Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130342e302f32342d3234203d3e2031323339.roa
File: 3138352e3231362e3130342e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: ttd7O9XeT/VcU4+JhM5YcbYwhjo1tXoRllyXPmHmxCE=
Subject key identifier: 9E:47:FB:21:49:41:3F:0F:B1:3B:CD:D1:FE:F5:38:75:62:C9:98:0A
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 7F4E8F63CCB880363133181A8F0F9BD73DB0B08D
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130342e302f32342d3234203d3e2031323339.roa
Signing time: Wed 07 Jun 2023 06:45:39 +0000
ROA not before: Wed 07 Jun 2023 06:40:39 +0000
ROA not after: Wed 05 Jun 2024 06:45:39 +0000
asID: 1239
IP address blocks: 185.216.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4e:8f:63:cc:b8:80:36:31:33:18:1a:8f:0f:9b:d7:3d:b0:b0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:39 2023 GMT
Not After : Jun 5 06:45:39 2024 GMT
Subject: CN=9E47FB2149413F0FB13BCDD1FEF5387562C9980A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:30:ea:b6:ad:62:68:23:f9:4c:62:e5:5d:
b0:9e:15:35:95:bb:2c:ba:9b:e6:3a:51:e4:f3:a6:
23:e6:6e:4b:97:9e:47:72:4a:fc:2c:c0:f1:a7:7e:
32:61:23:58:cf:96:ed:15:b4:15:15:54:77:84:fb:
8a:c9:f6:70:fb:a9:5d:9c:75:b0:16:40:5b:8b:ca:
08:74:23:e7:57:33:90:56:13:e9:04:ef:7c:82:91:
b8:f1:71:c4:f8:08:19:87:98:13:73:6e:7a:25:7a:
18:cd:27:ed:73:c9:f0:fd:ce:2b:cf:1a:87:72:b0:
0e:30:96:9d:68:99:47:a6:d6:7a:65:1d:46:ef:c6:
e1:25:4f:8a:14:08:0a:1e:72:46:76:f9:0a:22:ed:
f4:f8:d9:1e:54:f7:b1:32:d6:d6:81:b7:f4:45:cb:
77:87:36:8c:23:46:6d:f4:f4:78:d3:53:aa:b9:b4:
64:8c:fe:b4:fa:1f:77:af:a8:bc:5d:f7:34:2c:be:
0d:2b:c5:98:87:8b:3e:33:f8:c2:bf:b8:87:03:35:
3d:1b:46:e0:ae:99:57:07:42:11:65:0c:59:d5:01:
ef:49:f8:e8:96:90:3f:d9:23:23:84:3a:a8:39:6d:
11:f8:99:56:dc:de:17:c6:6d:3d:62:60:95:68:42:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:FB:21:49:41:3F:0F:B1:3B:CD:D1:FE:F5:38:75:62:C9:98:0A
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130342e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.104.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:5f:b5:37:50:e2:77:86:97:b7:1b:42:50:2d:b0:d8:b6:bb:
ff:ae:38:86:62:d0:db:8b:83:83:4b:41:63:56:2d:3c:78:c7:
6e:cb:e1:09:a3:b6:88:8f:33:fb:bd:61:bc:51:2e:b4:f7:67:
de:68:3e:ea:21:70:a1:02:54:37:41:e8:cd:3d:51:91:35:94:
6a:ef:b1:95:fc:7b:58:44:8f:9c:a2:bd:ff:ae:37:fe:40:35:
c3:d1:26:6d:a8:dc:64:e8:fa:91:22:62:0b:2a:05:0a:68:d0:
df:e8:7d:30:77:50:af:d5:5c:8f:cb:88:1e:97:0f:d1:3c:d0:
45:62:aa:1d:a6:70:f3:98:25:97:10:ed:f7:db:4f:7a:2f:44:
5b:04:60:c7:6d:f6:49:5f:a2:d7:2c:33:38:d3:a1:b5:66:08:
7e:ff:46:fb:92:e0:57:fb:94:0e:1d:b5:0f:e4:a2:6d:69:ee:
73:82:d7:c1:a9:ac:6b:b2:33:34:3b:a8:53:03:60:c6:0d:a9:
1d:54:bb:06:2c:e9:93:b8:66:f8:87:79:47:62:76:8f:e4:aa:
40:3a:4e:19:d9:bc:45:36:ab:55:30:21:96:45:82:c6:93:89:
88:af:88:11:02:52:9e:92:9f:83:99:bc:52:da:71:16:da:6d:
cf:c0:fd:3d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUf06PY8y4gDYxMxgajw+b1z2wsI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmFkMzZjZGFmNDM0OThhNjY4YjU1M2Y1ODFjY2QyODFh
YzFhOGNkNzAeFw0yMzA2MDcwNjQwMzlaFw0yNDA2MDUwNjQ1MzlaMDMxMTAvBgNV
BAMTKDlFNDdGQjIxNDk0MTNGMEZCMTNCQ0REMUZFRjUzODc1NjJDOTk4MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumTDqtq1iaCP5TGLlXbCeFTWV
uyy6m+Y6UeTzpiPmbkuXnkdySvwswPGnfjJhI1jPlu0VtBUVVHeE+4rJ9nD7qV2c
dbAWQFuLygh0I+dXM5BWE+kE73yCkbjxccT4CBmHmBNzbnolehjNJ+1zyfD9zivP
GodysA4wlp1omUem1nplHUbvxuElT4oUCAoeckZ2+Qoi7fT42R5U97Ey1taBt/RF
y3eHNowjRm309HjTU6q5tGSM/rT6H3evqLxd9zQsvg0rxZiHiz4z+MK/uIcDNT0b
RuCumVcHQhFlDFnVAe9J+OiWkD/ZIyOEOqg5bRH4mVbc3hfGbT1iYJVoQpEDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUnkf7IUlBPw+xO83R/vU4dWLJmAowHwYDVR0j
BBgwFoAUutNs2vQ0mKZotVP1gczSgawajNcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjE3NDc5ZDEtOTVkOC00YTE0LThlZTItZGUxMDBjNjY3
NzRjLzAvQkFEMzZDREFGNDM0OThBNjY4QjU1M0Y1ODFDQ0QyODFBQzFBOENENy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3V0TnMydlEwbUtab3RWUDFnY3pTZ2F3
YWpOYy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjE3NDc5ZDEt
OTVkOC00YTE0LThlZTItZGUxMDBjNjY3NzRjLzAvMzEzODM1MmUzMjMxMzYyZTMx
MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzIzMzM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
udhoMA0GCSqGSIb3DQEBCwUAA4IBAQCqX7U3UOJ3hpe3G0JQLbDYtrv/rjiGYtDb
i4ODS0FjVi08eMduy+EJo7aIjzP7vWG8US6092feaD7qIXChAlQ3QejNPVGRNZRq
77GV/HtYRI+cor3/rjf+QDXD0SZtqNxk6PqRImILKgUKaNDf6H0wd1Cv1VyPy4ge
lw/RPNBFYqodpnDzmCWXEO332096L0RbBGDHbfZJX6LXLDM406G1Zgh+/0b7kuBX
+5QOHbUP5KJtae5zgtfBqaxrsjM0O6hTA2DGDakdVLsGLOmTuGb4h3lHYnaP5KpA
Ok4Z2bxFNqtVMCGWRYLGk4mIr4gRAlKekp+DmbxS2nEW2m3PwP09
-----END CERTIFICATE-----
Generated at Thu Nov 16 00:28:59 2023 by rpki-client on console-fra.rpki-client.org