Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20383334.roa
File: 3138352e3138362e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: HbWpvxqIgHwRjA/1Lt0YD7XnkjNCpNygtE/b0HSS2qI=
Subject key identifier: 57:8D:C3:AA:21:8C:C0:7B:F8:74:E0:00:56:42:DE:D5:A7:F2:A2:05
Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial: 64CD039B4810349B5A53C4CB2487D0A6CED28323
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20383334.roa
Signing time: Wed 14 Aug 2024 00:03:26 +0000
ROA not before: Tue 13 Aug 2024 23:58:26 +0000
ROA not after: Wed 13 Aug 2025 00:03:26 +0000
asID: 834
IP address blocks: 185.186.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 11:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:cd:03:9b:48:10:34:9b:5a:53:c4:cb:24:87:d0:a6:ce:d2:83:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Validity
Not Before: Aug 13 23:58:26 2024 GMT
Not After : Aug 13 00:03:26 2025 GMT
Subject: CN=578DC3AA218CC07BF874E0005642DED5A7F2A205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:23:9e:55:cd:bd:44:d2:3c:5f:99:62:10:
d9:59:9f:5f:fc:c5:fc:0e:65:3b:81:d4:95:19:ef:
d2:7d:38:63:2d:01:a4:71:7c:fe:eb:7d:ad:8b:93:
28:49:d5:b5:d5:57:2c:fa:7c:09:c4:7c:6c:af:7d:
40:c2:2c:bd:87:94:52:6b:47:81:0b:3a:e0:3d:d4:
88:59:5b:51:d1:e5:75:bb:80:76:62:b4:2c:14:1a:
d6:38:df:08:5a:fa:f5:6b:04:3a:70:de:44:9d:46:
1a:a3:a0:c0:bc:28:ba:3b:75:7c:45:e3:bb:51:e1:
65:72:89:c0:d3:e0:1c:c6:35:aa:94:26:d2:92:13:
72:24:40:39:2c:8d:68:2d:f2:71:12:3e:8f:3c:4a:
99:82:ae:1f:08:45:61:34:2b:bb:b2:70:6f:59:27:
2a:42:0c:74:15:57:39:4e:c7:64:70:35:c6:b1:a9:
12:5c:58:f9:bd:61:4a:68:ce:e9:b8:4e:31:ca:72:
12:15:8a:3f:a3:c7:3d:5d:06:b2:01:b4:12:3f:06:
6e:c1:f4:0c:92:48:2f:22:b5:f8:07:12:76:dc:35:
cf:0f:32:bb:75:d2:ca:a6:bc:9a:c3:d7:1d:93:2f:
48:51:ff:26:c3:3b:a7:be:0e:e6:fb:0a:32:80:8a:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:C3:AA:21:8C:C0:7B:F8:74:E0:00:56:42:DE:D5:A7:F2:A2:05
X509v3 Authority Key Identifier:
keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:06:8f:a0:2d:65:6a:98:a0:96:d9:2b:c3:49:5e:3c:4c:a2:
78:2d:64:b5:41:f6:fb:0f:1d:8b:8a:9e:51:57:fe:85:26:fd:
18:82:44:f8:15:66:3f:72:c7:49:82:d7:45:55:fd:3e:c1:d3:
ce:3d:21:af:95:5a:72:6d:a0:ad:29:e0:73:ea:f1:c6:e3:ad:
09:6e:35:50:f7:28:a9:32:39:68:a6:b2:83:97:0d:7a:52:8b:
a2:1f:dd:41:e4:8c:09:18:31:cf:73:78:7b:62:8f:f4:ee:29:
3b:60:d7:c8:24:ff:dc:b4:b2:5a:c8:55:15:56:31:e9:af:44:
c5:27:51:66:c9:f2:20:91:4d:ef:f2:a6:16:dc:99:9c:4d:10:
f4:cb:aa:d8:f8:bf:1d:7b:83:99:de:ae:dc:c2:48:45:75:07:
ec:2a:d5:23:fa:30:b9:4e:73:ec:d1:f5:42:d0:e1:43:cc:b1:
91:e9:05:85:45:11:99:e3:34:cb:a9:bb:31:7a:d1:eb:13:10:
75:89:50:d5:90:66:9d:10:e9:78:87:5c:ac:93:43:f2:0b:03:
f1:78:5e:35:72:9e:d2:d8:e5:68:da:b9:7c:78:8a:ed:3a:23:
7d:b7:c4:f9:31:64:0c:81:c8:88:b1:2c:14:29:61:4c:be:fa:
d7:75:64:c0
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 14 16:07:25 2024 by rpki-client on console-fra.rpki-client.org