Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/3139352e3234352e3139382e302f32342d3234203d3e203631333137.roa
File: 3139352e3234352e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: vgKX/qgMOZAqMqhUYxwRKS7Ky6zSreWHcYSJ4ZOb604=
Subject key identifier: E7:C3:7E:FE:0F:26:C8:EA:C6:E6:60:05:64:3B:1A:38:5E:7F:EC:E9
Certificate issuer: /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial: 17D9D93883D47F8949A260AAF5F1193A45A2B45B
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/3139352e3234352e3139382e302f32342d3234203d3e203631333137.roa
Signing time: Wed 15 Nov 2023 14:55:46 +0000
ROA not before: Wed 15 Nov 2023 14:50:46 +0000
ROA not after: Wed 13 Nov 2024 14:55:46 +0000
asID: 61317
IP address blocks: 195.245.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d9:d9:38:83:d4:7f:89:49:a2:60:aa:f5:f1:19:3a:45:a2:b4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Validity
Not Before: Nov 15 14:50:46 2023 GMT
Not After : Nov 13 14:55:46 2024 GMT
Subject: CN=E7C37EFE0F26C8EAC6E66005643B1A385E7FECE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:4c:53:ad:32:33:56:e6:52:f9:e1:30:ac:
0c:75:99:7e:69:7f:c2:e6:90:45:ba:1e:b2:83:52:
57:bb:34:07:e6:e7:d3:11:73:20:3e:63:b5:3f:2d:
c9:0e:02:a3:2b:06:66:85:52:72:17:c7:19:3c:61:
30:e8:5d:3a:c2:6a:6f:ba:dd:a4:01:3c:30:7e:1f:
86:86:3b:54:03:1e:4c:9f:97:d9:fc:fb:9c:65:74:
8f:45:17:6b:d8:33:38:db:a7:b6:5c:44:fd:73:84:
38:e9:e3:62:37:0a:44:13:fa:64:bc:45:7c:94:33:
59:39:59:bb:b7:4d:41:d1:04:18:2c:c2:96:dc:b2:
04:0d:6f:d7:07:e2:c8:32:57:67:5f:5c:ad:9c:4c:
bf:1e:c5:96:a6:33:8e:e4:1b:e9:fb:23:3a:fe:3e:
ad:99:4d:19:6d:2d:93:cd:cd:f4:aa:f2:f6:03:43:
8c:57:20:ce:7c:cb:ab:6a:fd:f1:67:43:91:42:ea:
59:06:94:93:9e:5a:a6:39:29:80:2b:11:ac:0f:68:
f4:cb:dc:0e:bf:2a:d1:75:44:c3:90:7b:3d:6a:7d:
e3:96:5b:16:c9:f9:e1:3c:94:b9:f8:b2:14:11:2a:
a4:de:5d:c4:24:af:b9:a7:f3:8c:a4:bd:a8:d5:5c:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:7E:FE:0F:26:C8:EA:C6:E6:60:05:64:3B:1A:38:5E:7F:EC:E9
X509v3 Authority Key Identifier:
keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/3139352e3234352e3139382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.198.0/24
Signature Algorithm: sha256WithRSAEncryption
39:84:46:3e:ec:67:ba:a8:6a:bd:c2:31:e8:ba:b9:15:88:1b:
0d:6a:8f:6b:a6:54:d6:46:3c:40:3e:7a:1c:9e:a5:9d:b8:51:
20:3e:89:60:ae:32:38:84:1c:43:38:ea:f2:df:fd:44:ff:c7:
7e:39:6c:75:04:80:84:59:8e:77:0a:d9:76:be:96:fe:7b:ea:
9f:38:04:df:17:d7:5d:b1:a4:31:04:6b:2b:51:1c:81:26:2e:
2d:33:fc:c8:38:92:2f:dc:6b:b7:78:1a:6a:fe:dd:64:59:96:
2d:42:33:0e:c9:e0:d7:85:65:b3:3c:08:9d:ec:94:80:e5:f7:
72:5f:07:be:73:2c:c2:53:44:8e:cf:e2:b2:36:4d:d3:d2:d7:
c2:22:bb:cb:8a:05:5e:d1:54:72:6e:aa:1b:eb:f9:fb:2a:85:
3d:e8:91:34:06:39:48:61:46:89:0b:6e:26:01:6c:96:82:39:
43:86:b9:5d:0f:7f:f8:ac:a1:4b:33:0b:62:dd:75:fb:3e:f1:
0d:21:89:01:78:5a:d9:be:db:01:b5:67:47:54:3b:27:43:e9:
08:55:91:b9:03:4b:ac:f2:c9:49:4c:fa:31:5b:1a:cb:7a:ad:
c8:ea:29:27:62:3a:d7:c2:29:51:f1:c1:5d:7f:74:67:c1:44:
da:5c:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 10:42:54 2023 by rpki-client on console-ams.rpki-client.org