Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
File: 3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: gIz9Id7cteHx3kAGgi75RLh+By+4x2gFqlxobp+8CFk=
Subject key identifier: B3:58:56:4C:9A:0F:4C:5D:6A:D1:B1:3C:D2:BF:76:26:AE:8F:90:C7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0D994F6AFB2765FD238A06919887CCFD675AAA0C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
Signing time: Fri 20 Oct 2023 13:41:49 +0000
ROA not before: Fri 20 Oct 2023 13:36:49 +0000
ROA not after: Fri 18 Oct 2024 13:41:49 +0000
asID: 61317
IP address blocks: 185.187.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 05:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:99:4f:6a:fb:27:65:fd:23:8a:06:91:98:87:cc:fd:67:5a:aa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:49 2023 GMT
Not After : Oct 18 13:41:49 2024 GMT
Subject: CN=B358564C9A0F4C5D6AD1B13CD2BF7626AE8F90C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:b5:ca:38:fc:53:ea:04:40:29:df:d8:70:
98:76:68:e4:61:e2:57:13:e8:12:e1:d4:7e:d5:a7:
55:40:f9:d6:2e:58:87:37:d5:77:51:f2:c4:6e:af:
20:93:b9:62:e2:ff:b6:f0:e7:62:91:97:0d:29:77:
56:43:4b:92:45:56:8c:14:66:21:5b:5f:06:1f:fa:
76:e0:d7:9d:59:16:17:a2:b0:8a:ea:b7:3d:d8:19:
95:04:78:8c:db:56:63:51:c4:9a:28:ec:5c:67:c0:
0d:16:07:f8:c2:34:79:84:43:7e:0a:18:c2:d9:a1:
31:51:6a:9b:cd:56:da:f2:9c:d7:64:d9:9d:9d:a1:
91:44:ca:dc:23:8b:80:4b:22:ee:8a:47:6e:73:2e:
7b:55:fe:7a:a4:22:85:3c:8d:84:2a:9a:46:5c:bf:
ce:d9:5c:64:a9:13:39:74:ee:3d:1c:b1:33:97:7d:
07:e9:f3:fb:26:81:9b:ba:db:ec:cf:0d:8d:2c:8b:
41:d7:27:dc:4c:fe:54:eb:2e:00:0d:08:5d:03:33:
e7:bc:98:5b:ff:45:1d:f2:c8:51:29:3d:0e:d8:f7:
5c:3c:9a:87:c2:fd:c7:09:a5:0d:d3:fd:3b:ad:c1:
60:cb:94:b3:4c:96:e2:e1:41:93:34:84:07:60:3a:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:58:56:4C:9A:0F:4C:5D:6A:D1:B1:3C:D2:BF:76:26:AE:8F:90:C7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/24
Signature Algorithm: sha256WithRSAEncryption
36:45:23:77:65:4c:53:8e:73:97:9b:57:b2:a6:6e:84:a6:a5:
d7:f4:bd:05:a6:78:55:3b:23:bf:b8:d9:db:c8:5f:97:73:19:
e0:9b:ca:8d:44:11:ff:9f:42:51:28:86:f4:7e:8b:92:a1:10:
97:43:c2:94:99:a8:f0:90:7f:38:55:9d:9f:76:11:d0:c0:92:
a2:41:5a:c7:ac:42:69:a1:da:49:55:42:22:f5:d8:33:18:a0:
e9:7b:3f:7f:80:a6:1e:1c:15:5e:76:10:a8:59:ab:67:a6:08:
c0:16:e8:ff:35:8a:9e:69:5b:57:60:37:28:cb:38:93:e4:1e:
75:87:94:86:0b:2e:b8:29:81:5b:f4:21:16:81:c3:21:fc:d6:
c7:7b:19:e0:1b:f1:be:fc:90:01:a4:86:9a:07:1c:38:fd:58:
92:dd:99:f0:4a:c7:7f:ad:a4:d6:d2:e3:fb:8a:af:d4:48:f2:
e3:00:db:c5:e5:a8:34:e3:02:27:5b:cf:da:a9:99:91:cb:51:
d3:d3:30:67:3c:66:0c:8d:41:4c:e5:ad:06:90:2f:28:e6:7b:
c5:f0:ce:7c:5d:a6:37:97:9b:f1:9d:82:9e:92:e3:d8:d7:9c:
8b:f3:43:3a:70:ec:26:44:3b:42:7b:61:90:6c:05:6e:08:c9:
aa:3a:f1:ac
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUDZlPavsnZf0jigaRmIfM/WdaqgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMjAxMzM2NDlaFw0yNDEwMTgxMzQxNDlaMDMxMTAvBgNV
BAMTKEIzNTg1NjRDOUEwRjRDNUQ2QUQxQjEzQ0QyQkY3NjI2QUU4RjkwQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RbXKOPxT6gRAKd/YcJh2aORh
4lcT6BLh1H7Vp1VA+dYuWIc31XdR8sRuryCTuWLi/7bw52KRlw0pd1ZDS5JFVowU
ZiFbXwYf+nbg151ZFheisIrqtz3YGZUEeIzbVmNRxJoo7FxnwA0WB/jCNHmEQ34K
GMLZoTFRapvNVtrynNdk2Z2doZFEytwji4BLIu6KR25zLntV/nqkIoU8jYQqmkZc
v87ZXGSpEzl07j0csTOXfQfp8/smgZu62+zPDY0si0HXJ9xM/lTrLgANCF0DM+e8
mFv/RR3yyFEpPQ7Y91w8mofC/ccJpQ3T/TutwWDLlLNMluLhQZM0hAdgOpPBAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUs1hWTJoPTF1q0bE80r92Jq6PkMcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMy
MzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5u+gwDQYJKoZIhvcNAQELBQADggEBADZFI3dlTFOOc5ebV7KmboSmpdf0vQWm
eFU7I7+42dvIX5dzGeCbyo1EEf+fQlEohvR+i5KhEJdDwpSZqPCQfzhVnZ92EdDA
kqJBWsesQmmh2klVQiL12DMYoOl7P3+Aph4cFV52EKhZq2emCMAW6P81ip5pW1dg
NyjLOJPkHnWHlIYLLrgpgVv0IRaBwyH81sd7GeAb8b78kAGkhpoHHDj9WJLdmfBK
x3+tpNbS4/uKr9RI8uMA28XlqDTjAidbz9qpmZHLUdPTMGc8ZgyNQUzlrQaQLyjm
e8XwznxdpjeXm/Gdgp6S49jXnIvzQzpw7CZEO0J7YZBsBW4Iyao68aw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org