Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e20383334.roa
File: 3138352e3231322e3131332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: E7IXrSz1nn32b10IrHKxEmNtbC12bgM51HrWE93nC3M=
Subject key identifier: BC:73:5C:70:2A:81:89:03:A6:38:E1:99:14:CD:9C:CC:9E:61:43:5D
Certificate issuer: /CN=afb20114c4090291ec402479a620ddeae6bad620
Certificate serial: 0FBFBF59D47D57ED2617197BCDFFEDA19EDE0D20
Authority key identifier: AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e20383334.roa
Signing time: Tue 16 May 2023 14:00:03 +0000
ROA not before: Tue 16 May 2023 13:55:03 +0000
ROA not after: Tue 14 May 2024 14:00:03 +0000
asID: 834
IP address blocks: 185.212.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:bf:bf:59:d4:7d:57:ed:26:17:19:7b:cd:ff:ed:a1:9e:de:0d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb20114c4090291ec402479a620ddeae6bad620
Validity
Not Before: May 16 13:55:03 2023 GMT
Not After : May 14 14:00:03 2024 GMT
Subject: CN=BC735C702A818903A638E19914CD9CCC9E61435D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:06:f8:ae:5b:cb:94:e4:7d:73:35:08:eb:
92:3a:20:f6:97:49:40:15:2e:b3:72:78:67:53:85:
99:90:8b:eb:dc:c0:f3:7b:bb:e1:e7:7d:d6:9e:a7:
0e:52:50:82:20:5e:33:a6:3e:55:7b:d9:26:22:45:
8e:91:1f:a2:1c:53:60:1d:ec:8f:ca:06:f9:8e:0c:
e1:2f:d8:95:ed:87:80:0e:ff:c8:c6:e2:2f:a1:e9:
37:46:15:e4:46:71:50:03:6c:b1:13:a3:94:70:9c:
ad:56:b2:16:03:7d:70:c6:c0:54:b9:10:95:51:c4:
17:5c:8a:45:65:17:02:64:e4:2f:a4:f1:3c:ea:e4:
dd:7c:ad:ea:77:4d:b6:96:e4:8f:eb:41:44:b1:39:
dd:ac:88:a0:69:32:59:7d:40:83:fb:47:56:3d:8d:
6f:8e:13:5c:55:52:21:ea:80:9d:8a:65:8e:ee:b3:
c7:ae:24:19:0f:e3:b0:a0:aa:59:15:78:8f:7f:3c:
e9:0c:80:29:2d:13:e8:05:68:72:db:92:b9:56:89:
00:32:f6:1f:a3:f4:69:cf:35:44:5c:95:5d:6d:8a:
1b:11:05:04:60:4b:44:cc:fe:1c:3e:8a:f6:b6:f0:
43:39:11:64:3b:0e:73:fa:27:fd:b0:6c:9b:45:0e:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:73:5C:70:2A:81:89:03:A6:38:E1:99:14:CD:9C:CC:9E:61:43:5D
X509v3 Authority Key Identifier:
keyid:AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/AFB20114C4090291EC402479A620DDEAE6BAD620.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:26:bb:9c:70:9f:b8:08:68:13:f0:a6:e3:a1:7e:42:d4:ca:
61:e9:b6:65:ed:38:1b:c3:20:cc:ed:1d:dd:bd:ea:86:0a:12:
a1:84:b0:18:b6:ba:f1:2f:33:7b:5a:88:fc:fd:c9:ed:43:28:
79:bf:4f:f1:96:fd:1d:76:bd:34:0b:74:9f:0e:8b:d4:05:40:
77:ab:7c:07:69:8c:3c:60:99:30:a6:9f:83:d7:dd:3c:2d:ba:
54:bd:57:a1:0c:63:a1:6f:38:48:b2:a6:2a:48:9f:57:be:a6:
d2:9b:81:cc:f0:86:4d:0c:c9:35:36:02:c4:40:d1:20:04:12:
12:39:6b:8d:be:16:a7:b3:74:c1:e5:52:9d:ff:14:79:4d:f6:
5e:a4:e4:26:07:4b:2f:fe:0e:f6:41:4e:e2:9f:f3:2e:43:88:
2f:dc:09:e3:95:09:b0:5a:4c:96:a4:05:f5:2b:07:15:d3:6b:
c3:f5:ae:03:98:a0:85:5b:d6:37:23:78:1b:a6:53:92:9d:e3:
17:c6:eb:08:64:1d:83:ce:98:04:51:b9:e4:36:33:61:4b:44:
a9:35:16:18:75:f3:24:b8:cb:3f:a7:04:c7:dd:81:c5:87:f5:
ef:ab:b7:42:90:c8:1d:9a:6e:72:1d:d5:0d:88:36:43:4e:02:
f3:00:8f:6f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUD7+/WdR9V+0mFxl7zf/toZ7eDSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZiMjAxMTRjNDA5MDI5MWVjNDAyNDc5YTYyMGRkZWFl
NmJhZDYyMDAeFw0yMzA1MTYxMzU1MDNaFw0yNDA1MTQxNDAwMDNaMDMxMTAvBgNV
BAMTKEJDNzM1QzcwMkE4MTg5MDNBNjM4RTE5OTE0Q0Q5Q0NDOUU2MTQzNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnGgb4rlvLlOR9czUI65I6IPaX
SUAVLrNyeGdThZmQi+vcwPN7u+Hnfdaepw5SUIIgXjOmPlV72SYiRY6RH6IcU2Ad
7I/KBvmODOEv2JXth4AO/8jG4i+h6TdGFeRGcVADbLETo5RwnK1WshYDfXDGwFS5
EJVRxBdcikVlFwJk5C+k8Tzq5N18rep3TbaW5I/rQUSxOd2siKBpMll9QIP7R1Y9
jW+OE1xVUiHqgJ2KZY7us8euJBkP47CgqlkVeI9/POkMgCktE+gFaHLbkrlWiQAy
9h+j9GnPNURclV1tihsRBQRgS0TM/hw+iva28EM5EWQ7DnP6J/2wbJtFDgpHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUvHNccCqBiQOmOOGZFM2czJ5hQ10wHwYDVR0j
BBgwFoAUr7IBFMQJApHsQCR5piDd6ua61iAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTQ4OTA2YjUtNDMyYy00ZTZhLWI1ZTItMTEwZjI5NDU4
NjNiLzAvQUZCMjAxMTRDNDA5MDI5MUVDNDAyNDc5QTYyMERERUFFNkJBRDYyMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3I3SUJGTVFKQXBIc1FDUjVwaURkNnVh
NjFpQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTQ4OTA2YjUt
NDMyYy00ZTZhLWI1ZTItMTEwZjI5NDU4NjNiLzAvMzEzODM1MmUzMjMxMzIyZTMx
MzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnU
cTANBgkqhkiG9w0BAQsFAAOCAQEAnya7nHCfuAhoE/Cm46F+QtTKYem2Ze04G8Mg
zO0d3b3qhgoSoYSwGLa68S8ze1qI/P3J7UMoeb9P8Zb9HXa9NAt0nw6L1AVAd6t8
B2mMPGCZMKafg9fdPC26VL1XoQxjoW84SLKmKkifV76m0puBzPCGTQzJNTYCxEDR
IAQSEjlrjb4Wp7N0weVSnf8UeU32XqTkJgdLL/4O9kFO4p/zLkOIL9wJ45UJsFpM
lqQF9SsHFdNrw/WuA5ighVvWNyN4G6ZTkp3jF8brCGQdg86YBFG55DYzYUtEqTUW
GHXzJLjLP6cEx92BxYf176u3QpDIHZpuch3VDYg2Q04C8wCPbw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org