Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/3139352e3234352e3139382e302f32342d3234203d3e20383334.roa
File: 3139352e3234352e3139382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Z5xaVv+nUraxr94maxKTJmECg6xD+N+ZBXN4QUINCSk=
Subject key identifier: 49:0B:D2:E4:41:34:97:70:18:AF:71:BD:BA:31:8D:7B:DE:3E:9E:61
Certificate issuer: /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial: 1A6987D220474FEE951640DB6768849D5E46F370
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/3139352e3234352e3139382e302f32342d3234203d3e20383334.roa
Signing time: Tue 19 Dec 2023 10:20:59 +0000
ROA not before: Tue 19 Dec 2023 10:15:59 +0000
ROA not after: Tue 17 Dec 2024 10:20:59 +0000
asID: 834
IP address blocks: 195.245.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:69:87:d2:20:47:4f:ee:95:16:40:db:67:68:84:9d:5e:46:f3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Validity
Not Before: Dec 19 10:15:59 2023 GMT
Not After : Dec 17 10:20:59 2024 GMT
Subject: CN=490BD2E44134977018AF71BDBA318D7BDE3E9E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:d2:54:7f:da:80:ce:70:a8:14:0c:7a:18:
e9:02:2e:22:78:e9:62:9f:2e:e9:2f:79:bd:c2:27:
c0:cc:7f:f9:ca:a8:8c:5c:63:4d:da:c6:cb:cd:79:
d9:52:ca:f9:2c:19:cf:2d:b5:ad:93:09:1f:65:c8:
6a:7a:ff:da:97:38:54:2c:fd:f8:b0:95:19:5d:b5:
f3:2a:2f:3c:b7:5f:35:81:c0:b5:65:b8:bb:a0:8d:
c1:4f:4a:65:ad:f5:48:56:82:13:9f:7e:ec:09:9f:
d2:8a:39:89:1b:67:5c:7f:68:57:6a:06:9e:c7:b9:
40:bd:0e:0e:0f:c4:57:6f:82:94:37:fb:3e:04:9b:
c3:7f:e2:da:4b:c0:2d:07:49:3b:0e:1e:4f:16:dc:
cf:5b:ae:b4:6a:b0:2b:49:f7:9b:9f:b3:53:c1:72:
cd:41:bf:37:b9:36:0c:36:76:08:16:c1:9a:e2:70:
b1:f6:23:47:a4:f9:ae:e5:0a:da:91:ab:50:e9:65:
5c:5d:76:1d:51:21:bc:ff:96:e3:a4:8e:65:b8:1b:
8d:3a:c6:40:16:13:e9:f1:8c:d9:a2:17:db:c6:cc:
99:da:b7:b6:e5:84:4e:4b:78:1b:be:cd:dd:7d:d2:
59:49:5c:54:fc:86:65:f5:92:5e:16:30:7e:48:68:
73:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:D2:E4:41:34:97:70:18:AF:71:BD:BA:31:8D:7B:DE:3E:9E:61
X509v3 Authority Key Identifier:
keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/3139352e3234352e3139382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.198.0/24
Signature Algorithm: sha256WithRSAEncryption
52:61:2b:0b:dd:d0:a5:7e:5b:71:25:e4:60:c1:c4:1e:4f:cf:
c6:61:79:cf:6c:a9:38:ce:4d:8e:d4:c1:cd:78:da:f6:c2:a6:
3a:47:d3:f1:78:27:ab:29:07:dc:fa:c1:23:54:11:45:71:30:
92:75:05:7d:9f:26:ff:34:df:09:5f:65:e6:af:fc:2f:eb:0e:
d3:e2:a3:2b:f0:bd:9b:ce:22:98:65:34:9c:e5:3f:c9:d9:49:
90:b0:68:e4:86:2b:bc:a7:5c:46:5e:05:59:bf:ab:31:08:b9:
93:07:12:94:97:e6:ad:4c:a7:de:74:67:28:29:c0:5f:20:22:
02:f4:5c:b3:3f:7e:80:f7:d8:dd:bd:e0:3c:ca:70:78:3c:a5:
7a:ef:6d:88:f2:d1:49:c3:e5:26:b6:68:39:7e:d0:21:d1:d8:
b0:c2:c2:a7:8b:07:fc:df:1d:5f:32:03:9e:58:af:3e:b0:2d:
a2:a3:e8:3d:35:ce:38:c6:75:21:b4:20:4e:6b:0e:47:c2:64:
d1:6b:c7:90:6c:c0:3f:cc:cd:fe:52:97:c4:34:3a:d0:02:3b:
3b:b2:11:04:24:bb:72:38:8f:3d:77:e5:14:36:89:55:d9:03:
f8:03:2f:40:d6:9f:6d:72:75:5d:a6:5c:07:db:f5:ee:e7:20:
1a:50:22:c1
-----BEGIN CERTIFICATE-----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Generated at Tue Dec 19 11:18:56 2023 by rpki-client on console-ams.rpki-client.org