Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20323036353035.roa
File: 3138352e3231322e3131332e302f32342d3234203d3e20323036353035.roa (raw, json)
Hash identifier: 4XGq3xjOHv59v+YDYMTRJc2MrI4Dgf7vksiPExVnOYo=
Subject key identifier: 81:5A:C3:E5:DF:43:48:8B:4C:6F:F9:2D:A2:40:76:A7:62:C2:94:B8
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 7828211FCABEAE5B7EB6DA68EC9DEC94ADFFF56E
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20323036353035.roa
Signing time: Tue 27 Aug 2024 02:05:19 +0000
ROA not before: Tue 27 Aug 2024 02:00:19 +0000
ROA not after: Tue 26 Aug 2025 02:05:19 +0000
asID: 206505
IP address blocks: 185.212.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 00:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:28:21:1f:ca:be:ae:5b:7e:b6:da:68:ec:9d:ec:94:ad:ff:f5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 27 02:00:19 2024 GMT
Not After : Aug 26 02:05:19 2025 GMT
Subject: CN=815AC3E5DF43488B4C6FF92DA24076A762C294B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:36:81:46:a5:cb:76:09:67:eb:b4:51:3b:
c8:a6:fd:52:0e:b2:62:c5:c5:18:02:ce:42:ad:13:
d4:d4:eb:f4:aa:be:09:e5:af:63:f3:28:8a:6f:7f:
b5:9b:09:c1:ba:08:1e:f6:de:cc:38:44:57:fb:4e:
3f:79:ef:01:2e:fd:57:67:49:f2:17:7c:50:34:2e:
d5:80:bd:62:6e:4b:c3:c2:ca:84:ce:6b:2a:2a:84:
aa:f7:ab:c5:2e:59:c8:59:4b:5d:c4:1a:15:be:c8:
f7:67:c4:b7:69:0e:b1:12:6a:e1:95:1c:5c:78:9e:
28:d0:1f:bf:a8:de:9b:9b:e4:9f:57:9b:48:64:37:
c3:99:3b:fb:a9:29:a6:29:ca:24:20:14:8b:24:85:
f5:c6:57:26:bc:36:ae:20:85:82:da:e8:0b:20:28:
f2:98:b3:c0:f9:e4:a7:3f:e7:16:b2:13:1c:63:d8:
dd:00:ed:6d:f2:6d:55:50:88:e1:ad:a0:03:5f:6c:
4b:6a:a2:0f:bc:43:59:80:e3:d8:e2:84:85:53:13:
96:4d:8c:e8:af:1b:94:ec:ce:4d:80:95:5d:1b:f5:
19:5c:73:f2:16:80:af:72:f5:aa:bc:6e:74:a1:6e:
d9:2f:01:dc:06:a2:a8:30:f8:7a:18:07:2d:84:4d:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5A:C3:E5:DF:43:48:8B:4C:6F:F9:2D:A2:40:76:A7:62:C2:94:B8
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20323036353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ed:b3:0c:85:03:92:18:b3:3f:c7:2f:7e:35:0f:70:24:82:
32:c3:7c:d7:f2:3c:84:77:97:61:45:57:88:54:63:a4:f7:ad:
37:5b:e7:0d:04:dc:9d:59:b3:af:42:cc:42:96:84:56:7a:33:
5c:67:16:6c:28:0a:0a:5a:a1:20:48:e1:ad:d0:e7:e6:aa:92:
9a:cb:aa:3e:f5:82:55:d2:21:17:8b:39:f7:3a:1e:de:37:04:
42:6d:c8:49:0b:44:36:59:48:cd:0e:87:ff:b1:05:74:82:79:
76:76:bb:90:91:65:42:03:e5:29:db:f5:11:cc:d8:6b:95:a1:
50:fc:32:8d:94:20:c8:18:cc:c7:03:f0:0a:54:39:d2:b6:98:
b6:12:11:28:8e:ae:44:6f:d2:7d:6a:4c:54:9e:be:7b:8a:de:
73:42:ab:d1:80:57:7b:e2:47:97:20:03:3a:8a:14:67:7c:3d:
19:b4:9a:6c:1d:c9:a8:a3:3b:14:b3:42:fa:10:7b:91:e9:c9:
f6:ff:26:9b:00:78:85:5a:c1:e9:03:d2:1f:e1:5f:6e:86:b2:
f8:73:4d:4e:43:0f:04:be:bf:09:2b:33:fc:eb:ea:ee:f9:88:
83:26:32:99:f3:c6:2b:eb:9e:cd:68:42:1e:fb:60:0a:1b:bb:
73:a7:64:0f
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUeCghH8q+rlt+ttpo7J3slK3/9W4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNDA4MjcwMjAwMTlaFw0yNTA4MjYwMjA1MTlaMDMxMTAvBgNV
BAMTKDgxNUFDM0U1REY0MzQ4OEI0QzZGRjkyREEyNDA3NkE3NjJDMjk0QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RzaBRqXLdgln67RRO8im/VIO
smLFxRgCzkKtE9TU6/Sqvgnlr2PzKIpvf7WbCcG6CB723sw4RFf7Tj957wEu/Vdn
SfIXfFA0LtWAvWJuS8PCyoTOayoqhKr3q8UuWchZS13EGhW+yPdnxLdpDrESauGV
HFx4nijQH7+o3pub5J9Xm0hkN8OZO/upKaYpyiQgFIskhfXGVya8Nq4ghYLa6Asg
KPKYs8D55Kc/5xayExxj2N0A7W3ybVVQiOGtoANfbEtqog+8Q1mA49jihIVTE5ZN
jOivG5Tszk2AlV0b9Rlcc/IWgK9y9aq8bnShbtkvAdwGoqgw+HoYBy2ETUeRAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUgVrD5d9DSItMb/ktokB2p2LClLgwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzODM1MmUzMjMxMzIyZTMx
MzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNjM1MzAzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnUcTANBgkqhkiG9w0BAQsFAAOCAQEAYu2zDIUDkhizP8cvfjUPcCSCMsN8
1/I8hHeXYUVXiFRjpPetN1vnDQTcnVmzr0LMQpaEVnozXGcWbCgKClqhIEjhrdDn
5qqSmsuqPvWCVdIhF4s59zoe3jcEQm3ISQtENllIzQ6H/7EFdIJ5dna7kJFlQgPl
Kdv1EczYa5WhUPwyjZQgyBjMxwPwClQ50raYthIRKI6uRG/SfWpMVJ6+e4rec0Kr
0YBXe+JHlyADOooUZ3w9GbSabB3JqKM7FLNC+hB7kenJ9v8mmwB4hVrB6QPSH+Ff
boay+HNNTkMPBL6/CSsz/Ovq7vmIgyYymfPGK+uezWhCHvtgChu7c6dkDw==
Generated at Tue Oct 1 02:16:22 2024 by rpki-client on console-fra.rpki-client.org