Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32332d3234203d3e20383334.roa
File: 3138352e3230352e3232302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: yN+Lay2tMWEV1Vr8anvHZXBSMMTw9Tf7ViZXiXf1+2w=
Subject key identifier: 0D:A0:73:B3:8C:14:5A:18:20:0A:3F:D2:3A:F6:92:15:CF:F3:15:AB
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 48CFEDF061BE32A1D976C1BD78513B94AA8C01F9
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32332d3234203d3e20383334.roa
Signing time: Fri 29 Dec 2023 00:00:05 +0000
ROA not before: Thu 28 Dec 2023 23:55:05 +0000
ROA not after: Fri 27 Dec 2024 00:00:05 +0000
asID: 834
IP address blocks: 185.205.220.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cf:ed:f0:61:be:32:a1:d9:76:c1:bd:78:51:3b:94:aa:8c:01:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Dec 28 23:55:05 2023 GMT
Not After : Dec 27 00:00:05 2024 GMT
Subject: CN=0DA073B38C145A18200A3FD23AF69215CFF315AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:b9:9d:bd:1c:ac:eb:4a:b6:c9:39:0b:dd:
d3:0c:8d:09:61:cb:6c:a0:1a:d7:f8:04:7c:be:81:
12:03:73:b5:bd:f9:c1:b9:c6:ee:86:97:51:7e:53:
e9:54:fc:71:c8:f3:34:b7:46:dd:63:e1:ae:4c:24:
74:59:0c:b5:34:54:39:9e:8f:99:eb:65:16:63:c7:
62:0e:3c:94:ee:2f:db:d0:e4:eb:0d:a9:5e:6f:4d:
83:82:7b:21:7d:4d:21:d5:70:52:a8:f3:50:92:aa:
ad:96:ed:eb:98:68:e6:90:ec:46:1b:0f:00:5a:07:
b6:d8:ad:3f:4d:9c:41:85:47:d9:16:6a:bf:d5:0d:
ce:be:c8:95:46:7e:87:24:8d:09:84:a3:4d:2b:d5:
00:8a:e0:53:f0:1c:dd:a1:81:14:f2:50:d0:00:f8:
f8:e4:ec:54:ea:7b:79:ae:7e:c3:24:f8:76:e4:4f:
ec:1f:9b:ff:1d:45:fa:00:40:42:73:29:f9:1a:09:
59:8b:1c:7e:1d:e5:13:93:a3:09:0e:81:bd:2f:f3:
94:93:2b:ef:6b:80:ed:30:df:62:4a:5b:56:9b:6a:
ba:44:77:93:08:bc:4b:7e:80:ee:9a:92:4c:7b:d9:
f8:36:f9:ad:45:90:eb:4c:c1:8d:23:bf:3d:35:4b:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A0:73:B3:8C:14:5A:18:20:0A:3F:D2:3A:F6:92:15:CF:F3:15:AB
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.220.0/23
Signature Algorithm: sha256WithRSAEncryption
71:1f:08:12:aa:bb:92:a7:72:48:d9:ba:72:26:c4:db:b3:c6:
59:1c:f0:c6:e4:2b:8b:9a:81:3f:1d:a2:d1:92:7e:d0:bc:f3:
42:ce:c1:fa:dd:b8:5f:67:b7:f3:61:61:a0:09:89:52:a1:1a:
b4:86:e3:fe:58:5c:e9:32:b6:cd:7e:a1:79:d2:a9:a7:68:27:
f4:7c:f4:ac:75:b0:1e:00:98:b0:5f:a4:9e:a6:7c:c2:70:39:
d5:31:d5:5a:e8:86:78:54:6a:d7:2d:63:a7:c8:ee:0a:a7:db:
4d:0b:92:34:82:0e:c4:4a:1d:91:bd:bd:2c:0d:8f:eb:44:58:
3b:ba:7c:60:d5:47:ac:7f:81:ff:91:46:e8:3d:ca:f6:8d:1e:
ae:12:fa:ce:89:e7:90:f0:f6:00:af:29:4e:17:a5:5e:37:92:
9f:4a:c0:18:25:3c:29:f3:16:d8:a2:34:f4:7d:16:66:a6:c2:
6d:72:06:34:fa:43:98:44:89:92:92:59:e2:f0:55:27:5d:8b:
a6:20:04:14:2f:7a:f3:b0:7d:e4:b4:48:f6:bc:5e:cc:86:cb:
46:05:43:06:56:e2:ca:25:11:f5:6a:5e:5b:a4:32:4e:b2:ba:
d3:8a:bf:c8:52:13:b9:b6:b2:9f:15:97:ae:f0:d1:11:93:fe:
42:fc:fa:28
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUSM/t8GG+MqHZdsG9eFE7lKqMAfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yMzEyMjgyMzU1MDVaFw0yNDEyMjcwMDAwMDVaMDMxMTAvBgNV
BAMTKDBEQTA3M0IzOEMxNDVBMTgyMDBBM0ZEMjNBRjY5MjE1Q0ZGMzE1QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogbmdvRys60q2yTkL3dMMjQlh
y2ygGtf4BHy+gRIDc7W9+cG5xu6Gl1F+U+lU/HHI8zS3Rt1j4a5MJHRZDLU0VDme
j5nrZRZjx2IOPJTuL9vQ5OsNqV5vTYOCeyF9TSHVcFKo81CSqq2W7euYaOaQ7EYb
DwBaB7bYrT9NnEGFR9kWar/VDc6+yJVGfockjQmEo00r1QCK4FPwHN2hgRTyUNAA
+Pjk7FTqe3mufsMk+HbkT+wfm/8dRfoAQEJzKfkaCVmLHH4d5ROTowkOgb0v85ST
K+9rgO0w32JKW1abarpEd5MIvEt+gO6akkx72fg2+a1FkOtMwY0jvz01Sw9BAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUDaBzs4wUWhggCj/SOvaSFc/zFaswHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzODM1MmUzMjMwMzUyZTMy
MzIzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnN
3DANBgkqhkiG9w0BAQsFAAOCAQEAcR8IEqq7kqdySNm6cibE27PGWRzwxuQri5qB
Px2i0ZJ+0LzzQs7B+t24X2e382FhoAmJUqEatIbj/lhc6TK2zX6hedKpp2gn9Hz0
rHWwHgCYsF+knqZ8wnA51THVWuiGeFRq1y1jp8juCqfbTQuSNIIOxEodkb29LA2P
60RYO7p8YNVHrH+B/5FG6D3K9o0erhL6zonnkPD2AK8pThelXjeSn0rAGCU8KfMW
2KI09H0WZqbCbXIGNPpDmESJkpJZ4vBVJ12LpiAEFC9687B95LRI9rxezIbLRgVD
BlbiyiUR9WpeW6QyTrK604q/yFITubaynxWXrvDREZP+Qvz6KA==
-----END CERTIFICATE-----
Generated at Fri Jan 5 14:17:39 2024 by rpki-client on console-ams.rpki-client.org