Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230342e302f32342d3234203d3e20383334.roa
File: 3139342e3135302e3230342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: haXWEfWLQTpzibuoGliJfk40SlC/Qe7tLxh0WW9PmiM=
Subject key identifier: C4:0D:BD:40:06:6B:B2:2D:5A:7B:7C:4D:1B:F8:AC:E7:99:E6:0F:6B
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 4577C96F8D215A38AB09F854AA88B763E83ECC76
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230342e302f32342d3234203d3e20383334.roa
Signing time: Wed 24 May 2023 00:00:06 +0000
ROA not before: Tue 23 May 2023 23:55:06 +0000
ROA not after: Wed 22 May 2024 00:00:06 +0000
asID: 834
IP address blocks: 194.150.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:77:c9:6f:8d:21:5a:38:ab:09:f8:54:aa:88:b7:63:e8:3e:cc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: May 23 23:55:06 2023 GMT
Not After : May 22 00:00:06 2024 GMT
Subject: CN=C40DBD40066BB22D5A7B7C4D1BF8ACE799E60F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:c5:4c:59:bf:4b:b2:a8:20:6b:bc:91:ac:
52:20:e5:a2:12:d6:f1:f0:e4:91:2a:ff:19:4e:56:
68:b7:6f:8b:72:83:f1:ec:05:59:bb:71:51:64:a4:
3e:39:e4:50:4a:02:ab:d1:62:35:45:05:a1:21:34:
b4:96:c4:0c:d8:de:9f:51:5f:d1:6f:b0:fc:e2:c9:
5d:72:ec:4d:c4:88:59:69:a5:b1:90:44:4b:05:da:
2a:ed:1c:15:30:e1:a2:ea:43:5b:2c:b1:b7:d8:b6:
af:ef:f7:65:9e:46:d2:b1:d3:60:d2:af:a4:49:4c:
80:d1:34:15:5a:ae:0e:ea:d2:27:25:f5:ed:32:19:
45:f8:26:5d:84:ff:37:4b:c0:d7:08:fa:d1:8e:e8:
af:d8:d1:62:f7:8a:7e:b8:fc:bf:6b:60:b4:a6:d5:
eb:08:78:6c:b1:ba:1a:08:1f:62:04:99:6f:63:b5:
a6:ca:1f:a1:df:a4:7c:1f:d9:d1:f8:38:85:cb:e7:
cc:e8:ad:2c:f5:09:72:1a:9a:95:10:b9:e8:ba:24:
89:95:23:32:9a:c4:f6:d3:7a:05:85:61:31:3c:6b:
ce:5e:c6:d2:b6:05:07:2c:cc:58:ee:e9:0b:00:18:
0c:0a:7b:05:4d:44:49:17:d7:92:de:bd:e3:64:6a:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0D:BD:40:06:6B:B2:2D:5A:7B:7C:4D:1B:F8:AC:E7:99:E6:0F:6B
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.204.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c9:dd:5d:3c:06:f6:21:a2:a7:88:0d:d6:bf:58:11:72:da:
3d:c6:c0:3b:d2:fd:66:01:7e:e6:3a:a2:02:05:47:e5:1f:c3:
6e:1d:82:97:fe:10:79:c0:f0:44:94:76:6a:df:5d:e7:95:ff:
d3:25:7a:4e:f3:ce:3e:15:a9:c2:f8:c6:61:51:5a:03:68:bf:
f3:fe:72:eb:1a:65:7e:cf:b7:b7:68:cf:08:23:dc:9d:e7:76:
a4:65:14:cb:37:46:b5:e9:16:da:b9:e4:f0:6d:c8:b2:66:3b:
5a:67:ec:74:d2:d5:0b:48:5e:93:3e:13:39:f0:c8:2f:74:c9:
1e:4c:7d:37:56:69:b4:55:37:f2:c8:2b:44:cd:61:da:0a:68:
d8:df:bb:ba:b5:17:b6:30:84:97:ae:c1:c9:e4:83:bf:a5:c3:
cd:62:d1:fd:16:2d:51:64:f8:d8:8d:b9:14:d0:e6:45:53:e8:
a4:8e:ab:39:a2:13:8e:79:c1:b5:0d:33:d3:4b:5a:38:92:5a:
51:b4:95:c5:d8:eb:23:62:81:58:06:e7:64:f5:c9:a7:53:ac:
45:35:d0:15:44:67:1a:90:29:a5:44:b8:6e:ff:c8:00:eb:fe:
b0:1c:07:4c:66:5b:d7:3e:01:87:37:18:04:79:9b:b4:9c:8e:
fe:ac:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-fra.rpki-client.org