Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230342e302f32342d3234203d3e2037303138.roa
File: 3139342e3135302e3230342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: tPW6HzVw1kY0nXWqKXUOrtpHpsv+TtnBkGaYn/9fzi0=
Subject key identifier: 97:EC:10:47:92:1F:9B:CF:7E:87:71:C3:60:78:18:D5:3E:30:6A:52
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 6C3ACC64C97607D98A1E9648513F904839BAE14B
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230342e302f32342d3234203d3e2037303138.roa
Signing time: Wed 04 Jan 2023 10:43:21 +0000
ROA not before: Wed 04 Jan 2023 10:38:21 +0000
ROA not after: Wed 03 Jan 2024 10:43:21 +0000
asID: 7018
IP address blocks: 194.150.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3a:cc:64:c9:76:07:d9:8a:1e:96:48:51:3f:90:48:39:ba:e1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:38:21 2023 GMT
Not After : Jan 3 10:43:21 2024 GMT
Subject: CN=97EC1047921F9BCF7E8771C3607818D53E306A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:07:d1:0f:d4:c1:f3:e0:2b:33:25:19:75:
89:9a:30:5f:55:14:31:19:05:e1:af:55:3a:3e:bb:
00:a9:ba:e7:7f:db:b3:0f:58:a9:0b:a3:a8:bd:20:
34:98:88:b3:41:17:34:c6:6b:93:07:1d:8a:42:47:
76:45:b2:92:fe:3d:7f:c8:31:e4:02:4e:56:22:ab:
09:a7:91:a6:cb:e6:04:7b:43:63:b3:22:e0:93:d0:
b7:f6:13:92:3e:f5:6f:93:b9:a0:b3:b2:25:2b:c9:
08:6c:58:09:43:2b:37:58:46:12:7a:06:90:54:ce:
3f:a6:8e:42:a0:f0:53:96:ae:f2:0d:62:b5:de:33:
d7:e4:32:72:5b:71:70:f2:ff:90:8a:e4:58:76:bb:
48:d9:d4:1f:b1:5f:f4:c9:2d:55:f6:cb:02:e8:87:
b6:3a:2d:81:17:54:60:85:05:24:a9:4b:42:82:bb:
cf:0b:fd:a5:16:54:08:bc:0f:b1:60:17:17:4d:92:
a2:6d:da:e0:ba:d2:05:3b:54:4d:9e:45:3c:77:0e:
d0:08:7c:d0:c1:b4:59:12:5a:96:60:20:ec:a3:8f:
2d:ca:f7:0b:5a:fe:c8:9a:e7:1e:ef:90:6d:e3:11:
55:7c:72:b2:3c:a3:75:4e:7b:e7:9e:a1:fb:e5:d7:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:10:47:92:1F:9B:CF:7E:87:71:C3:60:78:18:D5:3E:30:6A:52
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230342e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:1a:b5:85:ed:a7:9c:32:4c:6a:f2:87:dd:28:54:90:fa:f7:
62:1a:3a:7a:5d:c0:7f:12:dd:8a:46:34:6a:cb:9f:ff:d9:96:
9e:00:57:21:d0:ea:10:4a:14:54:f0:b1:44:e2:41:aa:0b:29:
2f:a7:ec:13:c2:52:7d:76:29:ef:88:6b:18:63:b7:b7:ec:cb:
43:ab:5e:d6:03:38:96:3f:f9:80:94:ce:74:87:62:30:eb:21:
57:bb:67:ef:a5:40:31:f9:c1:28:0b:81:cd:cd:2e:c6:dc:fd:
bc:66:9a:c2:4a:01:f3:4d:b3:cb:b0:a5:b9:b8:8a:09:0c:29:
e1:58:00:d1:35:ae:4a:ae:5d:3a:12:4f:a3:8b:5a:3d:75:27:
19:5e:c8:b2:a6:05:08:be:f9:20:a1:61:13:2c:28:f5:c2:cb:
44:5c:55:89:7c:cb:0a:e1:37:19:8b:83:a1:bf:3a:72:e7:83:
f5:22:30:b5:46:7a:69:02:a8:87:40:87:29:d3:bc:ab:05:58:
55:85:f0:8a:cf:f1:0c:3f:ae:0b:4b:21:05:09:6f:ad:76:b3:
4d:ec:43:36:0a:6c:5d:90:32:47:3e:a9:bd:10:f0:39:92:b3:
a1:2d:8f:b8:d6:ed:f3:40:4a:68:e5:4f:e7:59:d5:d2:c1:55:
c1:66:78:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-fra.rpki-client.org