Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/32332e3136342e3135322e302f32342d3234203d3e20323135303531.roa
File: 32332e3136342e3135322e302f32342d3234203d3e20323135303531.roa (raw, json)
Hash identifier: mJLnDn0yzgEHJvaqpT+g+RsR9PeKxa8CSR2mo3NPenk=
Subject key identifier: BC:F4:D1:D6:2F:96:FD:D3:B3:9C:48:2F:C2:CA:B9:15:AA:06:47:BA
Certificate issuer: /CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
Certificate serial: 7BF93A6F6FB356DF90FBE915D998556E61D8D5B0
Authority key identifier: 44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/32332e3136342e3135322e302f32342d3234203d3e20323135303531.roa
Signing time: Wed 07 Aug 2024 16:49:17 +0000
ROA not before: Wed 07 Aug 2024 16:44:17 +0000
ROA not after: Wed 06 Aug 2025 16:49:17 +0000
asID: 215051
IP address blocks: 23.164.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 17:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f9:3a:6f:6f:b3:56:df:90:fb:e9:15:d9:98:55:6e:61:d8:d5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
Validity
Not Before: Aug 7 16:44:17 2024 GMT
Not After : Aug 6 16:49:17 2025 GMT
Subject: CN=BCF4D1D62F96FDD3B39C482FC2CAB915AA0647BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:4c:04:6c:ad:e3:fa:50:6c:73:3e:9f:78:
43:0a:47:bc:00:56:ef:19:9f:7e:75:fe:44:d9:de:
aa:fe:c8:05:42:7c:cf:c0:22:4b:df:16:6c:64:d3:
72:dd:b0:2e:eb:8b:77:08:ea:fa:44:19:00:38:a2:
44:e0:77:4e:99:56:96:1a:05:44:21:bd:a4:38:c7:
ff:4d:04:18:30:dd:ff:e6:e7:c9:7f:71:e4:1e:05:
fa:43:15:85:ab:25:30:d2:6b:df:61:c2:46:46:e0:
24:6b:80:3d:36:0a:2a:14:72:2a:d5:08:75:15:6e:
64:79:c0:75:b8:8c:7f:37:ae:03:57:48:70:42:25:
1a:64:c6:f6:66:31:f4:fd:69:80:d4:d4:a1:77:08:
91:fc:5f:8a:aa:a5:b5:04:5d:94:ab:a8:68:d3:65:
a2:45:1a:27:d6:95:b2:41:6d:06:d0:54:12:bc:b5:
69:4d:b3:15:8a:df:b9:4b:13:4c:4f:49:b4:9a:66:
57:6c:93:1a:66:5a:f4:85:29:19:96:9b:77:19:4b:
91:f6:bf:d7:13:47:3b:ad:66:bb:84:b8:65:92:19:
00:10:43:95:2f:fa:9f:68:c9:d4:1f:b6:f6:f8:ac:
88:d9:71:06:17:db:41:32:4c:12:9b:6d:7b:d1:19:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F4:D1:D6:2F:96:FD:D3:B3:9C:48:2F:C2:CA:B9:15:AA:06:47:BA
X509v3 Authority Key Identifier:
keyid:44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/32332e3136342e3135322e302f32342d3234203d3e20323135303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.164.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:dc:73:db:e2:7e:36:33:68:a1:d7:a4:a1:cd:71:79:76:0f:
f3:1b:f6:09:26:13:e2:32:5c:cd:a4:1c:41:02:05:4d:1c:5b:
4e:66:46:ef:50:11:c0:99:57:0c:42:ec:a2:2e:e1:44:8f:2c:
40:9e:16:35:53:09:7b:20:7c:88:ab:ad:f3:80:66:2e:6e:94:
21:f9:b6:dd:88:fc:72:20:49:e9:f0:10:db:b7:d6:34:7a:f1:
1c:4f:7c:5b:fc:0b:c2:45:57:91:71:21:82:f7:52:e3:57:89:
28:c4:4a:7d:40:bc:66:de:71:fc:96:c6:f2:06:77:89:b3:3d:
96:6f:27:6a:40:09:e9:91:11:3a:f1:59:02:11:b8:6c:8c:7b:
99:c5:60:82:69:e6:52:b3:3f:07:e1:6b:66:18:31:ff:ef:73:
88:c3:9a:bf:8f:27:77:ad:27:c5:55:7d:96:fe:1f:73:91:ce:
b5:f7:76:5d:23:a4:44:c6:10:e6:14:f0:c2:de:89:a3:a6:63:
a3:ab:01:f0:55:83:49:b5:85:e5:19:ea:1c:df:39:a9:4a:a8:
e9:d0:5e:69:8c:c7:0c:c8:bb:5c:6f:5a:f9:94:a0:25:a4:bf:
a5:94:4b:f0:f1:b3:69:28:5f:d8:9e:84:87:ca:ff:8b:f2:5d:
64:1c:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 19:03:39 2024 by rpki-client on console-ams.rpki-client.org