Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e20383334.roa
File: 39312e3232382e3136382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9nF2VQKdoqtfMHUsNeML1aw64d29GR7ilnKnknp3/aU=
Subject key identifier: 56:5C:82:1E:E4:CA:95:FB:28:D3:24:B2:7F:97:E5:53:57:86:74:1C
Certificate issuer: /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial: 7EFA58216F3D8125950BCD494860AC560BA206ED
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e20383334.roa
Signing time: Fri 08 Dec 2023 00:00:03 +0000
ROA not before: Thu 07 Dec 2023 23:55:03 +0000
ROA not after: Fri 06 Dec 2024 00:00:03 +0000
asID: 834
IP address blocks: 91.228.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fa:58:21:6f:3d:81:25:95:0b:cd:49:48:60:ac:56:0b:a2:06:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Validity
Not Before: Dec 7 23:55:03 2023 GMT
Not After : Dec 6 00:00:03 2024 GMT
Subject: CN=565C821EE4CA95FB28D324B27F97E5535786741C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:8c:da:d6:f8:53:5a:a7:27:69:de:fe:bb:
bc:66:06:4e:94:48:c6:c4:02:95:af:3c:a7:78:80:
69:ec:c7:92:2b:b9:26:45:0a:fc:49:3e:40:01:5b:
38:57:87:b0:87:65:40:d4:db:70:fb:04:fd:11:11:
c3:0f:88:82:b6:92:13:b5:fd:36:c2:33:27:5d:61:
78:98:57:d9:fc:8b:32:6e:40:b8:cd:fd:cd:d6:c9:
21:5e:29:4e:fc:08:95:2a:7e:94:50:09:95:80:6a:
ff:b5:cc:06:d3:48:f2:5e:da:89:08:14:ba:99:1d:
97:8c:83:b1:5e:2a:08:54:37:ab:c9:9d:ba:7e:99:
ac:60:13:e2:dc:4b:cb:53:4d:60:73:18:06:45:15:
60:6b:9f:f1:fa:7c:c7:4e:33:a8:03:1d:cc:93:0c:
28:fc:df:3c:2a:39:83:f4:ea:0b:10:dd:2c:19:8b:
75:8d:fe:e1:0b:bc:8b:d2:47:be:a4:cf:cb:24:86:
c3:db:10:60:5a:f1:5f:7b:fd:bd:a8:92:b9:f7:30:
b8:4b:b1:38:26:ee:9b:e5:88:7f:a8:b3:da:cc:4f:
a8:d3:0c:7c:71:4d:52:ab:cc:2e:bb:b2:12:f3:41:
37:0d:64:05:c6:ae:14:47:2b:d5:00:d6:1b:7e:7d:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5C:82:1E:E4:CA:95:FB:28:D3:24:B2:7F:97:E5:53:57:86:74:1C
X509v3 Authority Key Identifier:
keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
83:44:8d:2a:e5:d2:ac:12:d5:a7:54:dc:95:9f:cc:b4:06:0b:
bf:bf:6b:68:89:65:a9:6b:b0:33:17:82:19:bd:a9:08:96:62:
ce:7d:23:e5:c7:0a:d9:d7:fa:ee:f4:46:49:d4:c8:48:6c:51:
eb:a1:e7:a8:88:f1:57:4d:a9:2a:9e:37:b3:91:f2:23:2a:b2:
00:93:87:06:08:8c:67:f2:5d:48:d8:4a:80:12:6b:22:6a:d9:
15:28:dc:c2:68:0c:f5:12:0d:98:af:de:67:a9:c4:a9:9c:4e:
3b:13:c1:db:22:17:12:f5:41:c7:7e:f4:50:eb:ac:b1:05:4e:
dc:62:15:74:90:81:d9:c7:b4:be:ea:d4:37:ca:4a:4d:cc:cd:
83:b2:35:a7:10:77:8e:cd:00:c8:2a:d3:3a:5a:aa:a0:21:6f:
85:ae:9f:0c:96:f3:4e:7b:8b:4a:c8:62:8a:6c:aa:6f:28:39:
ec:b5:35:b1:1a:b3:cb:ba:b9:5d:76:d5:14:4c:22:88:5d:c1:
45:7e:78:99:23:a8:09:5a:c4:5c:87:c3:a0:c6:2d:14:ec:2e:
e9:85:f9:54:46:4a:31:21:7a:d0:b3:d2:e7:94:d8:d5:41:3c:
5e:7b:ad:d4:fe:e5:90:9b:fa:95:10:d2:45:ac:e6:26:de:ff:
c0:da:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 11:01:05 2023 by rpki-client on console-fra.rpki-client.org