Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa
File: 3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa (raw, json)
Hash identifier: v8oQX+rBugfBbH5WvjAtO4IMTlnCcAwLpzm1s9oBHNA=
Subject key identifier: BF:95:83:4B:73:55:F3:3D:FC:8D:58:6D:28:FC:F9:04:12:EB:5E:0F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A4F57E5AF0EAD6B9B4E452E2D9576B57D440D62
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa
Signing time: Fri 20 Oct 2023 13:41:42 +0000
ROA not before: Fri 20 Oct 2023 13:36:42 +0000
ROA not after: Fri 18 Oct 2024 13:41:42 +0000
asID: 34984
IP address blocks: 185.187.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 05:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:4f:57:e5:af:0e:ad:6b:9b:4e:45:2e:2d:95:76:b5:7d:44:0d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:42 2023 GMT
Not After : Oct 18 13:41:42 2024 GMT
Subject: CN=BF95834B7355F33DFC8D586D28FCF90412EB5E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:59:f3:80:ba:08:a6:2f:5d:a0:c7:8e:17:
6f:18:80:76:c7:0a:b0:37:1c:40:d4:eb:36:1d:15:
65:65:c1:c5:cd:da:31:ad:9b:cd:a1:5c:f6:1c:04:
3e:ba:0e:5a:15:d4:40:66:00:e5:53:27:da:79:05:
ba:de:38:78:d3:0a:9c:32:c7:91:1b:32:f7:5e:03:
94:04:45:25:82:91:29:72:c6:6b:91:09:44:06:81:
20:0f:05:ae:f8:0c:8d:e6:66:c8:cd:a6:c3:c1:24:
09:3a:14:00:80:97:c4:b6:a9:67:f7:04:e7:fc:a4:
4d:62:aa:52:95:e1:11:94:04:85:cf:3d:b4:58:56:
91:ba:68:0c:d4:ce:53:4d:d7:38:28:3d:79:db:0a:
fa:7b:96:eb:7d:fb:cb:fc:e9:e2:21:e4:fa:16:4c:
d9:16:a4:a4:07:bb:db:08:23:99:5f:b8:5d:11:bc:
80:d6:3d:04:38:f8:5d:1c:eb:d8:cb:80:39:7e:7f:
88:6c:d6:89:89:49:49:c2:e9:c5:af:e3:16:92:e5:
05:7a:fc:da:db:b9:fd:65:d7:e4:c0:29:a9:35:1e:
f5:fa:2d:36:d4:d7:5e:be:9c:4a:58:bc:33:9a:9b:
e9:8c:6f:e3:27:2a:a5:c7:35:01:aa:3a:03:75:ea:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:83:4B:73:55:F3:3D:FC:8D:58:6D:28:FC:F9:04:12:EB:5E:0F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:18:f6:f8:8f:dc:05:10:f9:80:7d:1a:50:ee:0e:5e:13:a9:
88:67:3e:5f:b4:c2:ab:5a:c2:08:c6:0d:23:3c:4a:9f:1f:96:
02:fc:09:9b:f6:8d:3e:32:87:98:af:41:c2:c7:d7:5d:e1:25:
8e:88:1d:35:e9:9c:0a:84:d5:78:e8:3a:d4:36:44:91:8b:d9:
71:6a:0f:a3:c7:9a:1c:ab:04:2f:86:13:fb:e4:1c:c1:ad:64:
dd:b9:83:22:40:63:14:b4:f5:f6:b2:8a:cb:ae:61:ff:9a:7c:
21:1f:50:18:a2:d0:6e:7b:0e:f4:3a:69:4d:95:56:76:f4:83:
9f:04:53:88:2d:59:e6:8f:b9:5d:c2:8e:08:1d:a3:4c:ab:9a:
30:8f:02:c0:e3:2d:0f:78:7b:87:2f:54:25:68:68:a1:ee:ba:
7b:df:9d:ce:40:1c:d2:1a:6b:59:2e:f4:12:13:ef:65:44:47:
ab:02:a0:4d:43:4b:c7:b9:1e:c4:94:75:24:f8:02:39:43:d3:
d3:39:42:79:de:f2:7a:21:32:64:6f:aa:a1:a3:ea:68:03:0f:
4f:b0:32:d0:18:f8:66:56:bc:8f:6e:f3:21:e4:eb:82:3d:77:
4e:75:d1:fd:7c:24:ad:60:54:04:4c:4c:6b:06:d4:a7:e7:9f:
27:d0:c0:ec
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUek9X5a8OrWubTkUuLZV2tX1EDWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMjAxMzM2NDJaFw0yNDEwMTgxMzQxNDJaMDMxMTAvBgNV
BAMTKEJGOTU4MzRCNzM1NUYzM0RGQzhENTg2RDI4RkNGOTA0MTJFQjVFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTPVnzgLoIpi9doMeOF28YgHbH
CrA3HEDU6zYdFWVlwcXN2jGtm82hXPYcBD66DloV1EBmAOVTJ9p5BbreOHjTCpwy
x5EbMvdeA5QERSWCkSlyxmuRCUQGgSAPBa74DI3mZsjNpsPBJAk6FACAl8S2qWf3
BOf8pE1iqlKV4RGUBIXPPbRYVpG6aAzUzlNN1zgoPXnbCvp7lut9+8v86eIh5PoW
TNkWpKQHu9sII5lfuF0RvIDWPQQ4+F0c69jLgDl+f4hs1omJSUnC6cWv4xaS5QV6
/Nrbuf1l1+TAKak1HvX6LTbU116+nEpYvDOam+mMb+MnKqXHNQGqOgN16gVPAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUv5WDS3NV8z38jVhtKPz5BBLrXg8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMy
MzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzQzOTM4MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5u+gwDQYJKoZIhvcNAQELBQADggEBACoY9viP3AUQ+YB9GlDuDl4TqYhnPl+0
wqtawgjGDSM8Sp8flgL8CZv2jT4yh5ivQcLH113hJY6IHTXpnAqE1XjoOtQ2RJGL
2XFqD6PHmhyrBC+GE/vkHMGtZN25gyJAYxS09fayisuuYf+afCEfUBii0G57DvQ6
aU2VVnb0g58EU4gtWeaPuV3Cjggdo0yrmjCPAsDjLQ94e4cvVCVoaKHuunvfnc5A
HNIaa1ku9BIT72VER6sCoE1DS8e5HsSUdST4AjlD09M5Qnne8nohMmRvqqGj6mgD
D0+wMtAY+GZWvI9u8yHk64I9d0510f18JK1gVARMTGsG1KfnnyfQwOw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org