Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3135392e302f32342d3234203d3e20323037383431.roa
File: 3139332e35372e3135392e302f32342d3234203d3e20323037383431.roa (raw, json)
Hash identifier: MkfoSZosoRmPK9MgS4+1h/hpfslq/Dt+SFOTQZWYb+g=
Subject key identifier: 0A:BF:21:3F:08:92:22:95:0E:9E:F2:93:FB:76:56:4A:FA:01:FF:93
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 6EC99ECC2811D395727C1894330120F4D660A128
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3135392e302f32342d3234203d3e20323037383431.roa
Signing time: Tue 10 Oct 2023 15:16:51 +0000
ROA not before: Tue 10 Oct 2023 15:11:51 +0000
ROA not after: Tue 08 Oct 2024 15:16:51 +0000
asID: 207841
IP address blocks: 193.57.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c9:9e:cc:28:11:d3:95:72:7c:18:94:33:01:20:f4:d6:60:a1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:11:51 2023 GMT
Not After : Oct 8 15:16:51 2024 GMT
Subject: CN=0ABF213F089222950E9EF293FB76564AFA01FF93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:4b:3a:6f:a3:f7:89:a9:c0:04:40:1d:97:
be:73:74:e0:c0:16:c4:f2:2b:cc:ca:af:d9:51:4a:
7d:6d:4d:a5:8d:1f:59:e0:19:90:5a:4c:fa:2f:a3:
da:56:af:5c:a0:f9:e0:b1:03:bc:83:96:78:cd:78:
d0:c0:ca:f3:0f:ac:a4:d2:72:f4:b4:b5:aa:5d:72:
64:24:15:ce:2c:b0:8d:fa:b7:39:eb:f8:8a:90:ca:
0f:c8:77:e8:fb:30:e7:ec:d9:30:36:d6:6e:0a:be:
b8:26:40:aa:66:96:18:f4:eb:39:dd:4b:43:aa:f5:
34:e3:0b:87:d4:94:32:84:4b:2d:b2:54:d9:1e:27:
b8:bd:7c:57:9f:4a:5e:86:f5:6c:14:b0:c0:67:db:
5e:bd:04:b8:98:53:00:e5:dd:6f:42:0a:e1:7f:be:
a1:2d:19:e1:b8:45:3b:3f:d9:df:66:b8:12:00:e3:
e0:f5:a0:1b:12:fb:88:e8:b9:3f:c3:72:fe:37:40:
34:3b:28:48:1e:ac:7b:be:e2:b7:6d:d2:eb:e5:78:
0a:d4:e6:b9:83:60:22:f5:90:f8:55:75:ea:5a:af:
7b:eb:ec:ab:5f:25:7a:6b:64:a3:ab:ba:64:97:f7:
12:61:61:eb:2a:c3:a6:53:9a:9c:c2:2b:bf:8d:af:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BF:21:3F:08:92:22:95:0E:9E:F2:93:FB:76:56:4A:FA:01:FF:93
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3135392e302f32342d3234203d3e20323037383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.159.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ad:f3:7c:43:67:d5:8f:34:9c:cd:bf:e3:9c:41:36:9a:1e:
85:93:35:d4:7a:82:11:d6:8f:a2:1f:a0:a6:0b:f0:27:09:ce:
d5:85:ad:0d:7d:73:e8:4b:5a:3e:7f:01:54:ba:cc:9d:d6:b7:
ef:1f:97:49:4a:54:5e:c5:27:e5:64:8a:e6:97:e7:fa:5b:9d:
20:c7:b8:e6:80:6b:ce:52:37:f6:88:c1:6f:54:bd:9c:00:cb:
90:11:c8:50:50:e2:14:7e:e7:63:44:06:3f:3f:d2:f6:23:a6:
6d:66:a8:a4:75:89:e3:32:37:ff:3e:d2:16:f2:39:7d:f3:8d:
09:b6:c9:42:2d:c7:26:3b:5f:7c:f5:06:22:35:48:52:9c:72:
a5:01:eb:fa:fe:67:ac:1c:9b:0e:ff:6f:a4:32:6e:a9:41:69:
b7:e5:98:f7:c2:5e:91:df:85:dc:b1:44:3b:8b:a3:a6:fa:9c:
1b:e1:ac:71:59:8f:fe:4e:ba:0a:48:2c:32:33:6e:51:26:74:
79:72:35:48:84:a5:7a:3d:cd:a9:5c:3b:bc:b4:3c:2c:c0:da:
fc:26:d0:75:65:da:64:e6:58:39:e8:ae:a9:2b:bf:7a:6d:bd:
11:46:80:4f:03:00:ee:ed:88:c0:3c:06:54:e0:9e:bf:d2:21:
ab:e1:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 18:17:03 2024 by rpki-client on console-fra.rpki-client.org