Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36312e302f32342d3234203d3e20323131393735.roa
File: 3138352e3133302e36312e302f32342d3234203d3e20323131393735.roa (raw, json)
Hash identifier: I8mEyBrj9U3AStMc6LjO8Z1GoNgQO5dWKS2kpBnKGOE=
Subject key identifier: BE:BB:47:46:92:56:B9:B7:E2:AF:EF:FE:1D:28:25:78:3A:26:B9:49
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 7EC45E79509ECE3AFFC49A12BD158F407BF2D898
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36312e302f32342d3234203d3e20323131393735.roa
Signing time: Wed 01 Feb 2023 22:08:27 +0000
ROA not before: Wed 01 Feb 2023 22:03:27 +0000
ROA not after: Wed 31 Jan 2024 22:08:27 +0000
asID: 211975
IP address blocks: 185.130.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c4:5e:79:50:9e:ce:3a:ff:c4:9a:12:bd:15:8f:40:7b:f2:d8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Feb 1 22:03:27 2023 GMT
Not After : Jan 31 22:08:27 2024 GMT
Subject: CN=BEBB47469256B9B7E2AFEFFE1D2825783A26B949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:d1:4e:24:30:41:3e:b5:f0:d2:d7:46:48:
9f:d6:27:6a:ce:a9:3b:bb:6a:8b:48:bf:25:4b:ad:
81:1a:21:47:ae:95:e9:82:61:30:34:c8:f8:a9:7a:
f1:6c:04:53:1d:d1:0f:de:94:9a:a8:0f:04:26:8c:
bd:be:eb:52:9f:4a:49:03:1d:fc:68:ff:17:f6:5d:
11:4d:e0:d2:5d:58:c9:33:57:7b:53:28:dd:48:b5:
fd:d9:74:d0:72:d4:a7:98:b5:75:6e:ec:8d:31:9f:
25:05:0e:10:da:d2:93:c7:14:18:55:64:c2:8a:02:
85:ff:01:e9:d3:65:b3:ab:1c:a6:b2:fc:8a:30:d2:
36:42:8a:d6:dd:7a:73:25:65:12:f8:de:d5:65:89:
32:2d:5f:63:40:1c:e4:b9:84:eb:30:00:08:29:b7:
7d:39:33:af:a6:8c:42:a9:bc:6e:4a:d6:ff:7b:7d:
88:1b:8c:30:a6:cf:a5:b3:d3:6e:5c:f0:f4:30:77:
d7:07:ed:bb:03:d8:d2:37:82:87:59:d4:a8:39:bd:
9b:c7:63:9a:80:6f:04:d6:c1:60:d5:c1:07:f1:0a:
c8:20:40:dd:16:32:00:46:1d:99:6f:36:3e:30:df:
64:34:d6:4c:d5:34:c9:e6:f2:e4:3a:0d:f3:76:46:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:47:46:92:56:B9:B7:E2:AF:EF:FE:1D:28:25:78:3A:26:B9:49
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36312e302f32342d3234203d3e20323131393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.61.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7a:88:c3:d3:c7:ab:18:76:8b:cc:b3:7a:d8:75:da:c7:76:
12:15:4d:22:a1:e5:10:c3:95:ac:89:f4:bf:a6:bd:3d:c2:bc:
fe:8e:5b:fd:9b:65:c4:30:ce:d6:5c:31:8b:54:42:8e:45:eb:
cb:48:65:d1:ab:de:44:4b:44:0d:9a:93:55:43:33:25:d1:4b:
dc:ff:73:e4:cd:59:93:af:a2:d9:6a:5c:3b:60:bf:c5:59:a8:
82:fd:b4:a6:fc:6a:6b:8a:b1:db:17:1a:09:f6:5c:55:82:77:
2c:b4:fb:b6:95:71:6f:aa:38:6d:5c:ca:57:67:55:d1:2f:df:
4d:7a:38:a0:b6:b3:3d:a0:cb:a7:bd:5d:4d:f5:09:b8:22:e9:
dd:4e:20:c7:a2:bf:a3:0c:b2:95:41:97:3c:8f:3b:12:79:46:
91:c6:b4:3c:3d:c9:d0:4e:5e:2a:48:a9:0f:3c:ed:05:13:f8:
63:f1:51:de:75:f4:c0:08:f1:e5:a4:25:79:a6:94:00:e2:f7:
0b:2e:3c:5b:a0:e3:44:af:7f:91:6a:3a:86:9f:f0:48:88:e6:
cb:e8:d6:f7:d0:ea:77:76:9d:34:97:e8:db:7b:56:f1:01:03:
98:05:c3:b2:e5:c8:ea:b1:e8:f5:ed:6a:bf:f4:34:81:a6:f4:
01:c5:20:df
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfsReeVCezjr/xJoSvRWPQHvy2JgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yMzAyMDEyMjAzMjdaFw0yNDAxMzEyMjA4MjdaMDMxMTAvBgNV
BAMTKEJFQkI0NzQ2OTI1NkI5QjdFMkFGRUZGRTFEMjgyNTc4M0EyNkI5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARtFOJDBBPrXw0tdGSJ/WJ2rO
qTu7aotIvyVLrYEaIUeulemCYTA0yPipevFsBFMd0Q/elJqoDwQmjL2+61KfSkkD
Hfxo/xf2XRFN4NJdWMkzV3tTKN1Itf3ZdNBy1KeYtXVu7I0xnyUFDhDa0pPHFBhV
ZMKKAoX/AenTZbOrHKay/Iow0jZCitbdenMlZRL43tVliTItX2NAHOS5hOswAAgp
t305M6+mjEKpvG5K1v97fYgbjDCmz6Wz025c8PQwd9cH7bsD2NI3godZ1Kg5vZvH
Y5qAbwTWwWDVwQfxCsggQN0WMgBGHZlvNj4w32Q01kzVNMnm8uQ6DfN2RqonAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUvrtHRpJWubfir+/+HSgleDomuUkwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMTMzMzAyZTM2
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzEzOTM3MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5gj0wDQYJKoZIhvcNAQELBQADggEBAFR6iMPTx6sYdovMs3rYddrHdhIVTSKh
5RDDlayJ9L+mvT3CvP6OW/2bZcQwztZcMYtUQo5F68tIZdGr3kRLRA2ak1VDMyXR
S9z/c+TNWZOvotlqXDtgv8VZqIL9tKb8amuKsdsXGgn2XFWCdyy0+7aVcW+qOG1c
yldnVdEv3016OKC2sz2gy6e9XU31Cbgi6d1OIMeiv6MMspVBlzyPOxJ5RpHGtDw9
ydBOXipIqQ887QUT+GPxUd519MAI8eWkJXmmlADi9wsuPFug40Svf5FqOoaf8EiI
5svo1vfQ6nd2nTSX6Nt7VvEBA5gFw7LlyOqx6PXtar/0NIGm9AHFIN8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org