Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32332d3234203d3e20383334.roa
File: 3139342e33312e3139362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: ttRGOPIpaaEZ6O4gW8RLE7S4h7DzPBJP49BRElfWZwE=
Subject key identifier: 36:A6:34:CE:89:84:8E:77:E0:89:E5:90:64:3C:C8:46:4B:BA:0B:CC
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 65A0C59E76EBFFAE195C8A1B6317DAE1F753B28C
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32332d3234203d3e20383334.roa
Signing time: Sun 09 Jul 2023 06:00:05 +0000
ROA not before: Sun 09 Jul 2023 05:55:05 +0000
ROA not after: Sun 07 Jul 2024 06:00:05 +0000
asID: 834
IP address blocks: 194.31.196.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a0:c5:9e:76:eb:ff:ae:19:5c:8a:1b:63:17:da:e1:f7:53:b2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 9 05:55:05 2023 GMT
Not After : Jul 7 06:00:05 2024 GMT
Subject: CN=36A634CE89848E77E089E590643CC8464BBA0BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:8b:9d:62:0d:8c:e8:9a:f3:44:06:ae:ec:
f3:80:6a:fd:79:97:74:16:cb:7c:54:63:5d:59:98:
97:a3:0e:42:c7:eb:c1:4f:81:d3:eb:40:36:87:a8:
9f:06:0f:c4:8d:cf:4f:46:4b:a4:4e:cc:af:fc:1e:
a6:dc:c8:5c:ba:42:77:9a:a5:0c:b5:30:9f:b1:62:
bb:14:53:00:29:df:f2:a7:b7:87:e2:e0:a3:e6:0d:
ba:05:10:b2:01:8e:dc:95:ac:e4:ff:24:53:3b:97:
19:74:85:5e:58:fd:02:97:de:5e:00:28:05:08:30:
72:1d:e3:40:f8:9d:84:ad:5a:7a:71:7d:aa:18:2e:
e7:46:94:f9:dd:0f:3f:e8:d3:56:2e:10:e6:6a:d4:
de:d1:2c:9c:3a:d0:43:97:8b:0a:7d:31:a7:f5:bc:
81:ce:d8:bf:9d:3a:40:ba:40:41:c8:e0:74:c8:07:
ff:78:4d:00:01:cc:35:77:1e:7a:a3:11:5a:f1:59:
45:9c:10:2e:32:bf:d6:e3:ab:90:bf:53:1f:4d:02:
7f:5d:92:3b:de:ea:4d:b1:cd:6d:8c:b3:1a:3e:9f:
56:28:36:35:4f:f0:1c:13:d1:87:64:ee:3b:cb:ce:
be:1c:f6:8c:e8:29:97:25:2a:96:f0:39:87:81:46:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A6:34:CE:89:84:8E:77:E0:89:E5:90:64:3C:C8:46:4B:BA:0B:CC
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
48:3a:70:b0:79:fd:6d:36:f8:dd:82:98:1e:98:52:c2:fc:9d:
99:4f:f5:ad:84:72:e6:0a:5c:62:79:8e:95:92:4b:2d:ed:11:
99:7b:ec:59:27:ef:14:40:ff:4f:ee:45:b9:3a:1b:58:4a:8b:
eb:a5:5a:98:0e:ae:93:d0:5a:13:a5:aa:16:72:40:c0:69:88:
04:a4:2a:e1:30:a4:cc:bc:40:b8:ad:63:51:53:ce:80:50:2e:
2c:a6:2e:8b:6b:7c:b6:00:46:3d:02:ac:b9:b8:06:92:38:a2:
9c:d4:d0:8f:6f:57:a0:22:d7:1c:e5:c4:f7:8b:9a:ea:71:c4:
08:04:07:6d:89:3a:59:0c:fc:ac:c1:94:1c:4e:3b:3d:b6:fa:
e5:ef:2b:c3:40:12:52:02:99:c5:38:2f:2e:dd:2c:c3:ba:27:
20:3c:14:7d:5c:89:ce:0e:4e:a4:1d:83:0d:1c:b4:fb:9a:4a:
54:6f:d3:8c:d5:d8:81:30:a8:49:41:2e:3e:e6:ab:cf:e2:40:
bf:7a:86:37:9a:89:52:e0:78:74:08:82:f8:44:99:4f:f5:54:
42:ca:c6:38:e4:0c:7b:29:1a:ae:86:65:c1:5d:1f:b0:fc:88:
16:41:c5:66:12:ea:b9:9b:05:a9:d3:1d:74:03:e5:d8:93:d0:
2b:dd:3a:1f
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 26 07:38:53 2023 by rpki-client on console-fra.rpki-client.org