Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231302e302f32342d3234203d3e20323130373033.roa
File: 3139342e3135302e3231302e302f32342d3234203d3e20323130373033.roa (raw, json)
Hash identifier: FJUBtu/f1PgH8fJFzhiD0plHq28IcOj9D04d0nAyiLY=
Subject key identifier: D4:76:07:66:E9:63:F0:98:95:0A:81:2C:74:D1:1A:8E:CA:03:AE:27
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 04B456225D154EDA892C84F4A10A734BB68C9B82
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231302e302f32342d3234203d3e20323130373033.roa
Signing time: Wed 04 Jan 2023 10:44:47 +0000
ROA not before: Wed 04 Jan 2023 10:39:47 +0000
ROA not after: Wed 03 Jan 2024 10:44:47 +0000
asID: 210703
IP address blocks: 194.150.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b4:56:22:5d:15:4e:da:89:2c:84:f4:a1:0a:73:4b:b6:8c:9b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:39:47 2023 GMT
Not After : Jan 3 10:44:47 2024 GMT
Subject: CN=D4760766E963F098950A812C74D11A8ECA03AE27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:fd:32:52:9f:2c:bc:c7:93:af:e0:08:77:
89:6c:2d:66:ec:6f:f0:d7:22:ac:d2:6d:4c:7e:9f:
5e:36:8e:5a:eb:56:03:c3:c2:2c:67:4b:99:0f:b3:
f1:14:ab:5e:11:a9:d5:16:d5:61:17:09:81:39:aa:
23:52:a5:fc:4a:7c:78:78:63:74:e7:37:64:97:62:
61:6f:6c:e0:6b:0a:52:06:d6:09:01:a7:23:70:5b:
d3:90:d8:32:e1:4f:e5:cd:8a:62:69:1a:d0:19:38:
0a:b9:66:b2:67:66:68:e8:72:af:bb:55:a6:8b:be:
e3:ec:45:9c:94:ca:d8:6a:13:1a:16:01:06:1b:6a:
4a:99:c1:bd:5c:96:b2:5a:63:63:1d:bf:31:cd:f6:
45:60:a4:e3:c3:d2:03:30:a1:19:c9:61:00:77:ec:
5a:88:83:69:e6:8b:e1:d6:f5:a9:5c:47:5f:19:d9:
8c:79:c8:c3:5d:d2:ee:ac:d7:5a:ab:eb:f0:2f:ff:
79:a4:48:e7:14:42:8a:99:51:98:fc:50:11:c9:55:
dc:6c:0d:ae:12:02:ea:c8:b9:d0:13:01:f0:5f:9d:
69:41:e1:7b:3c:11:86:28:f5:17:4d:34:2b:90:b7:
c5:c0:ef:f4:4b:66:12:eb:f9:ee:34:8d:d4:30:a5:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:07:66:E9:63:F0:98:95:0A:81:2C:74:D1:1A:8E:CA:03:AE:27
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231302e302f32342d3234203d3e20323130373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e1:4e:2f:0b:b3:5d:f8:58:87:da:fe:08:b2:29:1b:11:02:
4b:38:e5:a6:2d:8b:b3:92:c3:f2:b4:f1:c4:37:1a:80:41:97:
10:40:f6:7b:42:e8:da:dd:c9:f5:79:4d:6a:15:81:2e:e9:7c:
93:24:32:8f:56:2e:04:08:c1:2d:75:21:5d:16:04:18:30:e3:
ea:89:bf:e0:28:22:e5:25:ce:e2:cb:09:c1:42:7a:8a:27:4d:
e2:a0:9d:5e:13:d0:4b:87:e4:4d:ba:b9:5b:fc:1d:cc:48:16:
fe:0f:82:c8:e0:77:2f:37:93:d1:4f:d1:b7:3d:f4:c0:7f:41:
99:6a:18:84:90:21:d6:c0:0a:7a:da:9d:a4:28:49:ad:52:5b:
37:ef:02:74:14:90:34:f0:61:07:78:1f:d3:17:a2:8b:23:6a:
2a:f6:fa:6a:56:e1:41:f8:fd:e4:ac:72:2d:eb:1d:48:35:4f:
ff:96:85:51:29:09:81:a1:71:d5:76:d9:0d:33:0d:3a:b9:14:
28:e6:01:cd:41:1c:dd:51:55:05:84:db:4f:e0:a4:7e:76:bd:
0f:23:82:5a:ed:22:fb:a3:5f:51:d5:99:b9:7f:07:13:a2:a4:
47:eb:89:a8:3a:e8:6f:a1:e9:a8:83:b8:2d:dc:c2:da:7d:d0:
5d:d3:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org