Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131302e302f32332d3233203d3e2030.roa
File: 3135362e36372e3131302e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: tx1OV29V5v0Pgb/a5oqraJ+2ey9+ROTQrXsHfRRVtPI=
Subject key identifier: D2:E7:AF:F9:7B:9E:76:AB:1F:F0:BD:19:2E:0D:45:F9:7A:70:BE:48
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 355B4A1BC70FA2E24D3CDCAF0AF17230E3391BA1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131302e302f32332d3233203d3e2030.roa
Signing time: Fri 12 Apr 2024 08:50:55 +0000
ROA not before: Fri 12 Apr 2024 08:45:55 +0000
ROA not after: Fri 11 Apr 2025 08:50:55 +0000
asID: 0
IP address blocks: 156.67.110.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 25 Apr 2024 14:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5b:4a:1b:c7:0f:a2:e2:4d:3c:dc:af:0a:f1:72:30:e3:39:1b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 12 08:45:55 2024 GMT
Not After : Apr 11 08:50:55 2025 GMT
Subject: CN=D2E7AFF97B9E76AB1FF0BD192E0D45F97A70BE48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:5f:a4:15:a1:7e:84:4f:c5:50:4e:2f:b2:
b0:2c:6d:4f:7b:d0:38:e9:c7:44:da:b1:47:a0:5a:
b3:7e:a6:db:ee:15:69:2d:68:cb:3b:61:cd:4f:a5:
fd:7e:ec:be:5b:c5:13:60:a2:29:cd:ed:15:94:e0:
84:89:0d:fd:ca:fe:29:3d:d4:93:7d:1d:09:82:1a:
69:a5:e8:5f:52:36:cb:ab:f2:8d:6a:f8:de:c2:5d:
09:3c:89:7a:76:b4:a7:6a:9a:1b:eb:72:fd:85:09:
e9:a5:01:5d:5d:6e:dc:9e:07:ca:d0:0b:a3:28:39:
d5:15:a7:25:65:cf:47:98:d8:dc:81:23:42:fb:f8:
e8:78:8b:de:34:13:83:a4:7f:2a:40:26:76:27:3a:
19:0f:69:f8:1b:6e:5a:37:44:1a:66:6d:1c:cd:25:
4e:9f:05:10:4c:e4:4d:22:dc:21:c0:90:b6:ce:5b:
b2:db:5c:fe:56:69:96:d1:1a:3b:d1:24:4e:a6:8e:
44:53:be:cd:32:56:b3:56:cc:20:66:13:9f:67:be:
22:46:e5:a2:d4:5a:91:49:ca:21:14:82:a3:49:74:
e4:47:49:2c:2e:1f:b9:9c:71:7b:d0:00:19:23:33:
e7:cb:ca:63:f7:5b:fb:23:49:a8:e1:3e:12:ff:1e:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:AF:F9:7B:9E:76:AB:1F:F0:BD:19:2E:0D:45:F9:7A:70:BE:48
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131302e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.110.0/23
Signature Algorithm: sha256WithRSAEncryption
47:ab:5e:44:44:4f:62:38:76:de:49:7c:ad:30:b8:ad:d6:c7:
85:5e:c5:4c:e9:e3:cd:86:22:15:1a:11:8a:44:9c:68:3f:b6:
70:b6:7c:54:b5:96:8e:1d:92:ba:90:61:c0:f2:63:0a:c0:23:
db:1b:09:c2:fc:e5:2f:f8:a7:0d:d4:e9:d0:df:e4:9c:6f:76:
7a:b1:a8:bd:6e:d0:66:9c:4a:02:9c:11:42:c9:5f:46:b7:32:
8d:8d:de:22:89:48:14:14:e5:a5:70:c0:72:ad:96:c8:e3:99:
a7:a8:83:18:0b:25:93:cf:bc:61:35:97:83:61:66:46:3f:c7:
7b:01:ee:cf:2f:0d:c2:25:58:98:bb:f1:4b:87:3e:f4:10:e5:
74:fa:b1:99:09:83:12:34:e3:3d:8a:c6:17:92:c9:ae:5f:7b:
af:ac:7b:d5:00:a2:f2:1f:d4:f7:59:ba:87:d7:10:89:60:2f:
d7:27:ff:fa:67:cf:5b:5d:0b:4f:17:66:e8:20:fb:76:79:08:
56:92:ce:cf:27:19:de:67:4a:84:bc:38:55:2a:3e:6a:78:e5:
60:d2:ca:07:d2:14:86:5a:74:d5:46:4c:9a:70:d0:2e:c0:e7:
13:54:41:7a:ed:22:d6:4d:9a:19:03:bd:52:51:e3:6f:25:37:
c3:6a:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 18:15:31 2024 by rpki-client on console-ams.rpki-client.org