Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e203631313335.roa
File: 3138352e3232362e3135352e302f32342d3234203d3e203631313335.roa (raw, json)
Hash identifier: bLGGBYRniyhZkiCy+2u+qbSbfL4Eqmt4iIFLZbnjz50=
Subject key identifier: 32:A0:4E:78:7A:E2:C0:B7:22:E9:F4:3A:B6:F0:B2:14:A0:AE:6C:A9
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 6A3D2862C6861A76CF9B9AE2FB29F9CD979E4598
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e203631313335.roa
Signing time: Wed 31 Jan 2024 03:32:29 +0000
ROA not before: Wed 31 Jan 2024 03:27:29 +0000
ROA not after: Wed 29 Jan 2025 03:32:29 +0000
asID: 61135
IP address blocks: 185.226.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 14:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:3d:28:62:c6:86:1a:76:cf:9b:9a:e2:fb:29:f9:cd:97:9e:45:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jan 31 03:27:29 2024 GMT
Not After : Jan 29 03:32:29 2025 GMT
Subject: CN=32A04E787AE2C0B722E9F43AB6F0B214A0AE6CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:6e:02:56:a2:6b:1d:d1:1e:95:64:e4:e1:
f8:cf:ca:7a:01:cc:19:21:3b:41:c7:08:6e:0c:27:
88:0d:2a:3b:98:18:4e:b5:44:a7:01:58:e1:d8:d1:
ba:19:ce:b6:de:5e:ca:1d:85:ca:bf:c6:50:10:89:
a2:11:ab:d4:94:b4:da:9e:6d:92:a8:49:ce:c0:a2:
09:d5:a9:a3:22:1c:be:93:67:32:30:10:65:48:39:
c0:ec:28:32:43:a3:49:1e:95:b3:62:2b:66:c3:8e:
3f:f7:5a:e8:e0:06:51:f1:d6:c9:77:3e:e4:90:11:
0d:9e:ff:38:60:e4:78:94:c1:fe:7f:03:50:7f:0c:
3c:3c:8b:56:15:21:d2:df:75:87:e9:45:dd:dd:1c:
1a:73:d2:40:0f:67:a0:7a:f2:ca:7d:92:76:56:d6:
f2:9e:e1:b9:37:74:af:be:4c:ed:d5:22:81:4f:9f:
41:b7:5d:a1:7d:af:0b:0b:f9:2a:55:7b:5c:20:04:
84:ba:bb:f3:74:f0:34:f5:20:a6:b8:d6:ed:c3:47:
b4:42:f6:0d:47:e7:2d:78:fe:58:13:ae:c3:f5:e1:
0f:32:78:d9:d3:54:58:6b:f6:bb:93:79:a5:90:b3:
95:36:4c:ec:7f:c9:9f:79:51:aa:83:ff:f8:3c:6b:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A0:4E:78:7A:E2:C0:B7:22:E9:F4:3A:B6:F0:B2:14:A0:AE:6C:A9
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135352e302f32342d3234203d3e203631313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.155.0/24
Signature Algorithm: sha256WithRSAEncryption
38:17:66:36:78:34:72:bb:20:fe:ad:19:1b:f3:7d:60:02:54:
c2:0a:df:50:ab:b8:47:df:65:83:6d:4d:2f:fb:27:ba:5f:06:
18:1e:43:01:55:67:cc:31:86:5c:97:76:ab:b6:d3:a1:02:8f:
b2:e0:a6:97:06:2d:03:62:f1:d8:1b:53:57:f9:4d:69:62:6e:
f3:83:2a:da:88:e6:40:7f:0b:01:b3:61:ce:57:9a:49:d1:e5:
41:c1:24:47:06:ab:08:95:61:e9:ce:bb:8b:cd:1c:24:9d:29:
14:62:5e:7f:e7:8f:e3:28:3b:3c:23:a4:51:53:10:27:c0:bb:
51:34:33:e9:26:b2:e4:41:f0:05:ff:6d:27:c9:72:88:d2:41:
b5:70:5c:ff:e8:20:37:b9:ad:7e:be:03:f3:14:a8:9d:b0:22:
a8:5b:96:25:27:46:c2:7b:30:fa:01:0f:d0:dd:c4:ff:12:2b:
6b:1d:4c:38:11:d1:9c:ad:5e:1a:3f:18:49:1e:bd:6d:ed:20:
4b:23:9b:d2:c7:69:03:77:99:02:bf:4b:96:43:2b:0c:2c:59:
50:e5:94:2b:86:d6:df:76:e0:cc:30:a2:5a:eb:ce:4e:02:a0:
74:17:4c:f9:ae:90:52:db:42:9e:6b:f0:f0:3f:82:50:09:a6:
e5:a2:f3:cf
-----BEGIN CERTIFICATE-----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Generated at Sun Feb 4 16:33:28 2024 by rpki-client on console-ams.rpki-client.org