Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20383334.roa
File: 352e3138312e3137382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: tgLnY/Ftb6noMqb2SWPuwSSrAWq5Wohd9H8vd8pFCPk=
Subject key identifier: 2F:D7:A8:16:8F:D4:FF:6E:8F:27:10:C5:28:DD:30:54:8A:EF:1B:04
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6ECF31AFDEC96D44146157F07EFB88068F8BDE7C
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20383334.roa
Signing time: Fri 11 Oct 2024 00:02:26 +0000
ROA not before: Thu 10 Oct 2024 23:57:26 +0000
ROA not after: Fri 10 Oct 2025 00:02:26 +0000
asID: 834
IP address blocks: 5.181.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 13:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:cf:31:af:de:c9:6d:44:14:61:57:f0:7e:fb:88:06:8f:8b:de:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 10 23:57:26 2024 GMT
Not After : Oct 10 00:02:26 2025 GMT
Subject: CN=2FD7A8168FD4FF6E8F2710C528DD30548AEF1B04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:29:7a:39:b7:b0:08:66:88:82:ea:86:6f:
c0:5a:e9:04:ab:ad:b3:7f:99:fa:e0:cc:2c:23:94:
e9:52:79:b9:97:23:1c:a1:2b:60:43:95:f6:bf:37:
b5:83:13:69:10:8f:00:75:bf:1a:2d:0c:0a:ba:64:
5f:0c:0d:9e:cc:f5:e4:76:ef:72:0a:40:b1:76:2e:
97:78:92:3b:3e:98:d4:e3:57:7f:3d:c8:d3:dc:e9:
5f:23:29:ff:03:10:4d:ac:41:4b:b1:91:e1:09:33:
2a:8b:6b:f4:b3:04:cb:d4:9d:4c:db:1e:f1:d7:9c:
bc:e8:c5:e4:cf:ec:ce:be:77:5b:3f:1f:30:9a:c3:
09:46:08:98:11:59:8f:52:8d:e5:2d:1c:c2:ad:c5:
5f:b8:26:5d:35:62:41:d6:a1:62:97:c1:b7:0d:8e:
b5:76:ec:c3:c3:2c:3a:a9:7c:cc:80:53:fd:57:6c:
c1:97:5b:3f:c0:66:17:e3:2a:8c:64:ca:88:d0:41:
7b:1a:cd:8a:83:46:3f:d2:84:3f:e4:56:0d:00:8a:
12:6e:6e:00:92:2e:6a:07:aa:7a:e3:e1:c2:77:6c:
1f:2e:57:cf:16:e4:99:46:7c:13:78:08:97:19:3d:
cc:49:ae:c5:36:29:a2:b3:91:4b:55:0a:0a:98:51:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D7:A8:16:8F:D4:FF:6E:8F:27:10:C5:28:DD:30:54:8A:EF:1B:04
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0c:87:65:68:98:b4:df:01:f5:1b:37:59:59:87:a5:a0:ec:
1a:fd:84:84:d3:50:c9:47:7c:3e:ed:e2:cb:b2:19:7b:50:81:
0a:46:37:ae:58:b0:53:ea:87:72:bd:ee:66:65:10:c5:4a:36:
35:25:62:49:94:19:f9:5c:62:89:6c:5f:36:a7:10:ef:bc:2d:
34:ba:56:a4:66:14:b7:11:ac:0f:f4:a8:ea:b6:89:2b:54:66:
31:7f:9b:1e:70:01:30:bf:db:08:71:ee:47:02:a6:07:63:1c:
fa:9f:4a:61:b8:fb:02:29:26:f2:8e:f3:84:42:e4:4a:fa:59:
70:c7:84:d0:8d:57:3f:65:9c:fe:67:96:2d:f1:ad:e4:34:45:
36:c2:fb:86:90:5c:9a:4d:ba:d6:34:ae:8a:b2:dd:1f:b7:d0:
1a:dd:a6:1a:0e:71:f0:3e:6b:64:48:c0:e0:33:38:07:22:cd:
24:5e:51:43:d0:4d:92:e9:79:53:20:80:22:76:3f:7d:d2:74:
a9:1d:86:d3:10:75:c2:f8:0a:ae:fc:03:10:2f:94:cd:19:b8:
1d:3a:c2:2d:10:35:bf:0f:e4:66:0c:3a:ad:e9:e2:8e:67:00:
ec:f6:d2:b1:3a:bf:9b:ca:ed:bc:bc:8f:95:d7:8e:18:1e:1d:
27:b8:4e:bc
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUbs8xr97JbUQUYVfwfvuIBo+L3nwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNDEwMTAyMzU3MjZaFw0yNTEwMTAwMDAyMjZaMDMxMTAvBgNV
BAMTKDJGRDdBODE2OEZENEZGNkU4RjI3MTBDNTI4REQzMDU0OEFFRjFCMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOJyl6ObewCGaIguqGb8Ba6QSr
rbN/mfrgzCwjlOlSebmXIxyhK2BDlfa/N7WDE2kQjwB1vxotDAq6ZF8MDZ7M9eR2
73IKQLF2Lpd4kjs+mNTjV389yNPc6V8jKf8DEE2sQUuxkeEJMyqLa/SzBMvUnUzb
HvHXnLzoxeTP7M6+d1s/HzCawwlGCJgRWY9SjeUtHMKtxV+4Jl01YkHWoWKXwbcN
jrV27MPDLDqpfMyAU/1XbMGXWz/AZhfjKoxkyojQQXsazYqDRj/ShD/kVg0AihJu
bgCSLmoHqnrj4cJ3bB8uV88W5JlGfBN4CJcZPcxJrsU2KaKzkUtVCgqYUXjlAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUL9eoFo/U/26PJxDFKN0wVIrvGwQwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzUyZTMxMzgzMTJlMzEzNzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbWyMA0G
CSqGSIb3DQEBCwUAA4IBAQAYDIdlaJi03wH1GzdZWYeloOwa/YSE01DJR3w+7eLL
shl7UIEKRjeuWLBT6odyve5mZRDFSjY1JWJJlBn5XGKJbF82pxDvvC00ulakZhS3
EawP9KjqtokrVGYxf5secAEwv9sIce5HAqYHYxz6n0phuPsCKSbyjvOEQuRK+llw
x4TQjVc/ZZz+Z5Yt8a3kNEU2wvuGkFyaTbrWNK6Kst0ft9Aa3aYaDnHwPmtkSMDg
MzgHIs0kXlFD0E2S6XlTIIAidj990nSpHYbTEHXC+Aqu/AMQL5TNGbgdOsItEDW/
D+RmDDqt6eKOZwDs9tKxOr+byu28vI+V144YHh0nuE68
Generated at Fri Oct 18 16:04:35 2024 by rpki-client on console-fra.rpki-client.org