Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e20383334.roa
File: 3138352e322e3136302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: EQbG8eP3o9PUFlTdQCifxkEwWXxL6DRnq/Kb5vdc0Iw=
Subject key identifier: 07:1C:65:59:88:30:DC:8C:F0:E7:28:E9:7F:68:03:C3:2A:AD:EA:6F
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 1A51FA7981754F10CD1B24272746741E7CED1241
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e20383334.roa
Signing time: Wed 16 Oct 2024 00:01:30 +0000
ROA not before: Tue 15 Oct 2024 23:56:30 +0000
ROA not after: Wed 15 Oct 2025 00:01:30 +0000
asID: 834
IP address blocks: 185.2.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 07:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:51:fa:79:81:75:4f:10:cd:1b:24:27:27:46:74:1e:7c:ed:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Oct 15 23:56:30 2024 GMT
Not After : Oct 15 00:01:30 2025 GMT
Subject: CN=071C65598830DC8CF0E728E97F6803C32AADEA6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:3c:48:0b:19:34:f3:c2:7f:cf:9c:16:1a:
d5:5c:71:45:43:d0:e8:7a:42:e6:93:0d:4e:2a:18:
a6:ff:d3:3e:eb:19:ca:70:31:4b:0a:bb:88:bc:f9:
10:3d:c9:23:3e:b2:e1:04:9f:e5:ba:bf:ee:7b:19:
71:f8:48:b5:83:78:2b:b1:69:8a:a9:2b:40:6b:16:
5c:8d:3c:0c:8e:e7:9f:d8:1f:0e:51:71:b0:5c:8b:
a7:09:43:be:d7:46:43:e6:82:83:ea:03:b8:6b:66:
f1:98:4a:36:f8:6b:7f:5b:26:d1:26:3a:48:24:2c:
0c:0b:e0:93:b4:a9:4f:a8:bd:18:c6:a0:be:07:55:
b2:c6:9a:0d:2f:48:10:7a:d1:f2:c1:70:20:e0:2a:
b9:da:91:88:4b:e3:4a:f6:1d:8e:61:81:4f:8b:1c:
54:ea:6e:9c:a9:8f:c8:5d:8d:02:93:bb:8b:db:05:
72:1a:01:b2:45:22:ab:ba:62:03:6e:ad:ae:2f:0a:
33:d0:49:29:74:03:24:31:94:44:c3:bb:6b:77:9f:
62:eb:66:cb:27:45:f2:72:69:c1:41:66:1f:ff:3b:
f9:64:3a:b3:2b:a9:1a:94:ea:92:c8:dd:08:af:12:
c2:0b:ff:4f:02:8d:98:b7:cc:43:f7:93:95:9f:cc:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1C:65:59:88:30:DC:8C:F0:E7:28:E9:7F:68:03:C3:2A:AD:EA:6F
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/23
Signature Algorithm: sha256WithRSAEncryption
72:9a:be:a3:d2:0c:80:96:44:45:8f:bd:5a:a2:60:53:e3:01:
57:13:74:d4:70:28:c0:3b:8b:a9:93:b2:04:e2:58:96:de:f8:
36:de:36:88:8c:68:32:d0:d9:52:d9:c1:f3:c2:d2:45:94:70:
0c:9c:46:c0:bd:87:92:ff:33:6e:ad:55:19:4f:d6:27:9f:58:
e9:e6:35:f2:5b:e0:bf:53:ef:a6:1b:8e:18:6c:92:9b:90:7e:
53:b6:76:f9:dd:cf:2c:b9:f9:03:fd:3e:60:53:b2:05:c5:67:
79:e4:5e:50:ee:47:b2:62:07:a5:40:39:e8:84:0b:2e:39:e1:
e4:b1:09:77:1d:bb:dd:6b:95:5e:81:5a:70:04:f3:b6:c4:a8:
ed:c4:d9:e7:39:d6:be:d5:c1:8a:79:88:c8:ba:94:8e:dc:48:
bd:36:00:52:07:42:01:ed:6f:2b:74:28:9c:d3:2b:a2:2f:6f:
c4:56:53:ab:c9:30:c2:b7:9d:fa:30:19:90:73:fe:a0:82:83:
eb:86:98:b8:b8:d1:8a:58:93:56:4d:75:b0:1d:a2:b6:8b:27:
5f:87:f8:f4:36:70:22:b5:23:8c:90:eb:ac:70:9a:d7:89:49:
f4:dd:a3:2e:ca:f0:6c:e8:b9:ff:b5:eb:2b:bc:36:64:ab:19:
4c:c2:2f:d2
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUGlH6eYF1TxDNGyQnJ0Z0HnztEkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yNDEwMTUyMzU2MzBaFw0yNTEwMTUwMDAxMzBaMDMxMTAvBgNV
BAMTKDA3MUM2NTU5ODgzMERDOENGMEU3MjhFOTdGNjgwM0MzMkFBREVBNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKzxICxk088J/z5wWGtVccUVD
0Oh6QuaTDU4qGKb/0z7rGcpwMUsKu4i8+RA9ySM+suEEn+W6v+57GXH4SLWDeCux
aYqpK0BrFlyNPAyO55/YHw5RcbBci6cJQ77XRkPmgoPqA7hrZvGYSjb4a39bJtEm
OkgkLAwL4JO0qU+ovRjGoL4HVbLGmg0vSBB60fLBcCDgKrnakYhL40r2HY5hgU+L
HFTqbpypj8hdjQKTu4vbBXIaAbJFIqu6YgNura4vCjPQSSl0AyQxlETDu2t3n2Lr
ZssnRfJyacFBZh//O/lkOrMrqRqU6pLI3QivEsIL/08CjZi3zEP3k5WfzL29AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUBxxlWYgw3Izw5yjpf2gDwyqt6m8wHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQt
NDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3ODEzLzAvMzEzODM1MmUzMjJlMzEzNjMw
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQKgMA0G
CSqGSIb3DQEBCwUAA4IBAQBymr6j0gyAlkRFj71aomBT4wFXE3TUcCjAO4upk7IE
4liW3vg23jaIjGgy0NlS2cHzwtJFlHAMnEbAvYeS/zNurVUZT9Ynn1jp5jXyW+C/
U++mG44YbJKbkH5Ttnb53c8sufkD/T5gU7IFxWd55F5Q7keyYgelQDnohAsuOeHk
sQl3Hbvda5VegVpwBPO2xKjtxNnnOda+1cGKeYjIupSO3Ei9NgBSB0IB7W8rdCic
0yuiL2/EVlOryTDCt536MBmQc/6ggoPrhpi4uNGKWJNWTXWwHaK2iydfh/j0NnAi
tSOMkOuscJrXiUn03aMuyvBs6Ln/tesrvDZkqxlMwi/S
-----END CERTIFICATE-----
Generated at Sat Oct 26 09:51:45 2024 by rpki-client on console-ams.rpki-client.org