Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232362e302f32342d3234203d3e203439393831.roa
File: 3138352e31332e3232362e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: HhxwmB6Hsv0i2ZlrNGJI9AXIyWxWlQVy20W9aYfjmAg=
Subject key identifier: D9:B4:BC:B4:5C:AB:CB:35:8C:DA:ED:3E:FF:AD:48:51:11:B2:93:80
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 2F72686B6B23103DD542293E73D6B1AB0C35E770
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232362e302f32342d3234203d3e203439393831.roa
Signing time: Tue 23 Jan 2024 06:20:28 +0000
ROA not before: Tue 23 Jan 2024 06:15:28 +0000
ROA not after: Tue 21 Jan 2025 06:20:28 +0000
asID: 49981
IP address blocks: 185.13.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:72:68:6b:6b:23:10:3d:d5:42:29:3e:73:d6:b1:ab:0c:35:e7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Jan 23 06:15:28 2024 GMT
Not After : Jan 21 06:20:28 2025 GMT
Subject: CN=D9B4BCB45CABCB358CDAED3EFFAD485111B29380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e4:c7:1b:7a:22:fa:3f:e3:6b:31:b9:88:65:
3a:84:f5:a1:59:a4:c8:b5:d8:6c:8a:dc:37:09:21:
d5:db:e3:28:9b:78:ac:8e:d2:5d:89:bf:27:9e:19:
97:1d:ba:00:1a:9a:fd:36:0e:a5:9e:fd:29:c1:35:
8d:1c:30:23:9d:51:aa:ba:3d:62:ed:d2:75:2b:97:
95:a1:c1:63:d7:7d:0e:9e:bb:b7:71:61:ef:f6:9d:
fe:ce:41:28:36:18:5f:02:d1:b4:8c:a4:49:56:cb:
01:1d:1a:8b:9e:cd:93:54:d1:6d:ba:3e:d7:46:fa:
9d:7f:0f:c7:76:d3:e0:0e:42:55:4a:9a:6e:f2:99:
51:2f:5a:f6:7d:5e:0d:9d:6c:87:ad:9d:28:07:b7:
4d:8a:23:d1:41:37:ee:40:a7:43:19:15:de:d7:9b:
87:52:92:dd:2d:c4:3f:81:fc:36:b8:85:02:a1:be:
9b:b1:3d:79:97:ac:4c:7a:cc:94:97:70:d6:e5:ab:
47:ab:62:8e:2f:59:86:d2:68:b0:6b:b5:d6:ea:f4:
4a:0a:2f:1e:9a:64:91:df:00:02:aa:a5:d9:85:10:
53:00:5a:d0:64:bf:19:87:1c:34:33:67:89:72:c7:
d0:64:5f:10:f9:dd:b3:49:59:ae:d6:56:50:ec:d8:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B4:BC:B4:5C:AB:CB:35:8C:DA:ED:3E:FF:AD:48:51:11:B2:93:80
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232362e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.226.0/24
Signature Algorithm: sha256WithRSAEncryption
67:60:87:87:22:bf:a9:5a:2f:2a:0e:9b:ce:73:56:c9:b1:1d:
d6:bd:e0:a8:3a:bc:7e:21:24:03:a9:cc:bb:14:fd:d3:32:91:
e3:68:e4:68:6d:0c:ca:53:55:ee:b8:64:a2:7b:68:f2:74:9a:
8b:d8:d8:21:01:41:b9:27:bc:2a:1e:1d:56:6f:15:23:08:4c:
dd:2d:eb:cc:42:59:35:2d:8f:e0:f8:e2:7f:45:58:1c:3e:e5:
23:f2:ba:5a:1b:69:e2:5b:97:f5:c0:a0:3d:4f:94:f7:d9:aa:
d0:05:10:9d:50:e3:3c:53:fb:c8:bb:3c:5b:db:3e:de:5f:a9:
47:91:8e:e5:70:cb:bc:99:13:ca:1b:94:52:a1:13:1b:b6:b4:
02:1d:34:d4:52:96:a2:7e:ec:34:e5:4b:9e:20:10:70:a5:3f:
dc:b0:69:60:48:6c:96:a3:be:eb:c8:a7:51:75:4c:97:5f:e1:
8a:ee:17:9d:3b:4e:67:d6:8a:c8:fe:5f:d2:b0:87:03:2f:fd:
52:87:7b:d3:31:1e:c2:69:63:bf:90:2f:c1:8b:96:5e:07:8d:
d5:fe:07:bc:83:77:11:d3:92:1d:96:1c:53:eb:13:1c:29:9a:
cf:dd:30:00:9b:36:f5:fd:b7:c4:5b:90:6a:f2:c9:d4:de:ae:
e0:9c:61:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 01:59:17 2024 by rpki-client on console-fra.rpki-client.org