Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232342e302f32342d3234203d3e203632303638.roa
File: 3138352e31332e3232342e302f32342d3234203d3e203632303638.roa (raw, json)
Hash identifier: NZPmFqYSJUp/hM0N3ny79OYjjw7aEORHhJ9DwnhBLkQ=
Subject key identifier: 44:42:AB:4C:D7:63:FD:51:16:44:95:95:EA:0B:49:43:25:DF:52:F2
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 6A259400FD6B6EFB3FFA355D2585802A5BD08BE1
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232342e302f32342d3234203d3e203632303638.roa
Signing time: Tue 23 Jan 2024 06:20:28 +0000
ROA not before: Tue 23 Jan 2024 06:15:28 +0000
ROA not after: Tue 21 Jan 2025 06:20:28 +0000
asID: 62068
IP address blocks: 185.13.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 10:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:25:94:00:fd:6b:6e:fb:3f:fa:35:5d:25:85:80:2a:5b:d0:8b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Jan 23 06:15:28 2024 GMT
Not After : Jan 21 06:20:28 2025 GMT
Subject: CN=4442AB4CD763FD5116449595EA0B494325DF52F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:6c:eb:6d:f0:5d:07:6c:f7:f7:a8:a2:a4:
8d:34:e9:e4:2d:b0:b8:6a:af:6f:24:e5:12:d1:0a:
a9:2d:da:7a:ef:bc:fe:83:b8:a1:13:e8:d4:83:8f:
6b:a3:76:91:e2:2f:ed:5a:56:a5:d7:96:33:03:eb:
88:07:46:9f:c8:2c:1c:b2:08:62:46:90:02:ca:cd:
81:dc:b7:b1:28:e5:33:54:c3:5d:1e:ad:3e:b7:b2:
d6:66:b5:e2:eb:ec:b3:c7:94:3d:54:e4:d4:86:71:
0f:87:45:e2:a3:b2:c9:36:05:46:ef:1d:e0:56:88:
5f:62:3b:61:4e:34:91:e9:8f:92:f6:15:9f:c6:a9:
38:1f:41:52:46:b4:04:37:4f:83:d2:54:f5:ca:d2:
98:1d:5c:54:ff:73:9d:ef:24:3b:c8:6c:4b:70:0f:
7a:d9:d5:20:d4:63:da:f5:88:ea:71:93:a8:e5:0b:
35:af:cd:22:4b:3d:05:38:3d:6a:fa:93:53:6f:e3:
0e:67:bc:28:42:3f:ba:c8:2a:37:0e:99:d9:fb:28:
fa:0b:ba:fd:46:7f:61:c7:ba:bf:0c:76:f3:bd:51:
a8:17:76:a7:84:45:aa:98:6d:3f:87:7f:df:46:de:
c5:6d:c9:56:af:37:e1:53:96:b2:db:91:77:ac:04:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:42:AB:4C:D7:63:FD:51:16:44:95:95:EA:0B:49:43:25:DF:52:F2
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232342e302f32342d3234203d3e203632303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6e:1f:2b:03:5e:f8:54:21:cb:fe:48:92:83:ef:73:8a:01:
24:2b:ed:02:13:9f:0a:24:6e:85:00:96:01:20:9c:86:51:29:
9d:e6:c8:f6:d1:3f:84:c6:d9:24:88:3e:2a:31:cf:30:59:9c:
e7:50:00:f6:b7:a5:38:28:f3:c2:1a:3b:72:ae:fb:0c:c9:5a:
c8:2d:9e:ff:a7:a2:d5:7d:03:37:93:65:cf:b4:2c:c1:9f:a9:
1f:1a:5b:9c:d3:42:c5:86:41:5c:e8:b9:b6:8d:a1:70:57:5c:
a7:d4:2d:26:25:61:64:ed:c0:7d:ca:47:74:b2:f2:02:e6:01:
80:a0:76:39:cc:01:df:11:2d:0d:bc:06:5b:ad:f5:c5:07:44:
81:0b:4c:ab:03:ba:5b:00:94:4b:e7:29:a3:ce:6d:bd:8e:4f:
c0:48:dd:ba:5b:75:26:3d:a8:d1:79:1a:47:01:a9:78:27:13:
21:4e:9e:67:14:f2:1a:c0:5d:71:f1:e3:24:0e:b0:b1:cf:84:
3d:a3:f0:e2:bf:b6:03:9c:23:e8:be:16:f9:e4:10:f9:99:a6:
59:99:43:98:c3:04:9e:16:ad:0d:23:33:65:7d:77:ca:87:13:
64:b7:7a:6f:e4:ac:2e:a2:6c:ab:cf:a8:91:e0:43:81:be:a8:
ce:c1:62:d3
-----BEGIN CERTIFICATE-----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Generated at Sun May 26 13:23:03 2024 by rpki-client on console-fra.rpki-client.org