Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230352e302f32342d3234203d3e20323130373033.roa
File: 3139342e3135302e3230352e302f32342d3234203d3e20323130373033.roa (raw, json)
Hash identifier: 4jq+iODbFPiRAIcn0FtS5zbeOtRu4gaf6SLuijtlUoo=
Subject key identifier: 5D:7F:FA:CC:B3:D1:4A:2F:C1:D6:9E:18:74:D2:7D:52:24:11:71:8C
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 63228FE8E9F45365C8254465CD92E82C55BF6712
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230352e302f32342d3234203d3e20323130373033.roa
Signing time: Wed 04 Jan 2023 10:44:42 +0000
ROA not before: Wed 04 Jan 2023 10:39:42 +0000
ROA not after: Wed 03 Jan 2024 10:44:42 +0000
asID: 210703
IP address blocks: 194.150.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:22:8f:e8:e9:f4:53:65:c8:25:44:65:cd:92:e8:2c:55:bf:67:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:39:42 2023 GMT
Not After : Jan 3 10:44:42 2024 GMT
Subject: CN=5D7FFACCB3D14A2FC1D69E1874D27D522411718C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:e5:27:1a:5d:d3:78:76:a7:ad:15:d7:cf:
01:b9:dc:42:17:62:8d:e5:db:f1:bf:f0:0e:80:81:
ef:fb:72:1f:47:0c:3a:31:2b:a3:74:4e:c9:d0:89:
f5:07:6a:ad:0d:0d:58:fd:e3:29:2f:d3:10:a1:de:
85:7f:43:55:25:a6:d7:3c:a7:df:d2:13:37:49:67:
34:fa:f6:f5:5b:de:d1:b9:6b:2a:12:28:29:4e:7d:
45:7d:29:5f:15:90:c1:c5:5d:10:19:c4:59:d8:3d:
83:65:bb:03:e6:7c:ff:c9:cf:e8:1e:6f:16:e8:da:
71:7d:01:72:7c:4e:b7:ff:ff:a2:a9:8f:63:32:36:
13:76:a5:ca:2d:45:b3:6f:4f:c2:93:2a:df:73:16:
1c:88:9c:26:8d:7e:a2:f2:f2:44:b9:33:c5:a6:ad:
3b:e9:42:cc:f2:95:88:9a:5a:03:28:0b:3f:3d:b9:
c0:80:05:1d:77:73:8a:ac:96:db:b1:3a:de:16:5f:
a4:b1:27:2a:2c:0b:6d:04:17:37:fb:7e:65:b7:bc:
14:90:08:bc:af:ef:f5:25:37:cf:df:43:d7:a0:cb:
0f:78:d0:39:d3:c0:7d:7d:54:09:7d:5d:86:d3:07:
25:85:35:5a:0f:31:e3:f7:fb:b0:7d:9c:47:3a:71:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:FA:CC:B3:D1:4A:2F:C1:D6:9E:18:74:D2:7D:52:24:11:71:8C
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230352e302f32342d3234203d3e20323130373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.205.0/24
Signature Algorithm: sha256WithRSAEncryption
43:15:64:a9:9d:28:b8:c1:f2:a4:53:67:d6:53:90:27:b4:f7:
b6:19:83:c7:9e:b5:7c:e3:98:34:0e:93:31:36:ef:b5:6e:68:
7a:23:75:7e:e7:3a:00:92:50:c1:31:1d:8b:45:6f:08:af:f7:
f8:d6:14:1b:b7:b6:fc:c3:68:f7:98:92:4d:53:a0:7c:37:8e:
ad:d0:1d:0f:77:e5:d2:30:a5:23:48:85:41:1a:44:c8:1e:0f:
95:ce:02:0d:53:58:c9:b5:c0:f8:d7:2a:7b:51:36:4f:e7:2d:
23:1a:1c:20:1a:49:3d:4f:0d:fc:b4:02:2e:8e:17:2a:67:ba:
14:e3:a3:84:79:49:e4:06:b8:49:5e:4a:d0:93:9c:60:50:1c:
1f:12:6a:fe:13:9b:c9:85:e1:be:46:08:d2:d3:fa:99:1f:92:
7b:61:1e:04:57:1c:33:4b:c1:54:5c:dd:84:bc:ce:6c:b9:b4:
92:92:b8:72:6c:1b:95:06:7c:c5:18:42:a4:f6:c7:4a:8d:c7:
84:f5:0d:e3:6a:f4:48:1d:d9:b1:ff:29:a9:20:0e:49:c9:c5:
4a:b3:a8:fc:b3:91:69:00:54:0a:b2:0c:59:36:b0:6e:9f:8f:
36:73:39:0a:5d:7a:e5:cb:56:15:a0:cb:0a:04:19:ac:46:cc:
25:99:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org