Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e20323130313634.roa
File: 3138352e3232362e3135352e302f32342d3234203d3e20323130313634.roa (raw, json)
Hash identifier: 4afX7w/6DxgFvCS71rW+uHCJhFPZc/jH4OgLEMZ6EJ0=
Subject key identifier: DC:0A:74:5A:0B:5B:8E:C9:49:ED:FF:CF:9B:D9:CE:45:A0:23:AD:3F
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 3C23EC6944046657802937A774566EC1B3561141
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e20323130313634.roa
Signing time: Sun 04 Feb 2024 14:44:31 +0000
ROA not before: Sun 04 Feb 2024 14:39:31 +0000
ROA not after: Sun 02 Feb 2025 14:44:31 +0000
asID: 210164
IP address blocks: 185.226.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:23:ec:69:44:04:66:57:80:29:37:a7:74:56:6e:c1:b3:56:11:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Feb 4 14:39:31 2024 GMT
Not After : Feb 2 14:44:31 2025 GMT
Subject: CN=DC0A745A0B5B8EC949EDFFCF9BD9CE45A023AD3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:32:19:d6:bf:76:86:fb:d5:db:d0:52:c6:
1e:6b:e9:f9:82:cc:93:13:18:7a:b2:b7:a0:2d:8c:
d0:d6:19:e2:48:99:d6:10:d9:93:46:41:51:80:cb:
e1:6f:7b:bf:ea:eb:a6:11:5d:82:e6:59:67:85:ac:
fe:9d:27:31:91:78:22:ee:c3:7d:ca:cd:1e:b9:c0:
0b:11:3a:04:29:62:d2:c8:43:12:bb:aa:11:a8:de:
22:06:61:a8:f8:56:0f:03:ba:a5:93:1f:81:3d:47:
71:cd:94:7e:1c:fc:40:73:2e:2f:2e:c7:4d:7d:77:
f9:35:c7:d2:a8:08:5f:77:d0:bb:88:bc:70:73:14:
0d:ed:e7:ec:1a:32:60:2b:32:74:1a:eb:9e:a3:eb:
1e:47:c9:a9:e2:e6:fc:a6:3f:9e:f5:86:a8:1f:86:
0c:b1:78:0a:82:b5:49:0e:34:50:2f:aa:e4:78:5c:
1e:0a:91:f4:8a:de:78:c2:6e:11:6d:aa:f0:a0:c6:
5d:1f:b1:bf:6f:8d:63:25:50:b4:30:15:cd:12:76:
59:cb:46:f4:6c:fa:44:f1:85:2f:84:94:bf:07:e1:
e0:2c:45:d2:ca:0f:6d:6c:a6:66:7d:92:b6:20:20:
0f:7a:be:ca:83:bd:08:e4:da:46:ec:28:ae:a8:4c:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0A:74:5A:0B:5B:8E:C9:49:ED:FF:CF:9B:D9:CE:45:A0:23:AD:3F
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e20323130313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.155.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f4:c2:8c:83:e0:9d:7a:db:6f:72:7c:80:46:2b:d9:f7:57:
86:8e:23:00:53:08:33:88:23:4f:1f:10:b9:87:a9:6a:b8:78:
38:d4:f7:4e:d1:91:25:f1:66:90:36:2a:8a:f1:a7:51:cd:89:
4b:b3:51:bf:5b:b3:69:3b:e5:e1:7a:32:8e:42:9a:ee:1c:67:
79:ef:bc:53:1f:ec:d0:bb:b8:bc:b9:4d:80:b7:0a:79:4f:e4:
50:95:0d:65:5f:f7:c6:be:0a:eb:a3:52:f5:9b:98:f5:9b:e1:
78:0e:00:17:06:f3:30:3f:87:50:00:3d:ef:14:7a:88:40:9c:
38:93:87:b6:57:b2:18:3d:e4:b1:88:2f:a5:45:ba:a3:a2:4c:
e5:ff:e3:21:fd:97:ae:68:15:98:16:aa:1e:21:fd:cd:bb:6a:
7a:85:3b:d9:7b:80:d5:8e:17:62:58:e1:7f:99:f8:7c:b1:dd:
b1:66:33:e1:22:0e:52:c3:c8:91:89:44:d7:9a:79:a7:0b:c7:
e8:8e:1c:85:06:24:16:e7:8b:cb:32:1a:86:37:d5:98:69:00:
5a:d5:4e:38:c2:a3:af:0b:ea:ba:1c:8c:74:1d:50:82:4e:02:
45:57:67:83:f9:60:8e:54:44:c9:f9:ea:d5:b8:4c:23:4f:83:
8a:cb:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:11:18 2024 by rpki-client on console-fra.rpki-client.org