:cd:86:
3b:fd:9a:95:db:8f:d4:67:eb:b9:12:8a:3e:5c:1c:
38:11:9f:69:29:90:9b:95:7a:d9:70:34:82:4d:fd:
aa:1a:a7:37:fb:23:ce:42:19:b1:27:71:c1:55:6d:
9d:cd:97:fa:e8:d5:3b:35:31:f1:25:19:37:4d:fd:
00:06:1e:08:09:03:f9:a7:1e:4f:01:bc:23:0f:ec:
35:5f:0a:59:dc:0e:90:7f:aa:95:c8:c1:23:17:c5:
e5:b0:96:67:a9:a1:34:fb:e6:0c:43:5d:00:e2:a1:
ed:bb:c7:5a:49:80:30:f2:a4:12:62:cb:ab:43:40:
e2:83:aa:c0:58:eb:06:42:3a:fe:e8:96:98:37:8d:
42:fa:5e:ed:e0:18:7b:00:1e:32:7a:60:88:1d:58:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:41:15:EF:80:F6:2B:A1:C4:B7:6B:97:A2:AA:AF:53:BD:83:B6:0B
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e20323031353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.155.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e7:c7:96:e3:d4:7f:26:33:87:91:99:5b:d6:b5:8a:07:99:
1c:6c:19:37:6a:78:50:09:03:32:bb:1c:d0:9b:a5:27:9a:43:
77:f3:77:70:4c:5c:82:1b:9f:eb:ba:e6:37:8c:76:50:d3:5a:
15:a2:2f:3d:05:d5:49:ba:3c:0a:5e:8f:28:2d:3c:2d:5a:6c:
f4:ff:3f:50:55:2f:46:6d:55:95:49:7d:57:39:e6:e5:83:8b:
6b:02:72:4b:ad:d6:74:8b:a0:09:ef:8b:87:2d:fc:c3:87:2e:
54:1d:26:d4:00:5e:ea:38:43:38:18:8e:7b:26:15:a3:5e:79:
cf:2b:a5:1b:39:19:40:f0:bf:6e:50:87:86:d1:30:45:ef:8b:
b3:19:8b:d4:27:5a:31:25:d7:ec:0d:9e:5e:1d:31:10:29:05:
d3:b8:51:fe:90:8c:23:af:f7:1d:93:e3:21:f0:06:f0:57:2e:
35:7c:36:be:60:ce:8b:eb:ea:c4:fc:d3:30:2c:78:50:99:68:
7f:6c:23:c8:b8:7b:42:07:9b:73:81:f4:ac:7e:c0:4d:2d:a8:
91:d7:74:4c:e9:f7:e8:67:00:4f:24:dd:61:c6:6e:65:77:8d:
ac:62:dc:a5:28:91:58:15:b0:4e:ce:40:18:0d:07:f8:b7:37:
7f:fd:c9:0d
-----BEGIN CERTIFICATE-----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Generated at Wed Jan 31 04:58:28 2024 by rpki-client on console-fra.rpki-client.org