Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e203437383133.roa
File: 3231322e31382e3131342e302f32342d3234203d3e203437383133.roa (raw, json)
Hash identifier: dnAnTsOgn6pJRHTMkioe93W/61Z/vCfZevSvbyLROXc=
Subject key identifier: B6:EF:E0:B9:18:ED:93:C6:2B:7E:9E:D7:CA:84:9F:CD:4C:AE:AD:15
Certificate issuer: /CN=f6253299001f2d1a01a517056cd577f41c34eb71
Certificate serial: 112F4679E8EF53BABF8D83CA350C83916E8375D7
Authority key identifier: F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e203437383133.roa
Signing time: Thu 17 Aug 2023 15:43:16 +0000
ROA not before: Thu 17 Aug 2023 15:38:16 +0000
ROA not after: Thu 15 Aug 2024 15:43:16 +0000
asID: 47813
IP address blocks: 212.18.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2f:46:79:e8:ef:53:ba:bf:8d:83:ca:35:0c:83:91:6e:83:75:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6253299001f2d1a01a517056cd577f41c34eb71
Validity
Not Before: Aug 17 15:38:16 2023 GMT
Not After : Aug 15 15:43:16 2024 GMT
Subject: CN=B6EFE0B918ED93C62B7E9ED7CA849FCD4CAEAD15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4a:ef:4f:e8:d9:5d:64:10:33:52:c8:37:d3:
1a:e2:e2:3e:8a:99:11:61:00:64:ad:dc:c5:dc:61:
f5:d7:40:26:bc:99:9b:21:54:7f:9e:af:d8:55:dd:
f3:e4:a4:53:19:f9:c1:77:22:9b:e4:59:d8:15:11:
22:57:27:e2:8e:6e:70:b3:8f:8b:4f:d4:1d:57:b9:
61:6b:11:6b:4b:10:ed:b1:6a:44:ce:48:17:87:72:
47:a5:d2:f8:d5:a6:51:94:f3:fa:f4:04:d0:7c:e6:
e2:fe:7c:42:5b:04:10:aa:ba:c7:b8:4a:18:36:0d:
cb:b2:a3:8f:47:af:97:4d:3f:58:04:21:6a:fc:5b:
30:ea:4f:cc:d0:a1:d6:fb:92:9f:c8:47:64:7a:ab:
65:5b:46:58:aa:a1:57:c6:a7:12:1d:c8:a7:9d:84:
08:f5:8d:65:4f:bf:0b:69:57:93:d1:b8:f0:c6:18:
6c:60:8c:55:8d:24:0c:5d:b7:ad:f4:79:83:5d:de:
f5:b5:04:ab:90:58:7f:b3:a3:a2:01:b3:90:b5:00:
3c:19:a5:cf:a6:bd:b9:cd:e1:7b:dc:d6:ea:15:d7:
1d:81:5d:a8:cb:1a:db:f5:8e:8d:76:9b:64:1e:e9:
d9:3a:af:a2:bb:39:70:b8:61:3c:45:e7:a3:2d:4f:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:E0:B9:18:ED:93:C6:2B:7E:9E:D7:CA:84:9F:CD:4C:AE:AD:15
X509v3 Authority Key Identifier:
keyid:F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e203437383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:fc:0c:8e:dd:2b:a0:66:83:6c:50:58:cc:b6:18:c8:a1:93:
e8:97:a6:1d:59:c7:c2:da:c1:84:2d:56:dc:98:04:ac:17:32:
be:97:61:96:4f:95:aa:5b:69:97:01:10:9d:cf:61:8c:17:47:
f6:b8:c2:37:5b:ce:fc:28:a2:43:6c:50:58:12:aa:8f:4f:4b:
f1:50:13:90:5c:f4:da:25:d5:3c:67:b8:29:48:92:b9:1a:e4:
6f:55:5a:48:da:11:8d:71:65:c3:e6:e4:10:55:a3:0e:a2:d0:
15:ac:31:d1:c5:6b:2c:ed:dc:be:a5:9a:4a:f3:dc:9a:c8:41:
9c:6b:e0:aa:b0:0e:51:a1:a4:3e:10:02:4b:a3:6e:fc:09:a8:
2f:6e:ef:ab:38:e1:82:47:ea:5f:9d:c4:6f:f5:f0:f0:47:f0:
c0:27:ff:9f:f8:a8:a3:e7:a8:72:ed:cf:a6:aa:5b:78:2f:2f:
b9:ff:84:7a:03:53:ae:6f:98:86:e8:a3:8d:2e:16:03:6f:08:
66:83:f0:4f:45:8c:15:82:3a:3a:a7:eb:f7:77:77:31:28:50:
09:b7:d7:70:0c:49:0e:6a:50:d5:57:8e:7e:2c:46:06:24:98:
14:fb:3b:57:01:9a:48:45:46:9a:9e:cf:e8:13:48:d2:1f:ae:
ff:b8:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 17 00:44:30 2023 by rpki-client on console-ams.rpki-client.org