Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232342e302f32342d3234203d3e20383334.roa
File: 3138352e31332e3232342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TTZUIuRYTopIFMPHzvxcAgvlx2tVXLHYkcY7GDJYdt0=
Subject key identifier: AB:C8:F8:A1:3F:6F:16:D2:EA:31:CB:BD:6B:32:76:43:EB:2F:BE:25
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 0537687C7C42362FF11D5A64617F5C0AB7506EB3
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232342e302f32342d3234203d3e20383334.roa
Signing time: Sun 26 May 2024 10:06:55 +0000
ROA not before: Sun 26 May 2024 10:01:55 +0000
ROA not after: Sun 25 May 2025 10:06:55 +0000
asID: 834
IP address blocks: 185.13.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 06:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:37:68:7c:7c:42:36:2f:f1:1d:5a:64:61:7f:5c:0a:b7:50:6e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: May 26 10:01:55 2024 GMT
Not After : May 25 10:06:55 2025 GMT
Subject: CN=ABC8F8A13F6F16D2EA31CBBD6B327643EB2FBE25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:65:63:b6:9b:cd:e3:2e:1c:ba:d0:da:f4:
14:22:ee:81:48:be:af:c5:32:bb:7d:16:c9:6a:e8:
53:5c:b8:bb:71:ad:bb:71:f3:68:af:93:a6:76:99:
07:eb:fc:d9:0a:71:a8:2f:88:c6:08:4f:07:b5:40:
da:99:e9:a5:27:61:29:aa:bd:a6:c7:c5:2a:95:02:
8b:2a:97:7e:52:b9:53:4c:ae:55:45:87:7c:fa:ba:
e1:2c:36:db:a5:aa:65:5a:e1:c6:1f:92:3b:49:c9:
37:ce:ff:c6:21:10:ed:af:81:63:45:6b:5b:a3:bd:
b9:e6:64:2b:8f:10:d8:af:eb:ce:8d:b8:f5:04:cc:
60:a2:ff:44:a3:0d:95:8b:ea:c6:26:49:bc:a5:da:
7d:64:ad:fd:60:97:9b:58:a1:d1:85:56:39:dd:d2:
6b:c8:94:fb:70:0f:a7:da:5e:d6:8b:2a:e0:4b:93:
a7:52:bc:36:47:56:b2:2f:f0:88:cf:f0:8e:e8:80:
4c:e5:6e:ff:e2:56:a7:0c:7e:46:83:38:e0:bb:d3:
9d:a8:f7:06:86:ba:93:97:b9:23:7e:97:ec:92:fc:
ea:79:32:4f:c6:2d:69:64:b5:ad:91:cd:44:83:62:
22:7b:04:a9:41:b5:5f:88:36:f5:32:bc:e5:d5:23:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:F8:A1:3F:6F:16:D2:EA:31:CB:BD:6B:32:76:43:EB:2F:BE:25
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.224.0/24
Signature Algorithm: sha256WithRSAEncryption
36:90:65:a2:c8:7c:5f:41:3c:73:2b:41:4b:59:25:4b:de:b0:
87:57:6d:e4:95:aa:cd:31:b9:5d:0f:aa:91:18:87:38:bf:ce:
17:45:43:85:19:42:f2:44:18:01:46:e2:f3:1b:d1:7d:66:dc:
ed:0c:ef:b8:f0:57:17:76:3e:96:ff:f0:92:4a:e9:a2:7f:fd:
ba:c1:d3:f1:2f:4d:71:95:a5:1c:ee:5e:88:0e:23:b4:38:b3:
e2:c7:a7:0f:19:e7:f9:3e:0a:ee:a2:d9:30:ae:73:2c:7c:83:
73:d4:be:c3:c8:ea:7f:7e:ec:94:ec:0a:f6:77:ce:43:15:e8:
de:07:d0:c2:f7:00:9a:e2:f3:0b:06:20:83:fc:80:06:9f:59:
ff:ba:a1:23:da:15:62:3e:1d:3e:93:f7:d7:45:43:04:b6:46:
8a:dc:a7:c9:4c:7b:72:14:05:32:1c:ff:8b:28:bb:08:61:ea:
75:52:9a:45:e1:ca:ac:35:69:61:11:6f:1e:8a:a6:59:cd:13:
89:f6:98:dd:e9:4d:71:d7:45:aa:9f:d2:d3:92:99:a4:7e:95:
a4:17:e5:37:f0:f2:36:fb:3d:8e:a1:7b:2e:8f:b2:0f:9d:a5:
19:e9:12:cf:a8:cd:33:91:a5:a9:1b:c6:05:7f:2e:f2:be:1f:
0d:7c:e3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 09:29:21 2024 by rpki-client on console-ams.rpki-client.org