Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20383334.roa
File: 352e3138312e3137362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: YY8DVShVYyo5cZ1PibFlDIDU+iTf5qUl/fyI8mrIo3w=
Subject key identifier: D0:61:4B:67:12:69:1C:35:7F:43:B2:2B:A1:04:49:A8:6E:60:97:44
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0741681D564F65E9FA4710374DEAA0039187ADAA
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20383334.roa
Signing time: Fri 01 Mar 2024 00:06:10 +0000
ROA not before: Fri 01 Mar 2024 00:01:10 +0000
ROA not after: Fri 28 Feb 2025 00:06:10 +0000
asID: 834
IP address blocks: 5.181.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 14:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:41:68:1d:56:4f:65:e9:fa:47:10:37:4d:ea:a0:03:91:87:ad:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 1 00:01:10 2024 GMT
Not After : Feb 28 00:06:10 2025 GMT
Subject: CN=D0614B6712691C357F43B22BA10449A86E609744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:7e:f9:84:7a:eb:ca:4e:18:85:c0:8a:10:
61:a6:b7:fb:f4:6a:41:3d:11:78:9f:47:e6:7b:45:
e8:04:e4:3a:6e:63:d4:e4:27:57:be:14:f4:be:5b:
c6:c9:68:b9:a0:ac:60:ee:6d:2e:37:43:52:78:13:
79:88:35:bd:bb:01:e8:20:07:df:71:a9:b9:8a:23:
95:a6:70:35:25:db:09:20:ad:26:4f:19:60:ea:34:
8c:10:22:78:a6:e6:87:87:18:3c:39:77:05:ac:c2:
fa:85:dc:cb:3b:c4:93:dc:4d:bb:86:26:fc:f7:71:
36:5e:ab:f1:3c:01:8a:1d:dd:55:cc:13:ee:97:d2:
72:b0:55:54:21:e7:ae:f3:a0:72:5a:3b:d6:02:ce:
76:24:69:b1:9e:d0:92:fb:9a:da:7b:80:56:d6:a8:
07:8f:03:ea:9d:ac:66:e5:b6:89:67:59:cf:f4:40:
a9:07:9d:29:5d:70:47:58:87:3b:a8:22:13:5e:83:
40:f3:d6:18:c0:e6:7a:cc:0d:12:1d:e0:ca:08:a5:
a7:23:f4:59:68:54:f5:15:c1:20:0a:7b:0a:b5:61:
12:22:58:59:f9:8f:73:fc:a4:a7:45:e2:c9:9e:10:
fb:16:6e:f6:4e:82:fe:05:69:74:3a:b5:74:c5:7a:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:61:4B:67:12:69:1C:35:7F:43:B2:2B:A1:04:49:A8:6E:60:97:44
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:32:1d:d8:94:b1:db:52:03:7c:75:37:2b:49:e3:22:f0:b3:
14:cc:29:73:fc:2e:d9:4f:9b:c9:b6:36:0c:85:e7:71:0d:d2:
a5:67:92:34:67:32:1f:cd:9b:f0:c8:52:9e:95:e4:34:52:cc:
bd:60:81:5a:ca:c5:d8:cd:24:ea:4d:99:e0:91:31:29:77:f2:
81:92:b1:e7:8c:25:2f:ee:5c:e0:f3:42:d1:11:8a:9f:70:d0:
4b:4f:52:2b:f4:e2:bb:0a:3d:44:f3:d1:dd:7c:fc:f4:83:e2:
10:08:03:d1:b1:13:5e:16:7a:16:e2:5c:64:59:32:ee:5f:be:
51:0f:c9:2f:a9:ce:16:b2:ed:9a:74:e3:5e:8e:a2:28:22:8d:
24:12:d8:9a:e6:2e:1d:92:7a:ca:31:46:c5:0a:42:57:d7:a4:
b8:f5:17:e4:73:a9:ac:22:0e:e9:b0:36:e2:13:a4:f7:e3:b8:
34:62:1b:dc:f2:e8:53:19:76:b2:3c:9d:f2:ef:d1:62:7e:83:
c5:79:89:0e:57:2e:ba:39:4f:14:29:bd:4e:73:5a:56:d3:ac:
70:92:b1:9f:9a:11:ff:87:09:38:c0:97:99:48:f6:c8:d2:2e:
47:9b:18:da:47:f6:6f:ba:4b:a3:7b:09:99:2f:89:0c:ef:b0:
0d:03:c0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org