Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230312e302f32342d3234203d3e2038373038.roa
File: 3138352e3232392e3230312e302f32342d3234203d3e2038373038.roa (raw, json)
Hash identifier: TZd7Q6ou9KeHSjn3p6Wf3vhzmSf0KoYnl4Eh1IIF+60=
Subject key identifier: FC:38:8B:49:DF:6B:00:C5:07:37:3F:3E:55:AD:82:BB:9F:22:A0:95
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 6745B15C025635330FD2369F86908E72C58BD2AE
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230312e302f32342d3234203d3e2038373038.roa
Signing time: Wed 26 Apr 2023 18:20:33 +0000
ROA not before: Wed 26 Apr 2023 18:15:33 +0000
ROA not after: Wed 24 Apr 2024 18:20:33 +0000
asID: 8708
IP address blocks: 185.229.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:45:b1:5c:02:56:35:33:0f:d2:36:9f:86:90:8e:72:c5:8b:d2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Apr 26 18:15:33 2023 GMT
Not After : Apr 24 18:20:33 2024 GMT
Subject: CN=FC388B49DF6B00C507373F3E55AD82BB9F22A095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:fa:83:14:fe:8d:cc:94:db:0e:5d:b5:de:
63:1e:69:9b:47:0d:e6:35:8a:7f:ed:ee:c6:7c:0f:
c8:5a:8c:9d:7b:13:2a:33:6d:51:64:42:fe:8d:d2:
d6:0f:7f:03:49:ca:b1:0b:19:75:01:79:fe:af:27:
3e:f4:33:91:a0:20:2a:a7:8f:8f:5d:b0:e6:43:3e:
2b:3e:2d:07:6c:70:42:87:b0:77:98:29:38:c2:9f:
ec:64:db:a0:98:45:cf:8c:9c:be:d3:75:f7:2e:ec:
f3:e2:9f:65:28:0c:fd:49:36:a4:d3:97:70:69:71:
1c:f4:7e:ec:e0:36:eb:29:9c:0f:7d:39:ea:eb:e1:
fc:0e:af:32:01:af:0c:fb:52:93:9f:22:73:1c:9c:
e6:b9:b0:04:47:12:8c:01:56:63:53:3d:8d:b6:e1:
84:1d:2a:bb:e7:a0:7d:f1:6d:0d:ed:6a:a7:1a:00:
d3:c4:bd:0e:a7:98:75:d3:7b:90:8e:6e:2b:77:c7:
81:a7:fc:4a:cb:2e:2c:6e:96:f8:ae:3e:1a:80:3e:
9e:7b:c4:8b:02:64:67:44:3d:c4:62:4b:60:67:04:
7b:3d:f0:4d:22:83:11:4e:3f:12:ca:41:fc:df:2d:
19:46:db:85:2d:0f:21:ca:db:94:51:27:7b:6e:58:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:38:8B:49:DF:6B:00:C5:07:37:3F:3E:55:AD:82:BB:9F:22:A0:95
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230312e302f32342d3234203d3e2038373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.201.0/24
Signature Algorithm: sha256WithRSAEncryption
15:96:a8:f1:b8:5d:67:c0:2b:d2:de:af:4d:2a:09:1d:72:cc:
f9:8f:46:82:af:f3:0d:4e:2e:16:e6:aa:31:5c:df:49:7c:3f:
8b:ed:bc:2e:31:b3:3d:76:55:94:6a:a4:a0:e2:7b:d2:68:42:
79:cf:83:c4:fe:bf:9a:1e:cb:22:e8:55:df:6d:d1:02:dd:69:
bb:4c:33:bf:4b:f5:57:2d:25:3d:fa:c0:31:b4:70:59:6c:ac:
fa:6f:d3:e8:7b:2e:13:3a:d0:58:c4:94:a7:1c:c6:d8:b2:33:
28:67:c2:f0:af:b8:46:e7:ee:59:a0:b8:39:0e:eb:34:b8:db:
82:b5:62:7e:2f:fc:1a:4c:cf:d0:60:2a:a5:24:5a:08:48:7f:
5a:a0:35:ca:11:f3:70:b4:48:99:20:51:2d:44:44:2b:1f:1d:
15:62:72:82:e2:1e:48:8c:33:80:ce:a9:37:1a:ad:a2:c8:cb:
32:f8:1f:c4:1f:c1:50:24:2f:3f:97:09:a4:81:45:6b:5e:5d:
e5:54:77:d3:5a:7c:40:2b:37:d2:78:ed:ea:21:08:15:d1:cd:
2d:9a:5b:a1:e8:e5:9d:51:d3:6a:6d:0d:a4:1a:44:f3:29:79:
2d:e6:15:f7:6a:84:2e:ab:ca:aa:ee:1e:2e:d6:78:6c:f4:82:
b1:49:fe:2c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZ0WxXAJWNTMP0jafhpCOcsWL0q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yMzA0MjYxODE1MzNaFw0yNDA0MjQxODIwMzNaMDMxMTAvBgNV
BAMTKEZDMzg4QjQ5REY2QjAwQzUwNzM3M0YzRTU1QUQ4MkJCOUYyMkEwOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQF/qDFP6NzJTbDl213mMeaZtH
DeY1in/t7sZ8D8hajJ17EyozbVFkQv6N0tYPfwNJyrELGXUBef6vJz70M5GgICqn
j49dsOZDPis+LQdscEKHsHeYKTjCn+xk26CYRc+MnL7Tdfcu7PPin2UoDP1JNqTT
l3BpcRz0fuzgNuspnA99Oerr4fwOrzIBrwz7UpOfInMcnOa5sARHEowBVmNTPY22
4YQdKrvnoH3xbQ3taqcaANPEvQ6nmHXTe5CObit3x4Gn/ErLLixulviuPhqAPp57
xIsCZGdEPcRiS2BnBHs98E0igxFOPxLKQfzfLRlG24UtDyHK25RRJ3tuWN+lAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU/DiLSd9rAMUHNz8+Va2Cu58ioJUwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjMyMzkyZTMy
MzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzczMDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ueXJMA0GCSqGSIb3DQEBCwUAA4IBAQAVlqjxuF1nwCvS3q9NKgkdcsz5j0aCr/MN
Ti4W5qoxXN9JfD+L7bwuMbM9dlWUaqSg4nvSaEJ5z4PE/r+aHssi6FXfbdEC3Wm7
TDO/S/VXLSU9+sAxtHBZbKz6b9Poey4TOtBYxJSnHMbYsjMoZ8Lwr7hG5+5ZoLg5
Dus0uNuCtWJ+L/waTM/QYCqlJFoISH9aoDXKEfNwtEiZIFEtREQrHx0VYnKC4h5I
jDOAzqk3Gq2iyMsy+B/EH8FQJC8/lwmkgUVrXl3lVHfTWnxAKzfSeO3qIQgV0c0t
mluh6OWdUdNqbQ2kGkTzKXkt5hX3aoQuq8qq7h4u1nhs9IKxSf4s
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:00 2023 by rpki-client on console-fra.rpki-client.org