Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232362e302f32342d3234203d3e2035303635.roa
File: 3138352e31332e3232362e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: LCtWzh+nnqN8IJ/xr0daN6UHBYGOpkWIWW5V6hocCwM=
Subject key identifier: B7:C2:2C:84:ED:AD:AE:98:3F:DD:71:43:3C:80:FF:B6:FE:0B:CA:D2
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 549B1B5EA9AB44EDB5EBA63D2E74706A3DA3D782
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232362e302f32342d3234203d3e2035303635.roa
Signing time: Wed 19 Jun 2024 08:17:45 +0000
ROA not before: Wed 19 Jun 2024 08:12:45 +0000
ROA not after: Wed 18 Jun 2025 08:17:45 +0000
asID: 5065
IP address blocks: 185.13.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:9b:1b:5e:a9:ab:44:ed:b5:eb:a6:3d:2e:74:70:6a:3d:a3:d7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Jun 19 08:12:45 2024 GMT
Not After : Jun 18 08:17:45 2025 GMT
Subject: CN=B7C22C84EDADAE983FDD71433C80FFB6FE0BCAD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:c8:42:d7:5d:31:df:af:aa:8d:d8:86:ee:
64:66:09:ae:d8:15:2f:24:4c:74:23:ef:db:3c:38:
35:a0:39:09:b3:e5:8f:4a:f1:85:60:ad:fa:95:90:
42:c8:7f:42:9a:f7:f0:64:f5:94:f4:a6:49:2c:09:
f1:e2:07:9e:12:bd:76:a7:1b:71:16:9d:f1:86:d1:
4a:4c:52:fb:2e:c4:dd:19:ec:dc:ad:f7:61:62:a7:
fc:1d:39:71:01:d3:e2:8f:7b:78:6b:1d:a6:39:fa:
ad:90:83:aa:65:56:1a:32:c0:59:94:52:56:3e:d8:
53:2a:04:f1:ce:7e:ee:58:b9:87:44:c4:2e:9b:a2:
e3:1f:42:60:01:99:9b:ac:03:9c:25:2d:96:47:4e:
4b:06:b8:19:49:6a:b2:6e:72:2a:71:09:de:1b:85:
4c:7b:e0:53:36:88:74:af:73:21:8d:56:30:dc:41:
8a:09:bd:f7:cc:e7:b3:53:17:6b:2d:f7:34:0a:58:
2d:bd:00:29:f2:3c:ec:3c:36:16:14:68:cb:54:6e:
a7:92:5b:84:2b:1f:ed:2a:6b:04:e9:37:35:8e:3d:
d0:c8:2f:09:2b:16:cc:18:82:be:f5:61:f1:a3:19:
14:7f:24:75:a0:04:f0:15:9f:cf:ea:a8:ee:9e:29:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C2:2C:84:ED:AD:AE:98:3F:DD:71:43:3C:80:FF:B6:FE:0B:CA:D2
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232362e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:83:75:cd:85:e5:1e:0b:fd:b5:65:3b:ea:95:87:64:5d:e8:
fb:03:56:4d:8d:ce:e8:69:44:75:68:37:34:27:bc:8e:3e:08:
08:41:e2:82:37:2a:4a:d2:0e:49:26:cf:07:56:27:b4:82:40:
1c:8e:9d:2a:fa:86:03:99:60:91:9f:5f:04:9f:3a:81:fd:54:
f6:cf:6f:97:37:37:74:95:f6:27:3f:20:c9:9d:1d:b4:8c:44:
b4:14:31:f7:64:cc:87:fa:5a:91:0a:d9:26:1b:86:d5:6e:40:
d0:7d:17:65:3c:01:d1:a8:c3:b8:e1:dc:2c:03:f4:4b:90:ea:
0d:4c:4e:ab:77:77:0b:b5:73:b7:41:af:18:61:b5:e0:96:42:
df:4e:03:4c:b2:3f:b5:78:d7:cc:b0:f3:eb:c4:3a:9b:b6:17:
e1:8c:c5:cf:ea:32:0a:f4:e0:d1:85:f1:22:8e:86:0d:f9:24:
e5:bc:fc:41:3e:61:0f:70:14:53:5f:54:a5:07:de:88:8d:9e:
fa:3b:c4:62:f9:7c:81:53:19:be:0d:47:a9:2f:8c:74:85:16:
5d:af:df:9e:86:45:ef:b4:eb:52:c8:9c:29:9a:f1:bb:6f:6d:
3d:34:88:90:d1:68:dd:d0:48:23:cc:0c:6b:e3:79:af:c3:84:
dc:e5:9f:71
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVJsbXqmrRO2166Y9LnRwaj2j14IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi
NjJiYTc4NTAeFw0yNDA2MTkwODEyNDVaFw0yNTA2MTgwODE3NDVaMDMxMTAvBgNV
BAMTKEI3QzIyQzg0RURBREFFOTgzRkRENzE0MzNDODBGRkI2RkUwQkNBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgr8hC110x36+qjdiG7mRmCa7Y
FS8kTHQj79s8ODWgOQmz5Y9K8YVgrfqVkELIf0Ka9/Bk9ZT0pkksCfHiB54SvXan
G3EWnfGG0UpMUvsuxN0Z7Nyt92Fip/wdOXEB0+KPe3hrHaY5+q2Qg6plVhoywFmU
UlY+2FMqBPHOfu5YuYdExC6bouMfQmABmZusA5wlLZZHTksGuBlJarJucipxCd4b
hUx74FM2iHSvcyGNVjDcQYoJvffM57NTF2st9zQKWC29ACnyPOw8NhYUaMtUbqeS
W4QrH+0qawTpNzWOPdDILwkrFswYgr71YfGjGRR/JHWgBPAVn8/qqO6eKR3nAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUt8IshO2trpg/3XFDPID/tv4LytIwHwYDVR0j
BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk
ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ
cnA0VS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2U1MTBlMTct
MzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZkZjUxLzAvMzEzODM1MmUzMTMzMmUzMjMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMwMzYzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkN
4jANBgkqhkiG9w0BAQsFAAOCAQEAjIN1zYXlHgv9tWU76pWHZF3o+wNWTY3O6GlE
dWg3NCe8jj4ICEHigjcqStIOSSbPB1YntIJAHI6dKvqGA5lgkZ9fBJ86gf1U9s9v
lzc3dJX2Jz8gyZ0dtIxEtBQx92TMh/pakQrZJhuG1W5A0H0XZTwB0ajDuOHcLAP0
S5DqDUxOq3d3C7Vzt0GvGGG14JZC304DTLI/tXjXzLDz68Q6m7YX4YzFz+oyCvTg
0YXxIo6GDfkk5bz8QT5hD3AUU19UpQfeiI2e+jvEYvl8gVMZvg1HqS+MdIUWXa/f
noZF77TrUsicKZrxu29tPTSIkNFo3dBII8wMa+N5r8OE3OWfcQ==
-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:42 2024 by rpki-client on console-fra.rpki-client.org