Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3137372e302f32342d3234203d3e203433303433.roa
File: 3137382e3230382e3137372e302f32342d3234203d3e203433303433.roa (raw, json)
Hash identifier: 0QMptycX+wgrPamCg+yihjkiL/NmmmY2OuxqqAI42GI=
Subject key identifier: 38:47:A3:B7:9D:58:43:69:01:55:F8:CE:80:9C:85:1F:8C:2F:94:BD
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 74AFA198DCF304BB2BFAFDDECD96AEB598E69503
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3137372e302f32342d3234203d3e203433303433.roa
Signing time: Wed 22 Mar 2023 15:29:39 +0000
ROA not before: Wed 22 Mar 2023 15:24:39 +0000
ROA not after: Wed 20 Mar 2024 15:29:39 +0000
asID: 43043
IP address blocks: 178.208.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:af:a1:98:dc:f3:04:bb:2b:fa:fd:de:cd:96:ae:b5:98:e6:95:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:39 2023 GMT
Not After : Mar 20 15:29:39 2024 GMT
Subject: CN=3847A3B79D5843690155F8CE809C851F8C2F94BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:ce:3a:d3:13:54:02:ed:10:16:f2:ad:df:
55:1a:a7:c5:86:55:f9:2f:61:37:9b:39:36:32:04:
f2:fc:41:d0:93:e0:4f:f7:92:9f:a8:50:70:fb:2c:
dc:8c:6d:de:8f:0d:72:f5:00:50:0c:05:fe:7f:8e:
20:74:9b:1d:b2:77:55:d9:71:02:49:1a:bf:c9:4a:
e2:9a:4d:b2:60:99:b2:4d:26:ab:09:4a:d2:90:55:
26:e7:3f:ed:b8:18:cd:75:f5:d2:e3:b7:8e:80:f3:
46:f7:87:92:97:f2:90:60:1f:8b:ac:2f:5c:9a:27:
9a:91:6a:64:22:83:40:95:6b:a5:14:78:05:cc:e5:
9e:74:ab:f3:6b:0d:cd:d7:a7:0e:27:78:51:85:b1:
ec:64:61:8d:d3:18:2e:39:8d:55:84:31:12:00:68:
fb:c2:ca:cd:eb:be:89:f5:ed:fb:91:b6:f3:a2:1b:
ca:9e:66:08:f4:7f:47:00:4f:e9:25:39:97:42:0e:
10:b1:4d:fe:a2:70:ed:66:42:31:db:11:55:2c:04:
aa:e7:24:18:80:58:7d:dc:d3:7b:94:f5:3e:46:90:
26:15:46:5f:00:fa:c5:1f:5f:74:41:d9:44:8f:18:
3a:99:51:03:99:d5:c3:88:8a:1b:5e:9f:16:28:1f:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:47:A3:B7:9D:58:43:69:01:55:F8:CE:80:9C:85:1F:8C:2F:94:BD
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3137372e302f32342d3234203d3e203433303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a6:3c:c0:6f:99:36:ab:2e:a9:24:a8:02:da:7e:7c:e8:54:
a4:b3:dd:00:57:37:41:41:e9:40:08:2b:7b:20:c5:50:ea:f5:
3a:96:44:61:0a:af:5c:c7:51:cc:55:b0:c9:67:35:d9:ab:16:
35:c8:e7:83:48:f1:b9:11:7d:f0:10:04:f9:88:98:87:c7:24:
e4:5f:44:46:e1:4d:3d:c7:94:3c:1b:14:d4:01:e2:0d:32:38:
4d:1a:79:c5:cd:b6:a4:4b:1c:a6:4d:17:cb:07:cd:56:55:64:
37:06:96:d2:11:e2:f4:40:7d:0f:65:9b:47:28:54:d9:ae:c7:
7a:9d:10:24:85:31:94:b2:94:43:74:ae:e1:5e:32:3c:ed:b9:
83:60:91:45:d0:5b:13:c4:0c:af:e2:56:a6:5a:60:01:6a:4a:
50:1a:ab:a6:87:43:70:02:19:da:29:f8:f6:05:f4:d3:96:1e:
7b:e9:14:a2:26:de:ac:ea:93:32:aa:35:71:8f:22:dc:cf:2f:
fb:3d:47:49:3d:c0:27:b2:a8:b1:9c:5c:cc:d8:4a:a4:cc:8d:
61:6b:64:5c:11:e9:e7:81:ce:0c:44:8d:30:b8:73:e2:84:12:
30:f1:89:ad:b0:f9:35:b8:86:44:36:2b:88:ad:3c:1c:e0:bb:
2a:1f:77:71
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdK+hmNzzBLsr+v3ezZautZjmlQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2E5NjgwMjM5NTQ1NWNhMDA2NzljNDFkNWMwNTZjYWU5
NWQ0YjU3ZDAeFw0yMzAzMjIxNTI0MzlaFw0yNDAzMjAxNTI5MzlaMDMxMTAvBgNV
BAMTKDM4NDdBM0I3OUQ1ODQzNjkwMTU1RjhDRTgwOUM4NTFGOEMyRjk0QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcs460xNUAu0QFvKt31Uap8WG
VfkvYTebOTYyBPL8QdCT4E/3kp+oUHD7LNyMbd6PDXL1AFAMBf5/jiB0mx2yd1XZ
cQJJGr/JSuKaTbJgmbJNJqsJStKQVSbnP+24GM119dLjt46A80b3h5KX8pBgH4us
L1yaJ5qRamQig0CVa6UUeAXM5Z50q/NrDc3Xpw4neFGFsexkYY3TGC45jVWEMRIA
aPvCys3rvon17fuRtvOiG8qeZgj0f0cAT+klOZdCDhCxTf6icO1mQjHbEVUsBKrn
JBiAWH3c03uU9T5GkCYVRl8A+sUfX3RB2USPGDqZUQOZ1cOIihtenxYoH3shAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUOEejt51YQ2kBVfjOgJyFH4wvlL0wHwYDVR0j
BBgwFoAUOpaAI5VFXKAGecQdXAVsrpXUtX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJmZmJjZTctODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2Vl
Nzg4LzAvM0E5NjgwMjM5NTQ1NUNBMDA2NzlDNDFENUMwNTZDQUU5NUQ0QjU3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09wYUFJNVZGWEtBR2VjUWRYQVZzcnBY
VXRYMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJmZmJjZTct
ODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2VlNzg4LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzMzMDM0MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACy0LEwDQYJKoZIhvcNAQELBQADggEBAKWmPMBvmTarLqkkqALafnzoVKSz3QBX
N0FB6UAIK3sgxVDq9TqWRGEKr1zHUcxVsMlnNdmrFjXI54NI8bkRffAQBPmImIfH
JORfREbhTT3HlDwbFNQB4g0yOE0aecXNtqRLHKZNF8sHzVZVZDcGltIR4vRAfQ9l
m0coVNmux3qdECSFMZSylEN0ruFeMjztuYNgkUXQWxPEDK/iVqZaYAFqSlAaq6aH
Q3ACGdop+PYF9NOWHnvpFKIm3qzqkzKqNXGPItzPL/s9R0k9wCeyqLGcXMzYSqTM
jWFrZFwR6eeBzgxEjTC4c+KEEjDxia2w+TW4hkQ2K4itPBzguyofd3E=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org