Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230332e302f32342d3234203d3e20383334.roa
File: 3138352e3232392e3230332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AmVYiaxZJwr+sC3MXZ5soFHjP5C5jXVO4mm+/LFqE6M=
Subject key identifier: EC:59:D0:26:80:CD:FB:FA:A6:05:CA:C9:52:26:AB:DD:4E:B4:F8:42
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 747793214837608294E424F54D1B85063F056FE6
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230332e302f32342d3234203d3e20383334.roa
Signing time: Mon 11 Sep 2023 00:00:06 +0000
ROA not before: Sun 10 Sep 2023 23:55:06 +0000
ROA not after: Mon 09 Sep 2024 00:00:06 +0000
asID: 834
IP address blocks: 185.229.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:77:93:21:48:37:60:82:94:e4:24:f5:4d:1b:85:06:3f:05:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Sep 10 23:55:06 2023 GMT
Not After : Sep 9 00:00:06 2024 GMT
Subject: CN=EC59D02680CDFBFAA605CAC95226ABDD4EB4F842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:0a:f1:a7:d8:67:23:a9:78:74:3f:ae:81:
d1:e1:50:25:1d:7f:b3:89:1c:3b:1f:72:c1:3d:5e:
6e:a6:19:c2:b7:2e:89:56:31:1a:15:d1:22:58:61:
1e:73:ee:5f:cf:e0:15:bf:f5:e5:9f:df:86:91:ba:
6b:2c:37:f6:d2:5c:37:5a:36:54:b7:23:08:16:0c:
02:de:eb:16:25:87:ca:10:bf:d1:6b:34:18:34:9e:
42:66:28:e1:15:9e:b0:88:ed:ce:c0:53:3e:d5:86:
a5:f4:08:db:a8:e4:7e:9b:3a:fc:5c:83:2e:fa:8a:
e5:67:a3:3d:d6:1b:e2:5f:ee:41:1e:be:db:a7:47:
9e:be:7a:9f:e6:27:ef:b7:9a:ac:86:61:63:fb:9a:
cf:df:36:78:55:c6:22:ac:95:b5:9d:80:29:17:e1:
28:1c:79:1f:9b:d3:f6:ff:d3:a5:24:7d:3a:ce:63:
44:69:13:da:27:b2:2f:16:c6:9b:7a:92:41:82:cf:
42:0f:01:6c:be:07:41:e4:2a:27:67:46:30:c0:ed:
39:be:78:78:ae:b4:26:c8:62:1f:11:7a:35:37:22:
9a:81:33:20:13:1e:94:37:90:85:2d:de:dd:51:dd:
56:9c:c1:72:95:e6:e1:bd:41:a8:67:db:87:4d:65:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:59:D0:26:80:CD:FB:FA:A6:05:CA:C9:52:26:AB:DD:4E:B4:F8:42
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.203.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:28:58:41:b9:4f:44:96:0c:b5:c3:3a:49:21:ed:ce:12:aa:
d8:3b:16:1b:88:f0:07:2f:0e:56:c2:45:ad:a8:5f:d0:1d:38:
a9:60:f3:15:06:2e:1a:58:d9:43:f7:42:c3:16:e1:21:e3:2a:
fd:20:62:7b:01:db:d2:b9:0a:ca:6d:75:3c:3a:49:5b:a4:4f:
22:a8:79:12:65:22:ce:88:9f:89:df:9c:b8:e5:a7:f5:ba:d8:
14:02:40:3d:51:8a:ad:aa:ed:01:d9:ac:27:2b:7d:59:70:b7:
bc:09:37:48:ba:df:22:31:49:95:6c:f1:9a:6a:0c:c5:ca:be:
fe:83:d8:99:80:01:59:95:f5:ab:9f:a4:01:fc:b3:6d:cb:1f:
eb:6b:95:df:fe:48:c2:86:46:9d:99:f7:bd:6f:d6:f8:7f:a8:
a6:dc:65:a3:fe:4c:1c:27:37:44:e9:f3:a6:ba:1b:37:52:3f:
98:02:78:a9:c2:81:11:4d:8c:db:b7:d7:2e:13:e4:ee:dc:af:
b9:5a:db:07:38:b9:91:01:16:51:7d:e2:c1:04:eb:a3:2c:7c:
4a:8f:fe:6b:75:49:e6:33:94:63:84:10:3c:2a:9c:ff:8a:df:
94:a5:c8:e6:2d:bb:4f:c4:c3:bf:d6:70:58:2c:47:6e:26:ad:
d5:10:39:e2
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdHeTIUg3YIKU5CT1TRuFBj8Fb+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yMzA5MTAyMzU1MDZaFw0yNDA5MDkwMDAwMDZaMDMxMTAvBgNV
BAMTKEVDNTlEMDI2ODBDREZCRkFBNjA1Q0FDOTUyMjZBQkRENEVCNEY4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8wrxp9hnI6l4dD+ugdHhUCUd
f7OJHDsfcsE9Xm6mGcK3LolWMRoV0SJYYR5z7l/P4BW/9eWf34aRumssN/bSXDda
NlS3IwgWDALe6xYlh8oQv9FrNBg0nkJmKOEVnrCI7c7AUz7VhqX0CNuo5H6bOvxc
gy76iuVnoz3WG+Jf7kEevtunR56+ep/mJ++3mqyGYWP7ms/fNnhVxiKslbWdgCkX
4SgceR+b0/b/06UkfTrOY0RpE9onsi8Wxpt6kkGCz0IPAWy+B0HkKidnRjDA7Tm+
eHiutCbIYh8RejU3IpqBMyATHpQ3kIUt3t1R3VacwXKV5uG9Qahn24dNZS/lAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU7FnQJoDN+/qmBcrJUiar3U60+EIwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjMyMzkyZTMy
MzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnl
yzANBgkqhkiG9w0BAQsFAAOCAQEAvyhYQblPRJYMtcM6SSHtzhKq2DsWG4jwBy8O
VsJFrahf0B04qWDzFQYuGljZQ/dCwxbhIeMq/SBiewHb0rkKym11PDpJW6RPIqh5
EmUizoifid+cuOWn9brYFAJAPVGKrartAdmsJyt9WXC3vAk3SLrfIjFJlWzxmmoM
xcq+/oPYmYABWZX1q5+kAfyzbcsf62uV3/5IwoZGnZn3vW/W+H+optxlo/5MHCc3
ROnzprobN1I/mAJ4qcKBEU2M27fXLhPk7tyvuVrbBzi5kQEWUX3iwQTroyx8So/+
a3VJ5jOUY4QQPCqc/4rflKXI5i27T8TDv9ZwWCxHbiat1RA54g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net