Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e20383334.roa
File: 3139342e3135302e3231302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OTcEu13PJGEpbDKVnFroVje6m0c3WURYYDwTDby7RLQ=
Subject key identifier: 96:F6:77:47:7C:D7:E7:CE:A7:55:7C:51:B7:DC:70:53:9D:C4:60:E5
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 205DE6C31F4661A444CB10A5DB32BF5A4CE73465
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e20383334.roa
Signing time: Mon 23 Oct 2023 09:41:41 +0000
ROA not before: Mon 23 Oct 2023 09:36:41 +0000
ROA not after: Mon 21 Oct 2024 09:41:41 +0000
asID: 834
IP address blocks: 194.150.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:5d:e6:c3:1f:46:61:a4:44:cb:10:a5:db:32:bf:5a:4c:e7:34:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:41 2023 GMT
Not After : Oct 21 09:41:41 2024 GMT
Subject: CN=96F677477CD7E7CEA7557C51B7DC70539DC460E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:6c:0b:12:6b:25:67:e8:54:b8:e6:50:9d:
40:9c:6d:13:4e:b4:c6:70:da:5b:cb:31:5a:80:0b:
53:1f:7a:d3:98:57:27:54:28:98:05:07:4d:1c:54:
3c:43:85:94:64:23:30:12:3f:22:c7:c9:58:54:d8:
69:64:16:62:58:fc:96:7e:7a:26:58:ad:39:43:56:
dc:dd:47:05:15:a5:13:41:91:f8:61:b3:58:79:23:
5f:0b:59:88:37:5f:4f:5c:fb:37:9d:74:f8:2a:4a:
fb:82:9e:29:4e:73:4f:0e:a3:1d:34:4b:42:1f:83:
86:b0:7f:17:bc:fc:4e:70:8c:a3:8c:70:b4:6c:ad:
ff:56:2a:b1:bf:3c:92:eb:f9:4a:5d:25:3c:b4:e7:
ea:c4:6e:1b:8a:fd:1f:7f:b0:71:3e:4b:c2:67:ff:
09:6b:dd:4d:99:33:51:3c:5d:d3:d3:0e:96:78:7b:
60:5a:de:74:b4:18:41:fc:7c:80:c5:4e:02:8c:1b:
ef:87:55:6c:0a:f5:a1:20:e9:1e:8f:57:b6:4e:4d:
53:02:22:98:45:4a:40:fa:a6:e3:c0:47:bb:b5:0e:
7a:7d:48:7f:ce:c5:56:bd:bb:77:ca:09:0b:8f:38:
5e:76:99:6f:fe:1e:65:29:c7:f6:32:79:66:5b:6f:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F6:77:47:7C:D7:E7:CE:A7:55:7C:51:B7:DC:70:53:9D:C4:60:E5
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:ad:3b:8e:5e:6c:8a:9a:c1:68:3d:e0:6e:0b:0f:8c:f0:d1:
ee:93:64:3f:1d:d3:bf:bc:61:db:9c:1b:1e:3d:0b:a9:06:82:
5e:6d:2a:57:f5:47:80:f0:83:b3:33:4f:32:c1:1e:7b:0d:7a:
02:0d:b4:32:23:4b:02:30:33:cc:cf:1a:bf:f9:67:90:e5:6d:
44:0f:4f:9d:43:84:20:9e:e6:f9:7e:20:1b:5e:99:19:a2:34:
36:3d:a1:fc:7b:f9:23:ca:d6:0c:d1:b2:a8:1d:f7:43:dd:f9:
26:cd:74:c7:36:d7:c8:d3:de:53:53:c1:b8:a9:bc:ec:41:d5:
b6:24:a3:61:26:cb:c4:18:be:2c:77:49:1d:30:50:f7:b8:10:
5e:f6:b0:27:5a:01:82:59:38:b3:eb:3f:0e:05:33:80:65:f6:
57:57:0b:3d:38:78:ed:ba:ed:7c:81:76:18:c1:ef:90:b3:73:
b7:8d:09:80:f1:5d:a3:30:80:af:d6:9e:d8:dd:e4:8c:79:df:
4c:00:76:eb:02:d5:5e:27:0e:89:f4:d3:82:02:7c:ca:bb:b6:
ef:e8:1d:78:1d:09:e1:94:3d:1a:7a:52:ae:3d:0f:09:9a:61:
30:b2:ed:7d:c4:25:60:f3:85:0b:fc:06:0b:f2:a3:84:1c:2c:
c9:d6:32:95
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 17 11:53:51 2023 by rpki-client on console-fra.rpki-client.org