Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/352e3137392e39362e302f32302d3230203d3e203432363839.roa
File: 352e3137392e39362e302f32302d3230203d3e203432363839.roa (raw, json)
Hash identifier: /AQHIipeXBmUSmEAv+SDZbJngQSJuKOaQA6QrkiLhpU=
Subject key identifier: 38:C9:C9:EE:EA:4B:87:7E:4B:8B:FC:7E:66:C0:6F:3A:33:44:8C:BE
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 527AC153689F9D85A944A0A42A737249A4C926FB
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/352e3137392e39362e302f32302d3230203d3e203432363839.roa
Signing time: Mon 08 Apr 2024 10:44:35 +0000
ROA not before: Mon 08 Apr 2024 10:39:35 +0000
ROA not after: Mon 07 Apr 2025 10:44:35 +0000
asID: 42689
IP address blocks: 5.179.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 08 Aug 2024 08:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7a:c1:53:68:9f:9d:85:a9:44:a0:a4:2a:73:72:49:a4:c9:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Apr 8 10:39:35 2024 GMT
Not After : Apr 7 10:44:35 2025 GMT
Subject: CN=38C9C9EEEA4B877E4B8BFC7E66C06F3A33448CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:ad:5c:22:e0:90:e3:38:92:38:ce:59:2c:
f9:be:c4:5f:6c:1d:d6:b2:fc:f6:3c:71:70:65:bd:
53:0a:ba:33:b3:f8:92:8e:cb:9c:6f:a3:cf:a7:58:
b8:56:80:de:9d:d9:37:3c:12:0f:72:a3:87:72:06:
f0:26:e9:82:7d:6c:f0:35:0b:00:b9:57:92:a8:0f:
2b:53:ad:58:41:32:3e:b6:02:fb:2a:19:0f:71:b4:
d5:07:42:9c:f7:ef:65:8c:26:0f:41:1b:28:71:31:
e8:8d:64:5d:4e:11:59:48:cf:e9:d3:1b:1b:ac:36:
c3:be:aa:3e:6e:d4:b1:6f:be:83:d4:55:dc:53:03:
f5:eb:b7:e8:f4:55:ff:cf:12:87:2d:60:fd:3d:fa:
32:04:eb:df:68:9d:7f:c3:71:11:f6:e1:3d:07:3d:
48:6c:6a:d2:9a:5f:22:61:39:cd:7d:a1:5e:e7:a5:
d8:bd:55:65:9a:06:cf:84:f2:d4:b0:26:eb:54:ea:
75:70:da:34:ab:88:db:bb:b9:9d:50:a0:19:5f:fb:
42:f9:d5:41:80:e0:74:7a:37:01:39:94:e0:eb:76:
8e:2e:52:99:36:b5:f7:8b:c6:03:1f:6b:2f:91:6f:
d9:6d:16:2d:93:bd:f8:be:de:75:c2:9d:a0:6e:98:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C9:C9:EE:EA:4B:87:7E:4B:8B:FC:7E:66:C0:6F:3A:33:44:8C:BE
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/352e3137392e39362e302f32302d3230203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.96.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:f3:50:03:8b:49:89:74:99:09:e9:b5:6c:14:13:93:d6:af:
79:17:46:68:23:16:bf:a2:c7:b9:aa:fa:44:99:f2:11:98:0a:
e0:01:2b:8a:78:6a:73:2b:1f:73:0a:00:52:05:e4:80:6c:c0:
36:b3:9e:8d:3a:ee:1d:ff:e0:bb:87:a8:ce:4f:1a:17:97:b3:
7b:4e:00:f6:9d:f3:da:30:e9:bf:27:4a:3d:e4:c3:14:f7:1f:
98:62:95:2a:cb:51:1d:c3:84:41:39:c3:1c:7a:d1:25:f4:e9:
60:9e:b7:26:5f:1a:f5:14:aa:c6:f6:24:c9:e5:e5:5f:3b:22:
c6:32:ba:44:55:41:42:8a:43:13:e9:7b:b5:67:a0:3d:54:11:
2f:32:d5:ec:37:13:cb:50:6e:68:cc:fd:c6:12:34:e0:36:03:
d8:22:24:38:0a:2c:48:31:a6:57:28:f7:ed:71:76:e5:02:40:
d7:bf:1a:fc:86:7d:61:12:cd:81:c2:d1:b4:0e:ec:a3:eb:c8:
e0:21:45:ee:02:d5:ef:37:32:c1:ec:8f:af:8e:b7:db:d4:d7:
d6:4b:98:c9:2f:b1:a1:61:16:ea:ad:f7:d0:62:6c:fa:46:f8:
7f:38:f6:35:22:82:37:a9:87:ef:5a:7d:da:bc:4e:66:03:2c:
00:ee:6d:90
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 8 10:10:11 2024 by rpki-client on console-ams.rpki-client.org