Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20313437323837.roa
File: 3139342e3135302e3231312e302f32342d3234203d3e20313437323837.roa (raw, json)
Hash identifier: ByEHHMNiYNTRTVWmmI+6QpuvuRrBDPa2UBgNdYzLsoo=
Subject key identifier: FB:A1:61:A4:14:86:3F:DF:6C:51:DC:45:77:D1:D0:FD:2E:7B:34:09
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 6BE574B8E7C99F8175F0EB20FD8B10B30D5B2DA4
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20313437323837.roa
Signing time: Wed 28 Jun 2023 06:00:11 +0000
ROA not before: Wed 28 Jun 2023 05:55:11 +0000
ROA not after: Wed 26 Jun 2024 06:00:11 +0000
asID: 147287
IP address blocks: 194.150.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e5:74:b8:e7:c9:9f:81:75:f0:eb:20:fd:8b:10:b3:0d:5b:2d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jun 28 05:55:11 2023 GMT
Not After : Jun 26 06:00:11 2024 GMT
Subject: CN=FBA161A414863FDF6C51DC4577D1D0FD2E7B3409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:78:29:0c:75:e0:db:65:e5:5c:72:b8:59:df:
97:40:99:9e:13:6d:f3:92:f5:e5:19:ff:d3:50:09:
0c:5a:68:4d:db:77:34:08:12:42:15:a0:12:1c:41:
d5:e8:73:7f:be:e5:bd:8a:c9:6b:c5:e3:14:03:8f:
dc:d4:d6:11:73:7d:6e:eb:19:1b:f2:a9:9a:21:d0:
7e:d4:1b:92:c1:13:72:8b:02:9a:44:b7:da:04:7d:
7f:1d:f7:6d:96:d9:28:2f:a6:b2:74:f9:5a:a3:ff:
96:57:ea:6f:a5:d0:74:a2:83:06:1f:79:98:30:38:
c5:82:e2:d8:23:4f:f8:e9:50:90:1f:19:83:ef:3b:
a2:af:96:74:59:ee:d8:94:10:dc:2f:a1:4f:2a:a1:
2a:18:c8:fe:77:a7:3d:64:11:1c:86:d7:f4:0d:07:
84:43:a8:a9:83:43:09:96:b4:b7:e5:5f:a7:dd:ca:
f8:7c:3f:82:ab:59:c0:e7:4c:1c:44:23:21:72:aa:
7c:19:ed:49:74:62:c8:86:f1:28:64:28:fb:8b:df:
fd:51:0d:ff:9a:f9:26:77:74:53:f0:d3:ff:3e:75:
44:b8:f8:3a:a9:e7:f9:63:4d:e8:91:89:58:2b:74:
a7:eb:1a:75:c8:c9:2b:91:cf:50:1a:f7:ee:8b:3f:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A1:61:A4:14:86:3F:DF:6C:51:DC:45:77:D1:D0:FD:2E:7B:34:09
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20313437323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.211.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c3:66:ab:02:8f:e9:01:98:9a:8f:7f:0d:16:68:65:16:df:
20:cd:6a:c3:28:6c:dd:c2:d3:09:79:62:c1:66:19:93:fc:7f:
1b:16:b1:21:36:1f:7f:8d:cd:67:fa:fe:17:b7:89:87:ac:c5:
bc:49:5c:38:15:ec:cb:9e:05:a2:3b:37:c2:d4:c7:48:be:a8:
a5:b6:d4:f1:17:b7:3b:72:93:a2:40:b8:15:e3:c6:b0:b2:80:
5c:fa:c0:b5:27:f0:ad:fd:17:1d:2f:36:bc:ac:08:f8:75:70:
10:8d:a8:28:3b:96:b1:57:5a:e9:2f:58:34:da:e5:27:68:c6:
bb:6f:62:3b:1a:6d:48:d9:a5:fb:54:c2:5b:9a:2b:9a:06:c0:
b4:66:fb:77:6d:cb:9d:46:36:a0:60:75:a4:18:27:a2:1d:03:
1f:3a:0a:df:e1:c0:c7:96:6a:14:45:e3:66:b1:74:d1:0a:db:
e1:67:dc:46:cd:f8:0b:5d:31:bc:0c:34:e3:35:22:92:f8:44:
fe:d4:b0:d6:2a:5b:3d:ca:e0:22:03:0a:7d:c2:7a:7a:9b:03:
92:81:4f:b1:6d:ef:96:81:54:39:e3:3e:55:9a:69:9b:e6:f7:
1a:aa:ee:ca:43:18:d0:ea:a1:41:1e:6f:54:59:63:70:e2:30:
ea:4f:ec:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 10:20:17 2023 by rpki-client on console-ams.rpki-client.org