Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234372e302f32342d3234203d3e203432333636.roa
File: 38352e3139302e3234372e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: n55LYKjB9K3kPTBvdDaODuOvGI7fu2PQv0VNnMLdTu0=
Subject key identifier: 38:90:48:A1:91:A3:94:B6:EE:43:D8:F9:73:7D:97:B3:D6:EC:2B:3C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1FC29BD09F8949D372A8163C1646C9FA3EADE1EF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234372e302f32342d3234203d3e203432333636.roa
Signing time: Tue 25 Apr 2023 17:57:59 +0000
ROA not before: Tue 25 Apr 2023 17:52:59 +0000
ROA not after: Tue 23 Apr 2024 17:57:59 +0000
asID: 42366
IP address blocks: 85.190.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c2:9b:d0:9f:89:49:d3:72:a8:16:3c:16:46:c9:fa:3e:ad:e1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 25 17:52:59 2023 GMT
Not After : Apr 23 17:57:59 2024 GMT
Subject: CN=389048A191A394B6EE43D8F9737D97B3D6EC2B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:2c:52:ea:19:d8:62:6e:21:b2:3b:50:e4:
22:db:2f:89:b4:a3:54:09:c6:fe:7b:4d:05:b6:c2:
b1:66:54:42:cb:fb:0e:a7:8b:f3:c2:69:a4:a8:4d:
43:8d:3f:6e:a7:9d:36:47:87:8a:16:2f:65:8c:e4:
ab:99:b4:c1:9a:4d:f8:ca:de:d7:06:c1:0b:86:57:
eb:16:0d:6e:5b:e9:56:4c:40:8f:d3:c9:2f:73:dd:
90:13:a0:84:7d:0e:05:1d:8d:d8:7d:b4:8e:39:8c:
10:34:1f:3f:15:8f:bf:e3:34:6b:89:ea:90:c6:ec:
9a:6c:87:7f:f5:51:84:0b:8d:11:7e:59:cc:8e:7d:
4d:23:a1:00:d2:4f:8b:b5:4a:92:ff:c6:88:4e:bb:
fc:28:0e:84:61:14:46:2e:39:69:72:7f:b9:12:94:
d8:68:df:77:bb:a1:d6:6d:d3:bb:41:e7:fd:56:b0:
53:2b:9d:ab:57:4d:c6:be:bd:8b:2e:bb:dd:44:8a:
66:6d:9b:af:7b:7d:f8:2f:5d:30:ff:7b:b2:80:ed:
d1:ab:1a:ba:ee:14:cc:15:d8:b3:e5:1d:46:f4:d9:
e7:37:9e:7f:66:96:36:7c:ff:de:29:b2:31:36:ac:
2f:1f:28:35:77:6d:ea:ba:af:d0:7f:39:9b:6c:50:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:90:48:A1:91:A3:94:B6:EE:43:D8:F9:73:7D:97:B3:D6:EC:2B:3C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234372e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.247.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6f:c5:74:7e:1e:2f:61:29:d6:eb:5a:1d:54:7a:f0:c4:42:
70:cc:6e:30:4e:16:3c:64:cf:d0:01:85:ce:4f:ea:d5:38:a9:
ed:09:a7:27:14:26:de:62:ba:85:d2:15:c4:2f:0d:b7:8f:02:
34:98:0c:62:f2:59:0d:b4:2c:c6:a6:2d:be:a1:91:30:e1:b0:
00:23:a0:26:1e:49:39:7c:e2:85:a3:df:19:84:69:b4:91:25:
29:70:90:d5:2e:f9:c7:49:4d:67:2f:5e:3b:56:3a:94:ba:33:
43:8a:3e:7e:3f:66:86:13:2b:97:6c:31:06:e7:71:0b:7e:74:
9c:c9:13:7f:13:5d:db:eb:2f:f7:86:38:a0:03:d8:46:a7:d0:
07:cc:cb:28:17:9c:36:20:83:aa:ab:b9:ad:bf:e0:41:85:92:
de:61:76:47:64:84:d4:c5:b3:d2:67:83:e6:72:c4:41:60:58:
87:76:e5:49:01:ff:e5:36:cd:08:27:5f:fd:49:68:47:e7:c5:
b2:ad:ea:e4:bd:09:bb:09:ea:75:8d:0b:fc:d4:53:ee:a9:07:
17:d5:16:34:aa:a3:78:db:57:4b:70:d1:8b:a4:a1:53:50:fd:
11:25:fd:d2:07:09:64:db:a9:6f:1f:55:9b:14:7c:83:80:0e:
3a:26:fd:54
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUH8Kb0J+JSdNyqBY8FkbJ+j6t4e8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA0MjUxNzUyNTlaFw0yNDA0MjMxNzU3NTlaMDMxMTAvBgNV
BAMTKDM4OTA0OEExOTFBMzk0QjZFRTQzRDhGOTczN0Q5N0IzRDZFQzJCM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnCxS6hnYYm4hsjtQ5CLbL4m0
o1QJxv57TQW2wrFmVELL+w6ni/PCaaSoTUONP26nnTZHh4oWL2WM5KuZtMGaTfjK
3tcGwQuGV+sWDW5b6VZMQI/TyS9z3ZAToIR9DgUdjdh9tI45jBA0Hz8Vj7/jNGuJ
6pDG7Jpsh3/1UYQLjRF+WcyOfU0joQDST4u1SpL/xohOu/woDoRhFEYuOWlyf7kS
lNho33e7odZt07tB5/1WsFMrnatXTca+vYsuu91EimZtm697ffgvXTD/e7KA7dGr
GrruFMwV2LPlHUb02ec3nn9mljZ8/94psjE2rC8fKDV3beq6r9B/OZtsUEXBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUOJBIoZGjlLbuQ9j5c32Xs9bsKzwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzEzOTMwMmUzMjM0
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzMzNjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Vb73MA0GCSqGSIb3DQEBCwUAA4IBAQApb8V0fh4vYSnW61odVHrwxEJwzG4wThY8
ZM/QAYXOT+rVOKntCacnFCbeYrqF0hXELw23jwI0mAxi8lkNtCzGpi2+oZEw4bAA
I6AmHkk5fOKFo98ZhGm0kSUpcJDVLvnHSU1nL147VjqUujNDij5+P2aGEyuXbDEG
53ELfnScyRN/E13b6y/3hjigA9hGp9AHzMsoF5w2IIOqq7mtv+BBhZLeYXZHZITU
xbPSZ4PmcsRBYFiHduVJAf/lNs0IJ1/9SWhH58WyrerkvQm7Cep1jQv81FPuqQcX
1RY0qqN421dLcNGLpKFTUP0RJf3SBwlk26lvH1WbFHyDgA46Jv1U
-----END CERTIFICATE-----
Generated at Sun Nov 26 20:57:28 2023 by rpki-client on console-fra.rpki-client.org