Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3136392e302f32342d3234203d3e203631333137.roa
File: 3138352e3231372e3136392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: arJzwpPiSqYDx9q+0aBlrnJYYaXvH8Cj5sy5FflqAQ0=
Subject key identifier: C2:0D:2C:D6:BC:7D:5A:3D:12:69:22:41:AD:F4:A8:E1:3E:C5:DA:D7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43F0AA29F2A59E2355E04F90288F3F2006A00226
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3136392e302f32342d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:28:31 +0000
ROA not before: Mon 27 Mar 2023 08:23:31 +0000
ROA not after: Mon 25 Mar 2024 08:28:31 +0000
asID: 61317
IP address blocks: 185.217.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f0:aa:29:f2:a5:9e:23:55:e0:4f:90:28:8f:3f:20:06:a0:02:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:31 2023 GMT
Not After : Mar 25 08:28:31 2024 GMT
Subject: CN=C20D2CD6BC7D5A3D12692241ADF4A8E13EC5DAD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:a7:63:02:3f:b1:06:98:a5:22:56:3d:1d:
cc:de:4b:81:56:c4:2b:40:54:1c:19:72:02:42:c0:
55:26:d8:99:b3:02:d3:ae:46:fa:c8:2d:28:cc:30:
ad:e4:cb:46:f7:f7:74:c6:b2:f8:f5:3c:5d:ce:ab:
03:44:1c:c0:47:37:5f:1c:cf:a4:61:f4:f5:08:5c:
af:ac:29:fc:5d:09:44:3f:32:80:b8:06:bc:86:f3:
86:fa:13:3d:b7:c4:bb:d5:66:1e:1b:07:ac:36:65:
2a:e2:82:8c:b3:7e:78:17:68:6b:36:ab:d6:05:08:
3f:40:32:d5:63:77:39:48:c1:82:88:d7:66:e0:5d:
22:99:e8:7d:d6:cc:8f:90:e6:3a:d5:8f:b5:b6:66:
5e:fd:2d:5a:78:aa:90:98:b7:fa:35:22:29:b8:c5:
fa:6b:ba:8e:c7:01:07:9b:d6:8c:2f:8d:e9:33:f4:
a8:41:0d:5f:3f:96:33:2b:9d:31:09:a9:5a:5d:e0:
49:97:0a:32:28:6b:67:ec:8d:c3:1f:79:00:2c:3b:
60:05:ca:68:0b:60:38:2e:58:92:cc:52:11:11:ee:
85:35:e6:e9:f6:3c:c2:15:46:14:ae:5f:b9:e5:a2:
87:2a:4f:fe:ec:df:ff:8c:3c:3f:76:cd:72:b7:7f:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0D:2C:D6:BC:7D:5A:3D:12:69:22:41:AD:F4:A8:E1:3E:C5:DA:D7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3136392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d6:5c:e7:66:e7:e9:73:2b:3d:f8:ba:f8:c1:0d:97:96:20:
e9:ec:c8:37:68:40:ab:da:14:3f:73:1b:b2:e8:1c:0c:e1:0e:
e3:f2:e0:fa:c3:db:f1:f0:ee:75:68:39:03:7a:6a:3f:ff:d0:
6b:fd:20:0b:58:54:d1:a5:a7:b2:3a:9d:b0:98:4a:22:63:a5:
a7:03:e8:30:74:76:19:fd:66:e3:4c:b1:31:d6:4b:3d:a3:34:
85:92:85:cb:7f:7e:18:9e:a4:f4:05:08:ce:b2:0f:3a:a2:fa:
04:1c:e8:56:fa:aa:7f:4a:a7:eb:27:53:e3:99:d5:d5:10:4b:
87:fd:f9:c9:2f:18:53:bd:8d:c4:71:90:33:23:3a:cd:cb:6f:
95:31:cd:c4:73:7e:2e:65:9e:89:97:12:68:55:25:1a:93:8f:
3f:49:f6:33:54:cf:5d:e6:c0:27:b7:c9:6c:e5:2a:bc:f8:1c:
98:ce:09:05:92:90:68:26:9a:c3:65:dc:4f:49:7f:85:8b:32:
33:49:2f:1a:94:4e:07:2d:12:1f:f4:db:04:a8:82:26:3a:a7:
55:b6:5a:bc:0c:e2:4f:df:79:66:b8:0e:18:30:b4:7a:bc:69:
ea:33:e6:a6:2a:b4:1f:05:e8:9d:6a:8e:a6:bb:94:fb:7e:29:
57:d2:56:36
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQ/CqKfKlniNV4E+QKI8/IAagAiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzAzMjcwODIzMzFaFw0yNDAzMjUwODI4MzFaMDMxMTAvBgNV
BAMTKEMyMEQyQ0Q2QkM3RDVBM0QxMjY5MjI0MUFERjRBOEUxM0VDNURBRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7b6djAj+xBpilIlY9HczeS4FW
xCtAVBwZcgJCwFUm2JmzAtOuRvrILSjMMK3ky0b393TGsvj1PF3OqwNEHMBHN18c
z6Rh9PUIXK+sKfxdCUQ/MoC4BryG84b6Ez23xLvVZh4bB6w2ZSrigoyzfngXaGs2
q9YFCD9AMtVjdzlIwYKI12bgXSKZ6H3WzI+Q5jrVj7W2Zl79LVp4qpCYt/o1Iim4
xfpruo7HAQeb1owvjekz9KhBDV8/ljMrnTEJqVpd4EmXCjIoa2fsjcMfeQAsO2AF
ymgLYDguWJLMUhER7oU15un2PMIVRhSuX7nloocqT/7s3/+MPD92zXK3f7H9AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUwg0s1rx9Wj0SaSJBrfSo4T7F2tcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzcyZTMx
MzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC52akwDQYJKoZIhvcNAQELBQADggEBAHzWXOdm5+lzKz34uvjBDZeWIOnsyDdo
QKvaFD9zG7LoHAzhDuPy4PrD2/Hw7nVoOQN6aj//0Gv9IAtYVNGlp7I6nbCYSiJj
pacD6DB0dhn9ZuNMsTHWSz2jNIWShct/fhiepPQFCM6yDzqi+gQc6Fb6qn9Kp+sn
U+OZ1dUQS4f9+ckvGFO9jcRxkDMjOs3Lb5UxzcRzfi5lnomXEmhVJRqTjz9J9jNU
z13mwCe3yWzlKrz4HJjOCQWSkGgmmsNl3E9Jf4WLMjNJLxqUTgctEh/02wSogiY6
p1W2WrwM4k/feWa4DhgwtHq8aeoz5qYqtB8F6J1qjqa7lPt+KVfSVjY=
Generated at Mon Aug 21 08:05:13 2023 by rpki-client on console-ams.rpki-client.org