Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130342e302f32342d3234203d3e20383334.roa
File: 3138352e3231362e3130342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hZs/RvCtC43txJsmbreOg7quWA5dI6I79NEt29jvv6s=
Subject key identifier: B8:E7:F4:6D:6C:05:97:BF:CC:D0:18:F5:06:1B:6C:32:9E:E1:5F:7D
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 50060C03ED3EDEBB34F1660C83749BF2291FFEA4
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130342e302f32342d3234203d3e20383334.roa
Signing time: Wed 07 Jun 2023 06:45:36 +0000
ROA not before: Wed 07 Jun 2023 06:40:36 +0000
ROA not after: Wed 05 Jun 2024 06:45:36 +0000
asID: 834
IP address blocks: 185.216.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:06:0c:03:ed:3e:de:bb:34:f1:66:0c:83:74:9b:f2:29:1f:fe:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:36 2023 GMT
Not After : Jun 5 06:45:36 2024 GMT
Subject: CN=B8E7F46D6C0597BFCCD018F5061B6C329EE15F7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:40:41:6a:1d:1c:58:1c:f1:4d:4b:e1:c2:
62:09:09:1d:a7:b5:a7:ae:e9:44:44:1c:5b:a3:9a:
04:83:bf:4f:43:7a:54:39:96:e9:8e:4d:44:1f:48:
4c:61:35:03:61:cc:ab:46:35:39:d1:e1:6c:0a:e7:
24:c5:c3:19:f5:62:98:a1:17:87:19:df:2e:20:e1:
40:5e:a9:65:60:64:46:ad:8f:9b:45:27:76:29:ac:
fa:90:f8:f6:9c:04:36:30:03:3a:b4:13:96:68:34:
60:a4:e5:a8:9e:db:c4:f8:94:ca:1a:2c:6d:86:16:
12:7d:c8:08:41:cf:38:e8:5b:73:84:d6:1c:54:c2:
43:07:c7:e9:08:f1:97:29:8d:c8:9b:4b:5a:c1:c9:
59:47:38:02:14:62:88:8f:57:3a:e6:5b:43:6b:8b:
6a:68:96:93:09:c8:67:c7:bb:e3:09:48:19:10:43:
a3:e3:11:46:4c:b6:4b:be:5b:42:81:5b:2b:70:92:
c1:16:b3:75:c3:7d:b0:81:fd:c4:d8:de:6d:4e:ec:
30:97:41:65:17:a0:0f:1e:9c:c5:b9:45:03:3a:6a:
2c:ba:d1:48:50:b5:c4:30:ab:94:1b:20:e9:ca:f7:
e7:d9:b3:7a:b7:55:02:78:c5:68:65:e6:32:77:e0:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:F4:6D:6C:05:97:BF:CC:D0:18:F5:06:1B:6C:32:9E:E1:5F:7D
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c3:8a:24:4b:ef:1e:bd:73:87:db:a3:08:bd:b1:5d:3f:24:
95:af:04:30:ce:33:de:e1:3e:5b:89:f9:d6:7e:45:81:9b:35:
08:9a:c7:00:20:a7:ec:aa:26:ca:3f:ac:5f:dc:13:a0:e4:81:
72:7a:54:e3:4f:03:68:17:e4:2d:7f:45:f9:1f:45:86:14:d6:
23:f9:16:d9:c1:fe:e2:9a:36:ee:3b:f2:8d:08:82:b7:30:84:
a9:c9:5a:ae:e9:96:28:0c:1d:49:7b:7f:14:f0:30:4e:12:fe:
65:0c:cf:f7:51:e0:e0:ac:ef:24:2a:94:3a:68:8e:ed:bb:a9:
24:bd:1f:c0:77:dd:0f:93:ec:50:1e:43:f2:17:23:21:fa:b1:
b9:84:62:f5:d9:54:af:64:78:78:44:88:54:6a:b5:35:c6:b7:
be:ae:87:f6:28:5f:b8:ea:e4:ca:7f:48:4f:6a:6f:6a:c8:db:
19:15:23:be:ce:a8:07:96:18:c4:21:27:51:74:70:19:27:3b:
ca:36:58:6c:21:3c:dd:ca:b1:36:c6:e9:2c:ee:83:f5:b0:98:
7c:cc:0a:05:a5:40:11:fc:4f:09:0d:1f:59:5f:f8:39:9a:94:
db:b9:a3:5c:4f:f3:f9:35:4e:a3:49:aa:80:31:1c:1b:04:e6:
18:cc:f2:a1
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUAYMA+0+3rs08WYMg3Sb8ikf/qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmFkMzZjZGFmNDM0OThhNjY4YjU1M2Y1ODFjY2QyODFh
YzFhOGNkNzAeFw0yMzA2MDcwNjQwMzZaFw0yNDA2MDUwNjQ1MzZaMDMxMTAvBgNV
BAMTKEI4RTdGNDZENkMwNTk3QkZDQ0QwMThGNTA2MUI2QzMyOUVFMTVGN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ/EBBah0cWBzxTUvhwmIJCR2n
taeu6UREHFujmgSDv09DelQ5lumOTUQfSExhNQNhzKtGNTnR4WwK5yTFwxn1Ypih
F4cZ3y4g4UBeqWVgZEatj5tFJ3YprPqQ+PacBDYwAzq0E5ZoNGCk5aie28T4lMoa
LG2GFhJ9yAhBzzjoW3OE1hxUwkMHx+kI8ZcpjcibS1rByVlHOAIUYoiPVzrmW0Nr
i2polpMJyGfHu+MJSBkQQ6PjEUZMtku+W0KBWytwksEWs3XDfbCB/cTY3m1O7DCX
QWUXoA8enMW5RQM6aiy60UhQtcQwq5QbIOnK9+fZs3q3VQJ4xWhl5jJ34JIlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUuOf0bWwFl7/M0Bj1BhtsMp7hX30wHwYDVR0j
BBgwFoAUutNs2vQ0mKZotVP1gczSgawajNcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjE3NDc5ZDEtOTVkOC00YTE0LThlZTItZGUxMDBjNjY3
NzRjLzAvQkFEMzZDREFGNDM0OThBNjY4QjU1M0Y1ODFDQ0QyODFBQzFBOENENy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3V0TnMydlEwbUtab3RWUDFnY3pTZ2F3
YWpOYy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjE3NDc5ZDEt
OTVkOC00YTE0LThlZTItZGUxMDBjNjY3NzRjLzAvMzEzODM1MmUzMjMxMzYyZTMx
MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnY
aDANBgkqhkiG9w0BAQsFAAOCAQEAPcOKJEvvHr1zh9ujCL2xXT8kla8EMM4z3uE+
W4n51n5FgZs1CJrHACCn7Komyj+sX9wToOSBcnpU408DaBfkLX9F+R9FhhTWI/kW
2cH+4po27jvyjQiCtzCEqclarumWKAwdSXt/FPAwThL+ZQzP91Hg4KzvJCqUOmiO
7bupJL0fwHfdD5PsUB5D8hcjIfqxuYRi9dlUr2R4eESIVGq1Nca3vq6H9ihfuOrk
yn9IT2pvasjbGRUjvs6oB5YYxCEnUXRwGSc7yjZYbCE83cqxNsbpLO6D9bCYfMwK
BaVAEfxPCQ0fWV/4OZqU27mjXE/z+TVOo0mqgDEcGwTmGMzyoQ==
-----END CERTIFICATE-----
Generated at Thu Nov 16 00:42:21 2023 by rpki-client on console-ams.rpki-client.org