Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3233203d3e20323638353831.roa
File: 3138352e322e3136302e302f32332d3233203d3e20323638353831.roa (raw, json)
Hash identifier: cqyz85Zlk7f+udEiERDPhA8lkj60OI/0NXHWMfLaM80=
Subject key identifier: 92:C0:32:17:ED:D9:01:0D:0A:19:80:70:D4:5A:85:D8:6C:06:AA:95
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 0CE4E5B08BD4090793C96D50DFFA60EFC35AD759
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3233203d3e20323638353831.roa
Signing time: Wed 21 Jun 2023 08:10:55 +0000
ROA not before: Wed 21 Jun 2023 08:05:55 +0000
ROA not after: Wed 19 Jun 2024 08:10:55 +0000
asID: 268581
IP address blocks: 185.2.160.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e4:e5:b0:8b:d4:09:07:93:c9:6d:50:df:fa:60:ef:c3:5a:d7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jun 21 08:05:55 2023 GMT
Not After : Jun 19 08:10:55 2024 GMT
Subject: CN=92C03217EDD9010D0A198070D45A85D86C06AA95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:68:e7:24:85:6f:52:13:6a:0d:fc:22:48:
b7:47:0d:bd:3e:0b:4b:fa:5b:cb:f9:61:32:18:4c:
ec:1f:cc:fb:d5:27:9c:6c:30:a7:56:18:84:27:14:
dc:82:60:ea:a8:64:6c:c0:c6:d1:71:fa:6e:37:30:
e4:e1:c9:3a:45:5c:34:ce:c2:78:90:e0:18:8f:57:
40:7a:8e:47:c3:bc:84:16:43:b6:3b:1a:ae:ab:fb:
cf:eb:1c:93:ce:c8:ac:5a:37:5a:12:d8:76:ef:60:
db:39:d3:0c:81:b4:64:6c:e5:47:da:89:0e:bc:69:
c0:e0:8b:03:0e:bb:2f:a4:c6:f3:57:fb:5b:1d:07:
c8:7c:28:12:f7:4d:6a:9d:e4:ef:13:e7:89:a7:94:
73:90:de:8c:a1:13:de:76:0c:3e:00:ac:8c:8c:ca:
56:03:05:9a:e6:02:d5:c5:47:c1:36:4f:7a:b9:e7:
08:1c:68:be:c0:17:74:42:97:a6:99:d5:de:8d:25:
ac:09:24:56:2c:e8:c7:38:a9:84:3b:08:7f:05:84:
c5:b8:05:c3:ba:c3:91:a1:c6:ff:76:3d:c8:f6:9c:
22:16:82:1f:1a:a7:08:41:68:4c:74:ae:f5:6e:07:
9b:bc:b4:d4:68:d2:9c:ec:45:4d:29:0a:57:8f:80:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C0:32:17:ED:D9:01:0D:0A:19:80:70:D4:5A:85:D8:6C:06:AA:95
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3233203d3e20323638353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:c0:69:fb:43:f7:61:d9:8a:d5:a2:17:a8:30:b8:22:97:f9:
93:27:26:bd:10:01:91:5c:f9:ba:17:07:91:91:a0:cd:62:be:
0c:7a:b3:dc:98:a1:3f:04:74:bc:dc:90:85:0e:3c:9e:a4:22:
39:dc:ca:8d:93:84:b5:74:de:9f:81:9c:b9:fd:93:27:36:79:
6d:a8:99:30:8a:85:ab:f8:eb:e5:90:10:85:17:4b:eb:fb:9a:
49:77:7e:08:87:3b:95:25:cd:a6:ac:af:2e:17:10:26:19:49:
df:ea:92:10:3d:e0:94:f6:12:a0:7c:93:31:f2:8e:f3:ff:aa:
04:d2:ad:42:09:cf:0a:8b:c9:0e:4b:2a:e6:2c:d9:cc:8f:d3:
a2:03:b8:a8:bc:93:71:06:17:98:d6:68:1d:66:d2:4e:1c:73:
8b:e3:c3:77:da:82:cd:53:c3:2d:d3:84:9a:fc:62:76:3b:50:
2f:0c:2a:32:4a:34:43:23:52:9c:5b:fc:e9:0d:16:3a:ed:7d:
5d:d1:6d:7e:57:e3:7d:6c:ec:e5:61:d9:a3:00:27:63:28:7c:
53:96:6d:f8:0b:37:ea:11:84:13:1b:89:f3:83:b7:76:fc:b7:
99:67:f8:c3:0c:7e:d9:bc:95:41:94:cd:6f:db:ca:5b:d9:01:
ca:34:a9:9e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUDOTlsIvUCQeTyW1Q3/pg78Na11kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yMzA2MjEwODA1NTVaFw0yNDA2MTkwODEwNTVaMDMxMTAvBgNV
BAMTKDkyQzAzMjE3RUREOTAxMEQwQTE5ODA3MEQ0NUE4NUQ4NkMwNkFBOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+mjnJIVvUhNqDfwiSLdHDb0+
C0v6W8v5YTIYTOwfzPvVJ5xsMKdWGIQnFNyCYOqoZGzAxtFx+m43MOThyTpFXDTO
wniQ4BiPV0B6jkfDvIQWQ7Y7Gq6r+8/rHJPOyKxaN1oS2HbvYNs50wyBtGRs5Ufa
iQ68acDgiwMOuy+kxvNX+1sdB8h8KBL3TWqd5O8T54mnlHOQ3oyhE952DD4ArIyM
ylYDBZrmAtXFR8E2T3q55wgcaL7AF3RCl6aZ1d6NJawJJFYs6Mc4qYQ7CH8FhMW4
BcO6w5Ghxv92Pcj2nCIWgh8apwhBaEx0rvVuB5u8tNRo0pzsRU0pClePgH2rAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUksAyF+3ZAQ0KGYBw1FqF2GwGqpUwHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQt
NDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3ODEzLzAvMzEzODM1MmUzMjJlMzEzNjMw
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4MzUzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
uQKgMA0GCSqGSIb3DQEBCwUAA4IBAQA7wGn7Q/dh2YrVoheoMLgil/mTJya9EAGR
XPm6FweRkaDNYr4MerPcmKE/BHS83JCFDjyepCI53MqNk4S1dN6fgZy5/ZMnNnlt
qJkwioWr+OvlkBCFF0vr+5pJd34IhzuVJc2mrK8uFxAmGUnf6pIQPeCU9hKgfJMx
8o7z/6oE0q1CCc8Ki8kOSyrmLNnMj9OiA7iovJNxBheY1mgdZtJOHHOL48N32oLN
U8Mt04Sa/GJ2O1AvDCoySjRDI1KcW/zpDRY67X1d0W1+V+N9bOzlYdmjACdjKHxT
lm34CzfqEYQTG4nzg7d2/LeZZ/jDDH7ZvJVBlM1v28pb2QHKNKme
Generated at Sun Dec 31 01:44:31 2023 by rpki-client on console-fra.rpki-client.org