Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232322e302f32342d3234203d3e20313432313131.roa
File: 3138352e3232392e3232322e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier: Ae2qbDltPj2ehz4yvoZbfSPOwgPn3LqhAFO8D7sQWo0=
Subject key identifier: E3:B1:5B:15:73:BE:A2:6B:EF:2E:56:BC:78:7C:F3:57:7B:8F:FB:77
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 5EDEC32D6B8357786156A28692CC9790CF0C79AB
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232322e302f32342d3234203d3e20313432313131.roa
Signing time: Wed 07 Jun 2023 06:45:37 +0000
ROA not before: Wed 07 Jun 2023 06:40:37 +0000
ROA not after: Wed 05 Jun 2024 06:45:37 +0000
asID: 142111
IP address blocks: 185.229.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:de:c3:2d:6b:83:57:78:61:56:a2:86:92:cc:97:90:cf:0c:79:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:37 2023 GMT
Not After : Jun 5 06:45:37 2024 GMT
Subject: CN=E3B15B1573BEA26BEF2E56BC787CF3577B8FFB77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:42:81:b2:32:18:c2:66:b5:7b:00:f7:f1:
3a:3a:33:41:c9:a7:11:11:30:d7:aa:b2:93:24:ff:
9c:3c:74:06:25:ca:d0:5f:ec:c9:af:b0:cb:d1:eb:
86:73:dd:1b:31:ea:8c:35:d4:f2:b9:18:c2:15:35:
38:bd:e9:9b:86:e7:83:39:7f:72:0d:0b:11:d1:3a:
fc:3d:b8:76:ea:82:97:dd:41:21:8d:28:00:08:02:
1c:de:bb:77:c0:94:07:19:a4:a1:5d:19:4f:1a:38:
38:fb:d3:ec:e4:84:19:71:68:f3:cc:23:37:15:af:
70:62:35:ce:15:0a:01:22:88:3a:99:8b:de:39:b0:
02:09:85:64:85:fc:d7:ab:4c:a3:80:31:08:2e:2d:
0a:b9:77:db:3c:8e:48:e4:9b:9b:6b:58:55:45:90:
c6:2c:a1:9d:fc:a0:2f:54:52:98:f1:fd:e4:e9:df:
40:53:1a:3a:6d:44:c4:06:1c:40:c9:d6:b5:6e:ce:
81:fa:85:75:ac:a6:dc:95:67:f6:2b:0e:d2:d4:37:
66:f8:ec:7f:84:64:5c:4f:93:73:95:fb:93:2d:97:
71:50:48:0c:6d:6a:ac:6f:20:7e:df:09:92:bc:4d:
b0:fc:4c:61:a9:6d:d6:62:79:f1:ae:42:62:6f:5d:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:5B:15:73:BE:A2:6B:EF:2E:56:BC:78:7C:F3:57:7B:8F:FB:77
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232322e302f32342d3234203d3e20313432313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:14:34:29:15:67:a9:48:2e:30:2c:52:1e:3c:db:07:a3:22:
ef:ae:5c:6d:3e:a0:f6:1e:25:a5:38:a9:38:58:71:ad:65:2f:
85:98:f5:da:c5:f4:83:61:ed:67:93:b3:4a:7c:94:2a:b7:1a:
be:2e:ca:e3:63:b0:0d:30:4a:5a:47:d8:6f:b0:d8:62:d1:54:
80:b0:82:81:db:54:ec:53:cd:d1:14:11:d6:83:e3:a4:1d:3c:
54:c9:ac:02:9e:12:11:85:b6:94:5b:1e:48:1a:e5:6c:10:91:
07:38:8e:cf:a6:8a:33:be:89:1a:e7:6b:67:fc:70:73:6f:1b:
42:b1:3e:e9:ad:51:c6:ca:b2:1f:b7:57:08:82:5a:06:d1:cd:
e6:5c:18:16:03:d3:9f:ff:34:b4:12:60:7e:12:11:78:a8:49:
ff:98:36:9a:db:55:23:b2:4d:cf:29:63:fa:59:fc:70:9c:80:
ba:49:ab:1c:9f:6f:a7:76:79:48:21:95:8f:3b:f2:02:1f:4b:
dc:86:f5:8b:94:c5:7c:f9:3e:f3:a6:27:03:f9:f3:91:3e:55:
85:0d:f0:06:f4:93:0a:35:aa:9f:7a:67:a7:3c:b0:9b:92:59:
f1:a5:76:25:53:86:ee:30:6c:04:07:1f:d2:f2:4e:4f:57:65:
a3:d7:10:cb
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUXt7DLWuDV3hhVqKGksyXkM8MeaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmFkMzZjZGFmNDM0OThhNjY4YjU1M2Y1ODFjY2QyODFh
YzFhOGNkNzAeFw0yMzA2MDcwNjQwMzdaFw0yNDA2MDUwNjQ1MzdaMDMxMTAvBgNV
BAMTKEUzQjE1QjE1NzNCRUEyNkJFRjJFNTZCQzc4N0NGMzU3N0I4RkZCNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYW0KBsjIYwma1ewD38To6M0HJ
pxERMNeqspMk/5w8dAYlytBf7MmvsMvR64Zz3Rsx6ow11PK5GMIVNTi96ZuG54M5
f3INCxHROvw9uHbqgpfdQSGNKAAIAhzeu3fAlAcZpKFdGU8aODj70+zkhBlxaPPM
IzcVr3BiNc4VCgEiiDqZi945sAIJhWSF/NerTKOAMQguLQq5d9s8jkjkm5trWFVF
kMYsoZ38oC9UUpjx/eTp30BTGjptRMQGHEDJ1rVuzoH6hXWsptyVZ/YrDtLUN2b4
7H+EZFxPk3OV+5Mtl3FQSAxtaqxvIH7fCZK8TbD8TGGpbdZiefGuQmJvXZY5AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU47FbFXO+omvvLla8eHzzV3uP+3cwHwYDVR0j
BBgwFoAUutNs2vQ0mKZotVP1gczSgawajNcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjE3NDc5ZDEtOTVkOC00YTE0LThlZTItZGUxMDBjNjY3
NzRjLzAvQkFEMzZDREFGNDM0OThBNjY4QjU1M0Y1ODFDQ0QyODFBQzFBOENENy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3V0TnMydlEwbUtab3RWUDFnY3pTZ2F3
YWpOYy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjE3NDc5ZDEt
OTVkOC00YTE0LThlZTItZGUxMDBjNjY3NzRjLzAvMzEzODM1MmUzMjMyMzkyZTMy
MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMjMxMzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnl3jANBgkqhkiG9w0BAQsFAAOCAQEAShQ0KRVnqUguMCxSHjzbB6Mi765c
bT6g9h4lpTipOFhxrWUvhZj12sX0g2HtZ5OzSnyUKrcavi7K42OwDTBKWkfYb7DY
YtFUgLCCgdtU7FPN0RQR1oPjpB08VMmsAp4SEYW2lFseSBrlbBCRBziOz6aKM76J
GudrZ/xwc28bQrE+6a1RxsqyH7dXCIJaBtHN5lwYFgPTn/80tBJgfhIReKhJ/5g2
mttVI7JNzylj+ln8cJyAukmrHJ9vp3Z5SCGVjzvyAh9L3Ib1i5TFfPk+86YnA/nz
kT5VhQ3wBvSTCjWqn3pnpzywm5JZ8aV2JVOG7jBsBAcf0vJOT1dlo9cQyw==
-----END CERTIFICATE-----
Generated at Tue Oct 31 00:39:03 2023 by rpki-client on console-fra.rpki-client.org