Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e203239383032.roa
File: 352e3138312e3138372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: NaBPTob6Gt/ZZcRtCpdVQ2+RzTeB9fTrYbtythmsYzY=
Subject key identifier: F9:F6:70:55:A3:34:FE:20:A5:6F:C9:AF:31:5F:F9:8F:E6:68:81:32
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6B3570F7D2FE6581FF200216035CC46E3AFC00C9
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e203239383032.roa
Signing time: Tue 14 Nov 2023 15:30:26 +0000
ROA not before: Tue 14 Nov 2023 15:25:26 +0000
ROA not after: Tue 12 Nov 2024 15:30:26 +0000
asID: 29802
IP address blocks: 5.181.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:35:70:f7:d2:fe:65:81:ff:20:02:16:03:5c:c4:6e:3a:fc:00:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Nov 14 15:25:26 2023 GMT
Not After : Nov 12 15:30:26 2024 GMT
Subject: CN=F9F67055A334FE20A56FC9AF315FF98FE6688132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:a2:14:08:66:63:78:e9:54:b4:29:20:d2:
c4:25:0b:14:a1:24:5e:08:21:84:56:3f:64:e3:78:
c6:d7:2e:b5:dd:4e:74:a7:cf:3c:17:37:46:df:75:
25:89:52:14:03:d2:30:5f:11:65:46:ee:86:0e:fd:
de:81:f2:a5:25:e2:8e:21:8b:8b:28:24:2e:83:fd:
50:15:2a:f1:83:41:57:3b:d5:2d:ed:d2:56:ef:a1:
72:01:fb:11:6d:96:2f:91:8c:d5:ef:49:80:14:21:
01:7b:60:46:34:39:6c:81:57:ec:16:e1:7e:26:1e:
16:b2:16:b9:75:43:f9:08:e7:81:92:5e:f6:fb:22:
b7:69:bf:48:50:70:cb:c6:aa:2c:7e:3e:ea:32:4d:
64:45:90:74:a6:7f:6b:64:2f:aa:59:b7:98:4e:b6:
ab:51:51:c0:e4:67:0c:c1:35:70:02:ca:8f:58:ee:
e5:43:de:b5:8d:4f:34:ae:98:77:80:b2:27:16:24:
f6:9c:e6:67:7a:54:a8:d2:b1:bd:1a:97:3a:f6:34:
d3:e1:fc:da:83:fa:04:ea:81:f6:2d:07:89:05:cd:
1a:97:24:ec:d9:a2:45:0d:7a:38:31:f3:ed:4b:74:
56:4a:73:42:6e:ce:01:a8:ec:8c:b5:a1:10:8d:1b:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F6:70:55:A3:34:FE:20:A5:6F:C9:AF:31:5F:F9:8F:E6:68:81:32
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:fa:39:9d:30:16:e2:b6:6a:f2:73:fe:6e:da:42:f4:5a:9c:
db:ee:c4:69:fa:d3:60:41:3a:3b:7e:90:24:3e:b3:b9:ae:19:
7c:8a:e1:a9:00:2c:12:0e:50:1d:20:3d:ce:b4:80:5d:f4:e8:
fd:0c:80:b3:08:f1:41:e8:95:91:6b:7e:37:25:67:4e:bb:42:
9b:cf:88:54:e3:00:d2:98:e8:54:5a:a4:86:72:82:c6:25:37:
64:72:0d:60:dd:38:a2:17:90:86:8d:fc:7d:a9:7d:37:06:6b:
c0:84:4e:67:78:eb:1c:38:ec:a0:74:e0:bb:28:39:c0:82:aa:
ff:34:c9:85:c6:d1:10:fe:be:6d:32:45:aa:cb:93:ca:3a:e1:
f3:ba:47:96:81:16:da:03:81:9b:1d:71:a5:9d:cf:02:fb:60:
54:1c:15:05:72:af:f5:3d:d9:23:57:3a:b6:bf:70:59:5d:3e:
45:07:fa:e5:3c:38:58:cc:0c:71:f4:05:8f:ed:a8:3e:fd:5a:
05:fa:c8:c0:12:f0:7d:8d:92:4f:0c:a1:8b:d2:3a:5c:d6:e3:
72:da:05:02:79:98:19:80:ce:fe:60:f4:c1:0a:2b:2c:e1:c3:
a9:e5:59:6c:09:bd:1d:b6:65:d6:47:e1:2a:b0:da:56:ac:07:
a1:b0:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org