Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: TobVh1qtalWxiBz9tzYzvZIOF76yE80uG9Pp+UMzaJk=
Subject key identifier: 8F:BB:3A:D8:91:74:77:09:AF:23:65:0A:E4:28:2D:AC:09:C6:E6:49
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 32F1F782F278658E20FFBDF45D162CB81B498F4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:57 +0000
ROA not before: Fri 20 Oct 2023 13:36:57 +0000
ROA not after: Fri 18 Oct 2024 13:41:57 +0000
asID: 136787
IP address blocks: 185.202.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f1:f7:82:f2:78:65:8e:20:ff:bd:f4:5d:16:2c:b8:1b:49:8f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:57 2023 GMT
Not After : Oct 18 13:41:57 2024 GMT
Subject: CN=8FBB3AD891747709AF23650AE4282DAC09C6E649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:90:8a:c2:61:46:73:4a:f1:f0:7c:ce:7d:
66:95:06:4d:57:56:8e:b2:07:c5:38:90:4c:e4:78:
3d:99:df:c2:8a:5c:6a:f3:b6:4a:58:8e:b3:34:4e:
3e:91:b5:aa:df:b9:9c:fe:cb:1b:c0:63:3b:8c:c2:
08:4c:6c:76:4f:a4:13:25:7f:91:b0:21:d0:96:fe:
5d:ce:4b:e8:60:d1:6e:9d:dd:f9:8a:7d:24:4b:81:
16:d8:1d:d2:d3:cc:22:b4:7f:6c:3d:35:b0:ba:21:
c3:89:d3:78:60:b5:22:25:94:91:8c:61:3a:ec:58:
14:03:e4:b1:9b:44:a4:ef:00:46:84:f1:16:9a:54:
a7:e4:21:23:e9:d9:7c:ee:a0:4d:fc:99:2b:32:7d:
7e:66:ea:35:2b:07:cd:8a:e2:d2:c6:6b:a1:40:88:
25:ff:61:70:bc:ef:fe:f4:83:3f:3d:5c:5b:08:d5:
7c:0e:09:85:c3:0e:cd:f6:0f:98:a1:3c:46:c8:72:
a7:fa:f0:0a:38:32:a2:88:2b:ce:a1:e4:ef:22:b6:
ae:92:fa:3b:d3:bd:41:95:72:8b:4b:ab:9c:9d:91:
c0:4f:e1:bc:e7:d6:f9:e0:4c:ac:7f:10:fe:c8:9b:
94:67:aa:ac:cb:b5:e9:15:d9:a8:81:90:74:7b:93:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:3A:D8:91:74:77:09:AF:23:65:0A:E4:28:2D:AC:09:C6:E6:49
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.222.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1a:0d:ab:25:ea:c7:48:93:a3:3d:1a:ca:e4:76:2f:eb:c7:
83:4b:96:6e:7e:56:4b:29:a9:38:b0:bf:3d:6a:12:a9:66:6d:
3f:70:15:2d:16:cd:ac:62:9d:c0:4a:12:15:8a:18:70:05:88:
6f:6e:c5:ad:95:4f:73:41:49:9f:e0:24:e9:b8:33:37:d2:8a:
56:31:b7:5d:d6:ff:9e:72:f6:fa:dc:2c:45:c8:9e:96:b8:7f:
be:20:6c:4c:bd:fe:d5:e6:b2:20:e6:da:13:80:80:25:fd:27:
83:f6:ff:6d:82:87:2f:42:29:fc:a5:84:31:94:02:c5:a1:01:
80:ed:09:7d:9a:12:ae:4e:af:35:49:1a:e2:bb:7a:f2:7e:c5:
24:95:40:12:b9:cb:0b:06:65:0a:f7:32:0b:0a:6e:07:bd:e6:
35:9b:7d:0a:03:71:0c:0d:47:95:ce:8e:f0:73:49:a5:ef:08:
42:73:1e:b8:51:a9:a0:69:83:98:93:14:34:f1:95:7f:ca:80:
64:45:81:3d:f6:6b:48:cb:e6:1f:b1:3a:ba:b0:96:f1:b8:c9:
5a:b2:88:3e:8c:96:9b:f3:ed:e8:2d:f2:93:89:db:41:2c:f3:
3c:fc:1c:ca:35:fe:a5:8b:70:40:67:1b:93:fd:45:a7:0f:6d:
ea:7c:d5:9e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUMvH3gvJ4ZY4g/730XRYsuBtJj0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMjAxMzM2NTdaFw0yNDEwMTgxMzQxNTdaMDMxMTAvBgNV
BAMTKDhGQkIzQUQ4OTE3NDc3MDlBRjIzNjUwQUU0MjgyREFDMDlDNkU2NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmJCKwmFGc0rx8HzOfWaVBk1X
Vo6yB8U4kEzkeD2Z38KKXGrztkpYjrM0Tj6RtarfuZz+yxvAYzuMwghMbHZPpBMl
f5GwIdCW/l3OS+hg0W6d3fmKfSRLgRbYHdLTzCK0f2w9NbC6IcOJ03hgtSIllJGM
YTrsWBQD5LGbRKTvAEaE8RaaVKfkISPp2XzuoE38mSsyfX5m6jUrB82K4tLGa6FA
iCX/YXC87/70gz89XFsI1XwOCYXDDs32D5ihPEbIcqf68Ao4MqKIK86h5O8itq6S
+jvTvUGVcotLq5ydkcBP4bzn1vngTKx/EP7Im5RnqqzLtekV2aiBkHR7k7sfAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUj7s62JF0dwmvI2UK5CgtrAnG5kkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzIyZTMy
MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnK3jANBgkqhkiG9w0BAQsFAAOCAQEAVBoNqyXqx0iToz0ayuR2L+vHg0uW
bn5WSympOLC/PWoSqWZtP3AVLRbNrGKdwEoSFYoYcAWIb27FrZVPc0FJn+Ak6bgz
N9KKVjG3Xdb/nnL2+twsRcielrh/viBsTL3+1eayIObaE4CAJf0ng/b/bYKHL0Ip
/KWEMZQCxaEBgO0JfZoSrk6vNUka4rt68n7FJJVAErnLCwZlCvcyCwpuB73mNZt9
CgNxDA1Hlc6O8HNJpe8IQnMeuFGpoGmDmJMUNPGVf8qAZEWBPfZrSMvmH7E6urCW
8bjJWrKIPoyWm/Pt6C3yk4nbQSzzPPwcyjX+pYtwQGcbk/1Fpw9t6nzVng==
-----END CERTIFICATE-----
Generated at Mon Mar 4 12:18:12 2024 by rpki-client on console-ams.rpki-client.org