Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134342e302f32342d3234203d3e203432333636.roa
File: 3138352e3232362e3134342e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: hgmPGEuUPQnwH32a/goXn3gOWmBByna2Ghqrl/mG3S4=
Subject key identifier: FA:57:05:7B:22:9D:4D:10:0F:A4:55:DA:DC:54:B5:72:1A:34:82:F7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3B922B5F0BF3014167E34696078174AD7F6E4756
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134342e302f32342d3234203d3e203432333636.roa
Signing time: Sun 07 May 2023 15:44:09 +0000
ROA not before: Sun 07 May 2023 15:39:09 +0000
ROA not after: Sun 05 May 2024 15:44:09 +0000
asID: 42366
IP address blocks: 185.226.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:92:2b:5f:0b:f3:01:41:67:e3:46:96:07:81:74:ad:7f:6e:47:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 7 15:39:09 2023 GMT
Not After : May 5 15:44:09 2024 GMT
Subject: CN=FA57057B229D4D100FA455DADC54B5721A3482F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:29:c8:da:9d:64:b5:6a:f8:11:25:31:fd:
48:70:38:16:59:68:7b:20:c4:0d:2c:5e:68:52:87:
c0:d9:3a:d2:13:38:bb:e6:ed:fd:7b:26:e3:cf:fd:
1e:d7:59:3c:b7:7f:af:06:df:cb:09:57:f2:41:c8:
9a:d0:67:12:c1:c6:14:62:d4:08:0b:ad:73:7f:3d:
ae:4e:94:cc:60:dd:c4:79:58:30:32:bd:23:72:e2:
e6:e9:98:e5:f2:4e:fc:6b:bc:c1:6d:d3:69:10:b4:
6b:44:23:04:79:58:67:49:ba:34:94:e0:84:fb:c5:
34:f6:5d:62:f9:3f:aa:6f:03:d4:82:cf:e3:a1:3e:
d9:e9:1b:15:33:8b:fd:47:2d:b8:79:93:20:62:78:
a5:4d:bb:19:7c:61:70:30:54:df:f9:ff:c3:b3:86:
e9:f3:25:71:75:08:e9:22:b0:50:20:e4:88:d3:8d:
52:c8:d0:33:45:d5:c9:8f:64:b4:0d:d2:91:cb:5f:
38:68:9c:b6:bd:ec:99:65:48:f7:b6:be:ea:01:52:
63:af:f3:44:a3:e0:f8:ad:14:0a:d1:05:ec:21:d0:
8f:06:9f:0a:30:80:e2:55:7f:ac:ec:8b:65:e3:9f:
a8:ed:98:5f:e3:dd:8e:7d:89:27:46:a9:c7:12:bc:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:57:05:7B:22:9D:4D:10:0F:A4:55:DA:DC:54:B5:72:1A:34:82:F7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134342e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.144.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:87:85:27:c5:8e:62:ae:b0:4d:ad:ac:e2:ad:73:ef:ff:7d:
92:a6:7b:90:3b:a5:7e:6f:55:b0:c9:d6:f3:57:e8:f0:14:a0:
7e:cd:f6:bc:18:d5:54:e3:06:c3:62:36:6e:88:de:ee:90:51:
b2:22:bb:17:90:9c:f7:58:d2:34:7d:74:a3:08:e2:95:09:c5:
da:82:c1:a7:90:d7:07:5c:86:9b:ba:8e:61:ca:d2:2a:7e:6e:
da:e2:54:77:eb:9b:25:35:f9:28:e6:f2:08:c1:47:72:e0:fd:
1c:f7:56:4a:55:3a:30:21:3c:58:3d:8d:e8:bf:7a:7d:06:37:
df:23:49:05:be:b9:41:48:41:ad:67:b9:57:4f:97:19:bb:73:
06:59:4d:62:86:6a:17:8f:51:ed:af:c6:8c:28:3f:ed:cd:3b:
87:86:18:c0:02:00:b0:ff:d1:3f:31:45:9b:b9:f3:d4:c8:85:
3a:c9:4e:05:7b:9e:3f:74:17:da:87:b6:83:aa:2e:70:d2:7a:
55:d6:bb:21:8c:20:ea:06:79:19:4b:d3:16:9a:49:53:4f:0a:
94:d6:b3:58:57:7c:2b:9b:81:5d:35:12:cc:1f:66:dc:0d:41:
84:8a:8f:68:9a:d2:2f:e4:5e:99:9c:56:bd:e0:cd:26:b6:e1:
4b:31:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 21:41:04 2023 by rpki-client on console-fra.rpki-client.org