Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/3138352e3230362e3235332e302f32342d3234203d3e20333938343635.roa
File: 3138352e3230362e3235332e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: fSbQ8eR+f5ZcnEnZBJ+ipKag5fnEX8R1qNfDsA8RWhQ=
Subject key identifier: 5F:A0:97:73:F5:7B:8C:E1:FB:FB:F4:B6:E4:28:0E:2D:26:6C:ED:B5
Certificate issuer: /CN=68d097afd88aef3f10282f3218fc13f01a0de486
Certificate serial: 26A2C854FBED69746D88EFF4C755AA46C6DD2182
Authority key identifier: 68:D0:97:AF:D8:8A:EF:3F:10:28:2F:32:18:FC:13:F0:1A:0D:E4:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNCXr9iK7z8QKC8yGPwT8BoN5IY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/3138352e3230362e3235332e302f32342d3234203d3e20333938343635.roa
Signing time: Wed 14 Aug 2024 09:32:35 +0000
ROA not before: Wed 14 Aug 2024 09:27:35 +0000
ROA not after: Wed 13 Aug 2025 09:32:35 +0000
asID: 398465
IP address blocks: 185.206.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 00:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a2:c8:54:fb:ed:69:74:6d:88:ef:f4:c7:55:aa:46:c6:dd:21:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d097afd88aef3f10282f3218fc13f01a0de486
Validity
Not Before: Aug 14 09:27:35 2024 GMT
Not After : Aug 13 09:32:35 2025 GMT
Subject: CN=5FA09773F57B8CE1FBFBF4B6E4280E2D266CEDB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:55:67:91:0e:d1:a2:d6:ea:25:cf:f2:c3:
ef:6d:c5:f6:57:53:c2:bb:9b:4e:a8:95:f8:eb:2b:
0a:24:d3:e9:ae:3a:e6:bd:69:6b:78:26:7b:98:43:
25:dc:6e:d5:7d:d9:c9:74:61:99:b0:fc:bf:0c:07:
3e:21:a1:70:e9:9a:28:d0:18:2e:2e:3a:9e:05:31:
3e:10:94:f3:09:c1:da:7c:36:d3:b4:a5:35:49:0c:
a8:70:8b:a6:60:50:57:cb:82:bb:c0:04:40:2d:4c:
e1:54:e3:c6:d9:57:ad:8a:ac:ac:e0:ae:36:0a:7f:
bc:8f:e0:10:91:b5:6f:3b:65:35:29:9e:23:de:34:
1b:c7:39:e8:d5:ab:cf:b4:27:44:c7:17:59:6f:e7:
c4:ad:57:d8:30:08:e2:3c:50:30:6a:68:47:24:c5:
94:bd:4d:d2:f0:97:84:cd:fa:fe:15:ef:0e:d2:bd:
e2:58:bb:77:65:6f:1c:ca:81:8f:f9:f8:25:3f:28:
6a:66:e4:38:98:62:8a:d4:84:c9:66:e1:2a:36:08:
24:63:65:43:c9:c0:63:89:f4:b5:a0:95:4f:99:d5:
0c:c5:0b:59:e3:0a:bd:7e:7a:68:6f:23:ee:46:ef:
c7:19:df:5b:3b:e7:05:e6:78:c4:61:e6:e0:74:25:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A0:97:73:F5:7B:8C:E1:FB:FB:F4:B6:E4:28:0E:2D:26:6C:ED:B5
X509v3 Authority Key Identifier:
keyid:68:D0:97:AF:D8:8A:EF:3F:10:28:2F:32:18:FC:13:F0:1A:0D:E4:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/68D097AFD88AEF3F10282F3218FC13F01A0DE486.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNCXr9iK7z8QKC8yGPwT8BoN5IY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/3138352e3230362e3235332e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.253.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c4:01:d3:90:bd:45:b3:78:2c:8b:ff:d5:c4:da:83:14:0e:
54:89:14:36:87:09:ab:42:71:c2:cf:6d:94:1d:fa:b7:6a:82:
22:05:43:86:42:a3:a0:6a:05:e4:6d:2b:7c:9e:17:1c:f0:7e:
84:64:2a:30:70:2f:50:76:a7:1d:dc:5c:88:6c:65:1d:61:e3:
92:82:9b:1d:e6:cc:37:d9:d6:1b:44:51:40:e5:a9:09:73:1a:
66:40:28:ff:9a:6b:05:9b:6b:85:4d:50:c2:dd:bf:f2:7d:ed:
5a:36:59:8e:8c:73:29:15:44:ec:f3:25:17:e4:67:39:63:f9:
9b:76:1f:7a:9a:d9:77:2f:7d:aa:6d:2d:77:91:c3:1c:a3:cf:
4e:97:04:aa:c0:b4:46:10:d2:a2:c9:79:2f:3f:da:88:b6:c9:
7a:a2:95:98:04:83:61:de:e3:71:33:d9:06:8d:01:9d:70:11:
0f:e0:0e:af:04:d7:a7:95:80:f6:98:c9:e1:ed:21:0c:7b:09:
cd:d6:32:73:66:aa:3d:30:51:32:61:f4:a9:90:99:07:b6:49:
87:19:d6:b0:1a:36:bb:c4:40:b4:04:66:ff:56:42:82:ae:c4:
ce:b4:b6:c6:3d:db:4f:c9:db:cd:9f:3e:f1:02:0c:ef:7b:af:
4a:22:69:4a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUJqLIVPvtaXRtiO/0x1WqRsbdIYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhkMDk3YWZkODhhZWYzZjEwMjgyZjMyMThmYzEzZjAx
YTBkZTQ4NjAeFw0yNDA4MTQwOTI3MzVaFw0yNTA4MTMwOTMyMzVaMDMxMTAvBgNV
BAMTKDVGQTA5NzczRjU3QjhDRTFGQkZCRjRCNkU0MjgwRTJEMjY2Q0VEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPO1VnkQ7RotbqJc/yw+9txfZX
U8K7m06olfjrKwok0+muOua9aWt4JnuYQyXcbtV92cl0YZmw/L8MBz4hoXDpmijQ
GC4uOp4FMT4QlPMJwdp8NtO0pTVJDKhwi6ZgUFfLgrvABEAtTOFU48bZV62KrKzg
rjYKf7yP4BCRtW87ZTUpniPeNBvHOejVq8+0J0THF1lv58StV9gwCOI8UDBqaEck
xZS9TdLwl4TN+v4V7w7SveJYu3dlbxzKgY/5+CU/KGpm5DiYYorUhMlm4So2CCRj
ZUPJwGOJ9LWglU+Z1QzFC1njCr1+emhvI+5G78cZ31s75wXmeMRh5uB0JWzPAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUX6CXc/V7jOH7+/S25CgOLSZs7bUwHwYDVR0j
BBgwFoAUaNCXr9iK7z8QKC8yGPwT8BoN5IYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2MxMWI4MTktZDQ1OS00MTM2LTk5ODctZjAyOTJhODdl
NjQwLzAvNjhEMDk3QUZEODhBRUYzRjEwMjgyRjMyMThGQzEzRjAxQTBERTQ4Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FOQ1hyOWlLN3o4UUtDOHlHUHdUOEJv
TjVJWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2MxMWI4MTkt
ZDQ1OS00MTM2LTk5ODctZjAyOTJhODdlNjQwLzAvMzEzODM1MmUzMjMwMzYyZTMy
MzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM0MzYzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnO/TANBgkqhkiG9w0BAQsFAAOCAQEAIsQB05C9RbN4LIv/1cTagxQOVIkU
NocJq0Jxws9tlB36t2qCIgVDhkKjoGoF5G0rfJ4XHPB+hGQqMHAvUHanHdxciGxl
HWHjkoKbHebMN9nWG0RRQOWpCXMaZkAo/5prBZtrhU1Qwt2/8n3tWjZZjoxzKRVE
7PMlF+RnOWP5m3YfeprZdy99qm0td5HDHKPPTpcEqsC0RhDSosl5Lz/aiLbJeqKV
mASDYd7jcTPZBo0BnXARD+AOrwTXp5WA9pjJ4e0hDHsJzdYyc2aqPTBRMmH0qZCZ
B7ZJhxnWsBo2u8RAtARm/1ZCgq7EzrS2xj3bT8nbzZ8+8QIM73uvSiJpSg==
-----END CERTIFICATE-----
Generated at Thu Nov 14 01:58:08 2024 by rpki-client on console-fra.rpki-client.org