Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e203439393831.roa
File: 3138352e31332e3232372e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: LPTHxGh2DGcyhpYFpIYtBa34qKZXydy89Y1VL1m5QW0=
Subject key identifier: 02:F3:33:0C:C2:B8:40:E2:43:9C:A3:6F:23:BE:58:84:2A:7A:E2:B2
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 1949F994C66B72C56C573F3F63DCF2079DD2555D
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e203439393831.roa
Signing time: Tue 30 Jan 2024 12:37:31 +0000
ROA not before: Tue 30 Jan 2024 12:32:31 +0000
ROA not after: Tue 28 Jan 2025 12:37:31 +0000
asID: 49981
IP address blocks: 185.13.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:49:f9:94:c6:6b:72:c5:6c:57:3f:3f:63:dc:f2:07:9d:d2:55:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Jan 30 12:32:31 2024 GMT
Not After : Jan 28 12:37:31 2025 GMT
Subject: CN=02F3330CC2B840E2439CA36F23BE58842A7AE2B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:e0:77:8e:fc:76:0b:fb:97:dd:63:63:e5:
66:73:5a:95:a3:de:5b:08:3c:9c:17:6c:86:75:35:
ed:e7:3c:20:5e:0a:4f:36:a0:32:13:5d:f6:f0:13:
92:60:b6:21:5b:ee:9d:8c:07:a2:6e:5c:17:ee:ce:
1f:cf:0e:c4:e8:54:e4:a1:ae:96:6a:3c:49:3d:46:
ad:f9:5e:d3:b3:49:5e:9f:fa:9d:03:9e:29:49:ea:
d8:c5:83:37:2c:e8:79:90:b9:61:da:e1:45:c3:ec:
bd:ab:b5:24:c9:7b:9e:47:3b:d4:72:c0:de:6a:fc:
f6:8e:dd:4a:42:45:c2:2e:40:84:d0:94:41:56:63:
a0:fa:1b:e3:33:a0:09:7c:11:c2:2f:6e:74:77:d3:
25:5d:64:0c:f8:53:0e:5f:9c:77:ef:70:d6:e6:22:
ee:4e:7f:34:7b:75:63:43:82:6f:d3:a7:d4:3d:11:
c6:c9:89:c0:76:16:6f:99:38:25:a2:bb:b2:1d:0c:
31:ae:8b:30:19:ad:cd:a5:8b:bf:c4:72:94:d7:8c:
d1:77:df:04:ad:21:81:7a:97:a8:52:29:1e:eb:99:
e5:9d:c2:43:16:dd:8e:eb:8e:54:fc:85:93:ca:8b:
66:ef:49:4b:f0:e9:6e:fb:d8:f5:0c:56:ea:87:08:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:33:0C:C2:B8:40:E2:43:9C:A3:6F:23:BE:58:84:2A:7A:E2:B2
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.227.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0f:ae:f1:f6:d2:9e:a0:6b:1e:6d:55:db:fb:d4:ec:be:4c:
94:d5:f8:4f:05:b0:3b:a9:15:84:d1:93:e9:f5:9f:bb:4a:c1:
ad:60:dd:06:2d:38:0c:5c:cb:34:59:54:74:5e:3a:3b:bc:e0:
a8:c6:18:8c:1b:a7:a8:5b:b4:ae:79:90:02:93:a8:55:6f:44:
c9:80:52:87:f2:0a:08:85:c6:d8:9d:02:80:88:39:fc:89:1f:
43:45:e4:88:e4:c4:f0:c0:42:d1:a8:b7:30:db:e2:18:b8:43:
25:ea:67:9d:66:7e:f1:f0:e3:7f:d8:6b:10:fc:7d:7a:aa:5f:
26:ed:13:7c:c6:90:ef:06:c0:19:d9:25:07:4f:9b:f0:70:77:
4e:78:10:dc:d7:2d:d8:14:e9:55:93:95:ac:dc:10:42:15:65:
32:5e:14:1f:5f:75:a5:55:82:3f:87:3e:fe:28:70:3c:a4:2d:
78:ef:8a:d5:a2:ae:2b:31:f7:ca:e5:d1:1d:57:8c:20:f7:3c:
5a:cf:88:25:8a:73:b5:48:11:bd:8f:75:53:03:f0:f8:22:00:
12:31:d8:1f:62:89:4c:af:07:91:0f:86:87:07:b5:0e:0f:71:
8b:fd:1f:ff:88:d6:44:fc:c1:2e:ee:05:e1:f7:e1:07:c1:9b:
89:27:3d:aa
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGUn5lMZrcsVsVz8/Y9zyB53SVV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi
NjJiYTc4NTAeFw0yNDAxMzAxMjMyMzFaFw0yNTAxMjgxMjM3MzFaMDMxMTAvBgNV
BAMTKDAyRjMzMzBDQzJCODQwRTI0MzlDQTM2RjIzQkU1ODg0MkE3QUUyQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf4+B3jvx2C/uX3WNj5WZzWpWj
3lsIPJwXbIZ1Ne3nPCBeCk82oDITXfbwE5JgtiFb7p2MB6JuXBfuzh/PDsToVOSh
rpZqPEk9Rq35XtOzSV6f+p0DnilJ6tjFgzcs6HmQuWHa4UXD7L2rtSTJe55HO9Ry
wN5q/PaO3UpCRcIuQITQlEFWY6D6G+MzoAl8EcIvbnR30yVdZAz4Uw5fnHfvcNbm
Iu5OfzR7dWNDgm/Tp9Q9EcbJicB2Fm+ZOCWiu7IdDDGuizAZrc2li7/EcpTXjNF3
3wStIYF6l6hSKR7rmeWdwkMW3Y7rjlT8hZPKi2bvSUvw6W772PUMVuqHCLUnAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUAvMzDMK4QOJDnKNvI75YhCp64rIwHwYDVR0j
BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk
ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ
cnA0VS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2U1MTBlMTct
MzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZkZjUxLzAvMzEzODM1MmUzMTMzMmUzMjMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzkzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uQ3jMA0GCSqGSIb3DQEBCwUAA4IBAQAxD67x9tKeoGsebVXb+9TsvkyU1fhPBbA7
qRWE0ZPp9Z+7SsGtYN0GLTgMXMs0WVR0Xjo7vOCoxhiMG6eoW7SueZACk6hVb0TJ
gFKH8goIhcbYnQKAiDn8iR9DReSI5MTwwELRqLcw2+IYuEMl6medZn7x8ON/2GsQ
/H16ql8m7RN8xpDvBsAZ2SUHT5vwcHdOeBDc1y3YFOlVk5Ws3BBCFWUyXhQfX3Wl
VYI/hz7+KHA8pC1474rVoq4rMffK5dEdV4wg9zxaz4glinO1SBG9j3VTA/D4IgAS
MdgfYolMrweRD4aHB7UOD3GL/R//iNZE/MEu7gXh9+EHwZuJJz2q
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org