Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138332e302f32342d3234203d3e2033333230.roa
File: 3138352e3231352e3138332e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: mrFubS2LbyBg9KYwjL3HktDUkMawWKcvvhMfjKLAoUQ=
Subject key identifier: A0:2C:56:C2:99:AB:42:A2:AD:21:DD:D3:BE:D7:F6:71:6B:7F:6B:51
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2D8D7948E349FBB8F931E8E0942D46554DD2FF04
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138332e302f32342d3234203d3e2033333230.roa
Signing time: Mon 27 Mar 2023 08:28:47 +0000
ROA not before: Mon 27 Mar 2023 08:23:47 +0000
ROA not after: Mon 25 Mar 2024 08:28:47 +0000
asID: 3320
IP address blocks: 185.215.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8d:79:48:e3:49:fb:b8:f9:31:e8:e0:94:2d:46:55:4d:d2:ff:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:47 2023 GMT
Not After : Mar 25 08:28:47 2024 GMT
Subject: CN=A02C56C299AB42A2AD21DDD3BED7F6716B7F6B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:48:14:65:d6:24:27:9e:36:ab:a9:8f:d0:
4e:8a:42:7a:25:ac:a2:6c:68:73:58:e2:ad:c7:73:
67:4c:8a:db:6d:49:e9:4f:5b:eb:87:29:4f:6c:83:
1e:e5:fb:cb:ae:21:36:45:17:9e:87:1c:8f:8f:80:
3d:32:9a:83:b0:b3:54:c6:b9:80:67:1b:a9:02:4b:
25:bd:a7:e3:92:af:fd:80:12:6f:4f:72:44:e9:fd:
79:01:c8:e9:dc:e0:c2:a9:3b:aa:a7:f5:c7:f1:a0:
dd:5a:8c:1f:fe:a9:52:fc:8a:6f:52:a8:43:d7:ae:
f3:96:5a:01:29:3e:5c:4f:e0:3b:0a:c7:fa:d0:44:
82:d2:c6:e1:f6:97:b9:66:9c:41:d5:ab:57:8a:6b:
a3:8b:38:1a:3e:02:08:8c:f7:31:f4:31:7d:72:41:
fe:f2:14:72:62:0c:f9:e3:d9:d0:49:13:2f:6a:e6:
5e:d9:ca:05:c4:5f:dd:7d:3c:82:2f:36:00:77:cf:
2b:78:3a:f5:fe:ae:a5:8b:db:d8:6e:3d:81:2b:81:
0d:e4:74:07:c0:be:5e:7c:5b:4c:b2:9f:41:21:19:
2a:17:31:b7:60:9a:af:ef:48:98:55:63:8f:ab:f2:
73:4b:91:8f:68:66:7a:ff:6b:6e:14:9f:5f:f6:df:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:56:C2:99:AB:42:A2:AD:21:DD:D3:BE:D7:F6:71:6B:7F:6B:51
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138332e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.183.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b4:3c:bd:55:aa:27:a8:08:8e:53:16:aa:3a:f3:bc:7d:8e:
34:00:80:33:e8:dd:3f:cc:9b:7d:ae:e2:7f:42:ec:c8:6e:68:
10:d3:16:5c:a5:1d:54:db:db:4c:30:8c:a0:49:05:97:bb:eb:
ec:c9:6d:ed:a7:8e:5b:01:4f:ca:48:3c:c7:5c:bf:10:23:be:
c1:02:f9:91:9e:e6:26:ff:80:c7:5c:f0:5f:09:b9:4e:f6:56:
9c:73:93:63:9b:31:70:62:01:52:40:b0:8a:a5:dd:33:11:30:
05:12:81:01:17:60:20:7e:4d:04:97:ea:b3:7b:97:09:34:b4:
18:ff:06:01:e0:ce:0f:5f:71:d7:8f:0e:ad:85:2d:f1:15:74:
26:44:6d:eb:91:7c:29:7d:d8:d3:e6:80:7f:0c:3d:ec:4e:33:
b6:bc:17:ca:08:4e:51:77:7f:3f:68:1b:54:09:94:76:33:0d:
a5:56:1b:de:bf:97:28:6f:85:2a:87:e3:84:0e:db:7a:c6:25:
c5:e6:13:29:12:ad:01:0a:b2:82:83:33:b6:63:e2:cc:c6:c1:
a3:97:c6:90:47:e5:f0:9f:d0:9d:cb:82:77:9d:33:ec:8a:d8:
3d:ee:27:9b:9e:f2:4c:4b:5a:24:5a:49:98:b2:48:64:e7:78:
94:0d:f5:06
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIULY15SONJ+7j5MejglC1GVU3S/wQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzAzMjcwODIzNDdaFw0yNDAzMjUwODI4NDdaMDMxMTAvBgNV
BAMTKEEwMkM1NkMyOTlBQjQyQTJBRDIxREREM0JFRDdGNjcxNkI3RjZCNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZUUgUZdYkJ542q6mP0E6KQnol
rKJsaHNY4q3Hc2dMitttSelPW+uHKU9sgx7l+8uuITZFF56HHI+PgD0ymoOws1TG
uYBnG6kCSyW9p+OSr/2AEm9PckTp/XkByOnc4MKpO6qn9cfxoN1ajB/+qVL8im9S
qEPXrvOWWgEpPlxP4DsKx/rQRILSxuH2l7lmnEHVq1eKa6OLOBo+AgiM9zH0MX1y
Qf7yFHJiDPnj2dBJEy9q5l7ZygXEX919PIIvNgB3zyt4OvX+rqWL29huPYErgQ3k
dAfAvl58W0yyn0EhGSoXMbdgmq/vSJhVY4+r8nNLkY9oZnr/a24Un1/235LBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUoCxWwpmrQqKtId3Tvtf2cWt/a1EwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzUyZTMx
MzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzMzMjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ude3MA0GCSqGSIb3DQEBCwUAA4IBAQAGtDy9VaonqAiOUxaqOvO8fY40AIAz6N0/
zJt9ruJ/QuzIbmgQ0xZcpR1U29tMMIygSQWXu+vsyW3tp45bAU/KSDzHXL8QI77B
AvmRnuYm/4DHXPBfCblO9lacc5NjmzFwYgFSQLCKpd0zETAFEoEBF2Agfk0El+qz
e5cJNLQY/wYB4M4PX3HXjw6thS3xFXQmRG3rkXwpfdjT5oB/DD3sTjO2vBfKCE5R
d38/aBtUCZR2Mw2lVhvev5cob4Uqh+OEDtt6xiXF5hMpEq0BCrKCgzO2Y+LMxsGj
l8aQR+Xwn9Cdy4J3nTPsitg97iebnvJMS1okWkmYskhk53iUDfUG
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org