Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20323039323630.roa
File: 3139342e3135302e3231312e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier: q4kYNlgb6oLe9psorcbCIDq3A2xqnRWQH+u/9YEz9y8=
Subject key identifier: 11:E5:C0:7D:90:A9:E9:48:E0:87:63:25:6E:87:68:08:F0:4D:63:02
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 25C9E0850144C5EE2992B57AAD8FF2C441C6E67F
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20323039323630.roa
Signing time: Wed 04 Jan 2023 10:44:04 +0000
ROA not before: Wed 04 Jan 2023 10:39:04 +0000
ROA not after: Wed 03 Jan 2024 10:44:04 +0000
asID: 209260
IP address blocks: 194.150.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c9:e0:85:01:44:c5:ee:29:92:b5:7a:ad:8f:f2:c4:41:c6:e6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:39:04 2023 GMT
Not After : Jan 3 10:44:04 2024 GMT
Subject: CN=11E5C07D90A9E948E08763256E876808F04D6302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:e9:f4:d1:6a:44:9d:03:ba:10:54:ce:2d:
0d:0b:43:1a:c4:38:da:34:1a:b1:64:e0:85:df:8c:
64:19:6b:3a:17:25:30:e8:8b:d7:e6:90:80:fc:38:
a2:7b:bf:b3:f1:51:1e:09:c4:09:88:11:14:d4:d2:
e2:a6:40:0c:0c:9e:b5:27:b4:c7:7c:18:32:e8:78:
7e:c9:6a:ad:c0:12:f9:d3:4f:3d:13:93:9f:bf:e0:
12:7b:77:63:4b:6e:08:3a:19:63:0b:44:af:ad:bb:
56:eb:9a:ec:7a:eb:f6:22:62:1a:d2:06:1e:02:fa:
2c:74:5b:94:4c:af:91:08:c3:c4:74:7a:01:ef:ad:
04:1d:c4:26:04:b1:26:b7:60:8a:40:30:4d:00:80:
b6:4d:30:e8:58:dd:40:9e:a2:93:d7:ca:b9:90:a0:
cd:09:b9:28:f8:7b:77:cd:b4:8c:d7:e8:03:1b:fa:
ed:91:47:ab:3f:69:41:5b:a0:79:d2:b2:36:da:63:
d1:54:d8:1d:cf:89:02:9c:bd:f4:cb:c1:b7:09:fb:
58:e2:3d:a7:8b:9c:56:41:d5:c7:68:0b:e1:8c:85:
65:e4:98:21:0a:cc:52:d2:a0:36:8c:42:1e:5b:f1:
4c:80:51:8a:6f:a2:73:f8:73:dc:a4:dd:84:0f:b8:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E5:C0:7D:90:A9:E9:48:E0:87:63:25:6E:87:68:08:F0:4D:63:02
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20323039323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a0:f5:4a:a5:32:a9:d5:9c:63:06:de:9e:73:17:00:67:b8:
e8:79:3f:9d:cc:28:a3:93:d5:57:d9:89:e9:55:0c:17:e5:d5:
89:b9:35:77:24:44:d2:19:3d:5b:ec:d2:79:a4:72:c8:f5:cc:
8c:36:5d:4a:36:9d:db:17:01:8a:59:59:4a:44:31:70:65:e6:
c7:a2:2b:91:36:92:24:f7:3f:d2:dd:eb:ff:33:41:8a:41:38:
8b:30:9e:77:9e:8b:07:69:fc:10:15:c1:8d:55:e6:34:66:da:
af:4f:28:3f:fa:64:3b:5e:ba:1e:58:0c:48:f5:7f:54:c2:84:
5e:8f:9a:0c:cc:5f:4f:5c:71:36:d5:88:dd:14:43:0d:a7:f2:
3a:fb:ed:83:8e:02:ef:20:6f:ae:51:27:13:7b:6b:29:c9:f5:
be:d3:f9:11:cf:04:05:9d:fa:66:6b:6c:a4:b2:53:e5:f7:4b:
30:aa:6e:42:ce:7c:35:d8:8f:5b:64:63:f2:ad:16:53:ad:be:
c8:68:37:34:8e:71:9b:3d:cd:d1:83:24:2a:14:cd:11:69:bf:
6a:1c:16:74:22:ca:e2:11:f9:b6:a2:6e:d0:54:93:35:c6:45:
61:8b:58:3c:92:cc:40:46:86:b0:54:0d:b4:14:47:06:e6:64:
ee:59:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-fra.rpki-client.org