Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134372e302f32342d3234203d3e203432333636.roa
File: 3138352e3232362e3134372e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: hFbzyy8nJdo2kDTEEcx1DCtuT9G1Wo87cssHjBaF8c8=
Subject key identifier: 01:43:23:C6:14:BE:74:CE:15:B4:C1:16:41:27:3E:B4:E8:E9:32:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1096F455A41658873F4398707929BBC92FBB117E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134372e302f32342d3234203d3e203432333636.roa
Signing time: Sun 07 May 2023 15:44:17 +0000
ROA not before: Sun 07 May 2023 15:39:17 +0000
ROA not after: Sun 05 May 2024 15:44:17 +0000
asID: 42366
IP address blocks: 185.226.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:96:f4:55:a4:16:58:87:3f:43:98:70:79:29:bb:c9:2f:bb:11:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 7 15:39:17 2023 GMT
Not After : May 5 15:44:17 2024 GMT
Subject: CN=014323C614BE74CE15B4C11641273EB4E8E93207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:e1:40:a2:d4:35:be:26:92:0a:2a:54:1c:
c9:6c:f7:66:e1:d6:bc:bb:71:81:8b:14:1a:ac:8d:
2e:7d:9c:61:71:86:42:aa:7f:18:cb:c5:2e:b6:37:
86:6f:e1:29:0f:4b:97:98:6e:45:ef:bb:b8:7e:13:
a2:68:23:fd:3a:af:a5:2c:f0:a6:dd:66:c1:91:9b:
2e:5d:a5:a1:c4:f4:0f:ee:9f:3b:fb:84:06:a4:f8:
5a:c8:10:13:33:10:87:61:18:08:19:eb:43:fb:1b:
67:b4:b2:f3:56:ef:90:8f:a4:43:8f:0a:65:d2:f2:
f4:70:b6:18:97:c7:06:90:f9:89:b6:05:1f:9c:ca:
d6:77:34:c7:3a:d2:6f:c7:8a:c1:7f:e5:cc:4c:04:
fe:8e:ec:83:eb:1c:56:59:4f:9a:e5:23:e6:09:e2:
2e:fa:32:53:99:56:5e:79:30:18:9a:93:b0:88:79:
62:5b:6d:42:a5:fa:68:62:dd:05:2b:b2:7a:90:35:
b9:c0:a0:b4:1b:d1:82:be:64:56:54:e8:23:7f:ef:
45:be:a1:1d:7c:30:cd:02:45:f7:6c:96:7e:a2:84:
74:cd:6b:97:14:94:07:f6:4e:db:d2:3c:f7:f9:59:
45:1c:7d:ed:5c:4a:d7:cc:ce:b2:08:16:9c:44:1f:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:43:23:C6:14:BE:74:CE:15:B4:C1:16:41:27:3E:B4:E8:E9:32:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134372e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:40:6b:90:b3:d8:a3:32:34:37:6b:47:d1:f7:a3:3c:1a:d9:
00:99:9e:b4:89:b0:1b:57:1f:a8:09:17:c5:3c:33:c5:5d:57:
a8:95:36:8c:ff:5c:48:5b:03:2b:cc:da:2a:84:1a:98:bc:00:
b1:18:57:cf:79:ce:df:77:56:3a:69:90:e5:8e:ac:a6:82:df:
f9:54:46:85:84:5c:1a:4d:68:59:85:4f:89:c6:fe:8a:ee:2c:
05:df:b3:37:ab:80:9a:75:da:a1:46:4c:7b:ad:96:ae:f1:a0:
a7:eb:44:df:b2:dc:56:f8:79:59:fd:ce:0b:c6:10:de:11:4e:
9e:ed:a6:1a:d1:79:22:da:d3:89:7b:c1:a3:88:45:6f:18:e3:
be:d4:b8:17:71:02:15:9e:21:b7:41:98:a9:cf:a0:35:81:7d:
87:3c:31:b4:27:3e:5c:1e:c6:62:01:cc:5f:d3:a0:e3:c4:c6:
a8:01:01:73:67:dc:18:be:f9:c8:54:ce:30:da:c4:b6:7f:bb:
87:e9:4c:bd:70:da:93:b7:68:a0:15:ec:d7:22:38:17:2e:73:
3b:25:09:dc:eb:94:99:fb:0e:7e:bc:a8:31:bd:0a:33:5a:1d:
58:ee:20:c0:fa:ba:5f:15:27:37:ec:ae:1b:17:d9:69:0c:81:
80:1c:40:d2
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 12 21:47:44 2023 by rpki-client on console-ams.rpki-client.org