Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e203432303535.roa
File: 3138352e3232362e3135352e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier: rEghG7bgUEiayGIjZUER1a5/OMwCzxjXBmQNNCX5TyQ=
Subject key identifier: DB:50:32:63:DB:29:5F:01:B8:DA:A0:73:EB:AC:1B:99:17:E8:28:7C
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 71EC34B6D62320016E8E6E32C6EAFA4EACE2774B
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e203432303535.roa
Signing time: Thu 12 Oct 2023 13:17:06 +0000
ROA not before: Thu 12 Oct 2023 13:12:06 +0000
ROA not after: Thu 10 Oct 2024 13:17:06 +0000
asID: 42055
IP address blocks: 185.226.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ec:34:b6:d6:23:20:01:6e:8e:6e:32:c6:ea:fa:4e:ac:e2:77:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Oct 12 13:12:06 2023 GMT
Not After : Oct 10 13:17:06 2024 GMT
Subject: CN=DB503263DB295F01B8DAA073EBAC1B9917E8287C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:53:ae:8a:d5:f8:b0:7d:4b:1f:23:41:52:
ab:e2:8d:f4:76:8f:9a:4d:30:ca:e9:23:78:99:4a:
b8:b6:94:5a:6c:59:c9:3a:02:5f:c3:72:03:b4:06:
ce:18:7c:45:c3:63:7a:ff:ef:35:03:71:35:a0:59:
f0:eb:82:73:25:6c:ea:35:76:34:49:26:03:0b:f7:
c7:28:22:d2:cb:08:96:1c:e5:9d:60:9c:2d:6f:b1:
b4:9e:c3:0c:dd:8d:2a:b3:c9:7d:f5:90:75:1b:08:
cf:37:97:e3:b1:13:5c:51:b9:a6:7c:c2:51:37:cd:
b7:d0:02:c3:54:57:f7:fc:be:b1:fd:4b:bc:8a:ff:
b5:48:f7:37:10:84:ad:70:4b:f5:76:66:65:7e:fc:
d1:8f:4e:31:7e:65:0b:e7:ea:00:bb:fa:af:3a:56:
11:17:b5:72:04:96:b4:f2:ae:a3:a3:96:42:6c:14:
cb:45:eb:b5:f0:06:67:1a:45:d2:0b:dc:fd:e4:2c:
ce:e8:47:d5:4b:9f:d2:69:e9:28:53:ab:c6:c6:9f:
6a:e4:88:f3:18:ef:27:3a:b2:3d:93:f9:e0:46:25:
95:b1:57:c9:83:b1:f4:c9:8e:86:ca:84:f8:81:b9:
ae:b2:d2:f1:8e:c4:0f:85:88:d0:72:c2:13:ca:54:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:50:32:63:DB:29:5F:01:B8:DA:A0:73:EB:AC:1B:99:17:E8:28:7C
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e203432303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:50:63:a5:0d:38:5f:c9:fd:e6:e5:fa:a9:fc:ca:07:6c:87:
9d:fd:ee:3f:3e:6f:c2:aa:05:2f:2c:ca:7b:17:16:06:79:1b:
8c:1e:68:65:3e:85:dd:c0:95:0b:c5:a2:5a:ed:0e:fa:90:99:
17:7e:ff:ae:25:72:79:fa:d0:f2:10:c2:c3:55:dc:18:96:80:
ef:67:eb:1f:56:54:93:44:55:07:38:a7:59:a8:e2:a6:ca:2d:
9b:27:02:4f:a0:cc:a7:ca:ce:12:fc:1b:65:c8:46:47:af:a1:
11:ec:bc:3b:dc:6b:79:44:d7:ed:0f:a6:ee:a6:09:10:dd:ce:
56:54:5f:80:9a:23:54:cb:92:4f:9d:4f:68:10:de:e4:b0:be:
7f:10:cc:0a:13:10:c1:a3:0a:d4:2e:8e:0c:27:e1:9f:9b:cb:
7a:a8:7c:81:8d:00:f1:c1:3e:d3:06:bd:22:4f:67:47:c4:8e:
2b:f0:b9:16:1b:18:bb:d9:0a:d8:3f:99:9c:e9:57:6e:06:4d:
bb:0a:18:8e:d1:6a:e7:67:01:aa:6e:04:d5:3e:32:18:6d:01:
31:61:1e:a1:e6:8f:87:a2:72:17:68:6f:07:69:51:e7:e5:ef:
e5:24:43:59:f6:b1:80:f4:be:0e:ba:17:59:05:e3:d2:91:60:
60:7c:cd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 09:13:34 2023 by rpki-client on console-ams.rpki-client.org