Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3136382e302f32342d3234203d3e20323037383431.roa
File: 3139332e35372e3136382e302f32342d3234203d3e20323037383431.roa (raw, json)
Hash identifier: gCYUECWMIWUsU+Ml/Ozll24Og8Hw+j8Wtgkks0ClFoA=
Subject key identifier: 4C:16:8A:E3:BA:5A:AA:B0:34:C3:85:97:B7:83:02:A6:A3:DB:F5:A3
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 5056E48D983DB6DA1B089C2D2FD96AB56C48C4E0
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3136382e302f32342d3234203d3e20323037383431.roa
Signing time: Tue 10 Oct 2023 15:17:09 +0000
ROA not before: Tue 10 Oct 2023 15:12:09 +0000
ROA not after: Tue 08 Oct 2024 15:17:09 +0000
asID: 207841
IP address blocks: 193.57.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:56:e4:8d:98:3d:b6:da:1b:08:9c:2d:2f:d9:6a:b5:6c:48:c4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:12:09 2023 GMT
Not After : Oct 8 15:17:09 2024 GMT
Subject: CN=4C168AE3BA5AAAB034C38597B78302A6A3DBF5A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:9d:ce:5a:b5:2e:86:b8:52:05:69:50:5c:
a9:6f:ff:d0:77:2e:6a:60:c8:8d:e9:9e:ca:5e:96:
de:27:74:0a:7a:42:ed:04:dc:39:44:b7:bb:e9:f5:
98:76:45:db:e2:47:92:90:2a:7e:79:94:62:1f:84:
46:48:34:6b:c5:7c:e8:67:a2:9d:4f:05:e5:05:69:
db:6d:7b:54:e4:e8:4a:6c:fd:af:73:39:e6:3b:a3:
be:f0:0b:5a:0a:02:1d:7a:db:be:88:64:7e:b1:9a:
ac:39:5a:81:c1:42:82:0a:43:76:e1:f8:9d:9d:b5:
0f:07:d9:d6:20:97:a3:52:b9:3c:b1:55:5a:14:83:
83:ee:2c:39:7a:c2:66:a5:09:6f:13:85:32:78:0e:
f7:4c:22:52:b4:df:81:be:2c:26:9a:3f:da:e3:5d:
62:f2:25:8d:70:88:f9:ba:d7:02:28:e1:6f:27:fa:
e6:30:b9:b3:03:77:fd:22:f9:89:4e:fa:ce:7e:1c:
fb:04:a4:30:62:c1:0c:3f:8b:86:58:99:05:d5:49:
53:fa:68:94:51:1e:64:30:46:ba:36:da:ec:d0:6e:
f8:d0:5b:ec:a7:de:d4:ef:c2:74:0d:62:6d:74:4b:
cf:85:4c:25:ec:9a:8a:15:e0:b1:d1:91:e0:c4:38:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:16:8A:E3:BA:5A:AA:B0:34:C3:85:97:B7:83:02:A6:A3:DB:F5:A3
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3136382e302f32342d3234203d3e20323037383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.168.0/24
Signature Algorithm: sha256WithRSAEncryption
35:de:59:cc:c4:1a:79:81:8a:09:56:62:aa:ea:06:e4:13:43:
cd:1f:3b:c3:46:de:63:c8:8c:a0:7a:fe:06:0e:e5:49:ef:fd:
7e:58:ae:73:52:55:12:97:4e:99:34:41:d0:23:4c:9e:58:2e:
9c:b4:9e:36:3f:ae:89:81:8e:be:7b:ca:dc:e3:58:43:8e:7f:
c5:a3:c2:83:a9:92:10:37:0f:74:fb:03:52:3d:bc:45:d5:e4:
24:f6:2a:8b:8e:8a:23:59:7f:ff:15:f1:28:b5:8f:b3:79:ce:
fc:65:ce:97:ce:e9:5f:09:61:b9:e6:61:79:69:79:c8:4d:36:
4c:23:05:5a:37:dc:94:12:7b:ef:bd:11:2b:f3:de:1c:9d:2a:
57:f5:ac:fe:84:3c:3b:3c:7e:e5:f3:8a:3c:61:f5:92:99:c7:
04:e5:2b:b9:87:22:3b:16:96:4a:4c:71:06:1c:75:bd:8c:b3:
17:dc:35:41:b7:42:50:cb:53:af:05:28:0f:26:32:a7:6b:a8:
2d:c4:5b:4e:9f:7c:69:e5:3f:5c:8b:fd:d3:d2:25:bb:2d:6f:
d7:40:5c:39:7d:62:e0:fc:63:ce:e4:6a:0c:94:16:4c:da:d7:
e5:e2:73:14:f8:42:d0:56:51:00:43:e3:1e:dc:31:fb:6e:4e:
84:72:e8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org