Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32342d3234203d3e203631333137.roa
File: 3138352e322e3136322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: TBRb7kdMTK9uBHXWKvjVei6oX5f+KHz7AiY9C+EIkVM=
Subject key identifier: 38:AF:92:EB:B3:6C:A2:52:A7:46:17:F4:1B:AA:51:DB:32:29:67:90
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 710A4CF9D4BD93CBA8F0F660B229AC666F5B3AE2
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32342d3234203d3e203631333137.roa
Signing time: Wed 21 Jun 2023 08:10:53 +0000
ROA not before: Wed 21 Jun 2023 08:05:53 +0000
ROA not after: Wed 19 Jun 2024 08:10:53 +0000
asID: 61317
IP address blocks: 185.2.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0a:4c:f9:d4:bd:93:cb:a8:f0:f6:60:b2:29:ac:66:6f:5b:3a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jun 21 08:05:53 2023 GMT
Not After : Jun 19 08:10:53 2024 GMT
Subject: CN=38AF92EBB36CA252A74617F41BAA51DB32296790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:53:1e:04:5b:8c:93:a7:58:6c:bc:da:48:
76:ce:0b:7f:0b:22:72:5a:25:8d:b7:25:e2:3a:4c:
19:31:9b:a6:db:82:a0:1e:dc:56:af:90:57:a2:bc:
c9:a6:ef:91:8b:80:ff:7a:35:5c:f5:97:08:db:5f:
a4:d5:f1:44:a9:e8:6c:e0:d6:04:6e:c1:fa:bb:dd:
26:44:72:02:9c:7b:1d:c6:03:fa:fb:09:73:e4:d6:
ea:5d:14:5f:c8:e2:2d:2c:67:77:9f:12:c7:21:5c:
62:30:60:9f:b9:ff:e2:d0:b8:86:54:4d:65:59:ff:
e9:f8:3b:7a:e3:b2:a6:ab:f8:ba:d3:f9:3d:90:37:
31:c3:a3:02:03:9d:6d:73:1d:ca:16:5a:9d:7e:2d:
e1:4e:47:f6:f3:dc:3e:10:44:e6:46:04:16:ae:a2:
92:79:cd:f6:54:56:f3:04:43:28:3c:b1:95:8c:35:
dc:75:ca:a6:1f:15:35:b2:49:3e:a9:92:4d:f5:06:
91:a6:9a:d8:67:1d:8b:45:d4:cc:75:e3:d5:1c:dc:
d9:90:cb:ec:46:12:56:49:da:96:dd:24:05:7b:00:
97:e9:88:89:28:79:04:45:54:9d:94:c8:99:35:c6:
cc:b3:fe:5b:f7:a7:9a:6c:6c:43:84:ba:fa:e7:29:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AF:92:EB:B3:6C:A2:52:A7:46:17:F4:1B:AA:51:DB:32:29:67:90
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:78:37:5a:7a:05:1f:27:78:66:c9:40:a2:2b:00:64:8d:d8:
ea:e9:7d:1e:35:23:55:bd:f6:80:74:6a:e9:c5:db:91:d4:bb:
37:ff:9b:a0:80:26:56:b2:72:15:fb:79:bb:fd:46:8f:4c:53:
ac:09:b1:09:db:d1:af:be:e5:ee:64:ad:49:52:36:05:df:f5:
04:06:30:70:3e:e0:da:35:f7:06:76:55:32:1b:17:9d:d0:bf:
3f:b5:60:dd:18:0a:55:9d:b8:cb:c0:aa:d0:88:cc:9c:5e:a4:
f0:bb:19:d0:21:5e:81:20:92:71:a5:39:2e:9d:4b:32:e7:19:
e1:cc:c5:e4:31:93:4f:92:21:f6:db:d3:d1:3d:52:1a:33:13:
6e:df:19:54:7c:03:9c:84:fa:c4:7b:93:b9:58:47:2c:09:0b:
92:dc:42:04:10:1f:3d:60:f6:fb:67:78:cb:18:17:d1:51:3b:
30:6f:eb:99:36:cc:48:fb:35:0b:6e:76:f3:99:0b:cd:94:f0:
3c:d0:a8:bf:fa:b9:b2:6d:6f:ca:6d:e0:b9:2e:76:08:e6:32:
51:5a:b6:62:3b:c9:53:79:c8:74:5e:2d:ac:90:cd:7e:d3:5a:
66:0d:8a:2b:a2:fc:26:cc:74:35:8b:78:a4:77:42:6b:96:30:
a0:f0:81:83
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUcQpM+dS9k8uo8PZgsimsZm9bOuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yMzA2MjEwODA1NTNaFw0yNDA2MTkwODEwNTNaMDMxMTAvBgNV
BAMTKDM4QUY5MkVCQjM2Q0EyNTJBNzQ2MTdGNDFCQUE1MURCMzIyOTY3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZlMeBFuMk6dYbLzaSHbOC38L
InJaJY23JeI6TBkxm6bbgqAe3FavkFeivMmm75GLgP96NVz1lwjbX6TV8USp6Gzg
1gRuwfq73SZEcgKcex3GA/r7CXPk1updFF/I4i0sZ3efEschXGIwYJ+5/+LQuIZU
TWVZ/+n4O3rjsqar+LrT+T2QNzHDowIDnW1zHcoWWp1+LeFOR/bz3D4QROZGBBau
opJ5zfZUVvMEQyg8sZWMNdx1yqYfFTWyST6pkk31BpGmmthnHYtF1Mx149Uc3NmQ
y+xGElZJ2pbdJAV7AJfpiIkoeQRFVJ2UyJk1xsyz/lv3p5psbEOEuvrnKQdXAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUOK+S67NsolKnRhf0G6pR2zIpZ5AwHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQt
NDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3ODEzLzAvMzEzODM1MmUzMjJlMzEzNjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkC
ojANBgkqhkiG9w0BAQsFAAOCAQEALXg3WnoFHyd4ZslAoisAZI3Y6ul9HjUjVb32
gHRq6cXbkdS7N/+boIAmVrJyFft5u/1Gj0xTrAmxCdvRr77l7mStSVI2Bd/1BAYw
cD7g2jX3BnZVMhsXndC/P7Vg3RgKVZ24y8Cq0IjMnF6k8LsZ0CFegSCScaU5Lp1L
MucZ4czF5DGTT5Ih9tvT0T1SGjMTbt8ZVHwDnIT6xHuTuVhHLAkLktxCBBAfPWD2
+2d4yxgX0VE7MG/rmTbMSPs1C25285kLzZTwPNCov/q5sm1vym3guS52COYyUVq2
YjvJU3nIdF4trJDNftNaZg2KK6L8Jsx0NYt4pHdCa5YwoPCBgw==
-----END CERTIFICATE-----
Generated at Sun Jan 28 11:37:33 2024 by rpki-client on console-fra.rpki-client.org