Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20383334.roa
File: 3138352e3231322e3131332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AP0DIuvD4t62QKmPicZAwjjxKvdYSi2GxQfyrcXaNrg=
Subject key identifier: 0E:51:B0:C3:DF:99:D4:52:5B:C1:80:AB:70:AE:21:E8:CD:5D:06:7B
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 24CB2D6E17F922C6E6562D256045EE72CE529C33
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20383334.roa
Signing time: Tue 01 Oct 2024 00:19:49 +0000
ROA not before: Tue 01 Oct 2024 00:14:49 +0000
ROA not after: Tue 30 Sep 2025 00:19:49 +0000
asID: 834
IP address blocks: 185.212.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 09:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:cb:2d:6e:17:f9:22:c6:e6:56:2d:25:60:45:ee:72:ce:52:9c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 1 00:14:49 2024 GMT
Not After : Sep 30 00:19:49 2025 GMT
Subject: CN=0E51B0C3DF99D4525BC180AB70AE21E8CD5D067B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:c0:dc:60:b6:32:ad:43:4b:e9:f0:4a:b5:
22:b6:a4:d5:30:78:95:ca:f9:88:b7:d0:b8:16:02:
e4:25:2d:7f:0b:2c:b1:3b:b8:76:d2:fd:da:a4:a9:
bd:a4:dc:29:94:26:61:ab:4c:71:b4:1c:e1:76:6d:
04:4f:90:a7:30:5a:4c:b8:f5:b4:09:2c:57:75:b4:
87:d0:9a:d1:eb:ae:54:07:ab:3c:82:e3:4f:6d:62:
0b:05:c0:77:2e:1a:a4:bf:58:2e:3e:4a:93:22:2a:
33:94:ec:23:dd:a0:a6:1d:47:06:41:b2:09:57:1f:
7f:6e:82:29:03:70:bc:3a:7e:84:81:ea:b3:c5:2c:
ee:f3:50:1a:e2:b4:f3:2b:8a:7c:99:46:39:a8:1f:
62:8a:c3:b6:7d:98:ce:e6:1d:42:eb:5e:5f:48:d9:
96:d1:2c:4a:be:d2:d9:87:ad:7a:b8:05:93:f8:af:
f5:4e:5a:42:fb:bc:b2:82:7c:ce:ae:7c:de:79:d0:
a3:ff:f5:d1:f2:7f:11:89:c3:78:a4:e3:e9:42:66:
99:2d:26:68:8f:b6:11:42:4b:58:40:c5:00:be:18:
b1:68:b1:3c:b1:04:1b:32:14:b9:fc:81:db:81:6f:
fd:2f:66:08:25:62:2f:d9:69:35:85:c3:82:23:18:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:51:B0:C3:DF:99:D4:52:5B:C1:80:AB:70:AE:21:E8:CD:5D:06:7B
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f3:23:b8:da:0b:9e:3b:ab:50:de:de:55:e5:f1:05:3d:ca:
96:07:97:e2:b3:32:0c:d9:c8:57:bc:81:09:3b:5e:27:6c:01:
51:16:c1:94:30:ee:d8:95:3c:51:d8:a1:19:d6:3d:61:ed:f6:
7f:18:d4:75:37:87:61:61:2a:0d:42:91:61:aa:83:22:b6:e0:
09:4c:a3:26:e6:3d:d0:09:8d:9e:ad:93:ce:ef:b6:38:f0:58:
1f:bd:bd:11:eb:fe:83:ea:b9:ab:dc:7a:0a:e7:3f:33:ef:bd:
73:08:c9:3b:25:df:fc:98:71:c3:9a:dd:f5:f8:b3:4d:a9:ad:
bc:05:e9:77:35:4b:91:1f:f8:3e:ad:0d:89:6b:6d:76:ef:e8:
1a:41:32:d2:a2:56:c4:04:c8:02:f4:bf:a9:7d:78:d6:ab:a4:
00:9f:9f:8c:c2:6e:ff:46:78:b9:b7:7c:6c:51:32:da:9b:00:
4a:45:af:3f:c5:b9:4c:76:19:f1:29:e3:bb:e9:34:d9:48:32:
61:9a:e8:97:5a:04:70:60:f2:b5:01:b9:95:88:16:6e:9b:dc:
ae:74:82:2f:ac:8e:0f:03:55:68:83:5d:ce:c8:c6:7b:fa:b0:
13:d4:6d:57:9c:45:d7:6c:29:47:80:26:81:1f:ad:f0:b4:1e:
1e:c4:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 10:49:54 2024 by rpki-client on console-fra.rpki-client.org