Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20343030383636.roa
File: 3139332e3130392e3139372e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: fMic+6q+6W/LvDPYRBGBY5uX0zcAe5aX/D+upK//NZ4=
Subject key identifier: 56:EA:80:BD:CC:69:85:FB:B7:A3:7E:CF:1F:53:64:E9:1E:B4:C2:D8
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 3D94C526678085B4FC20260A3866CF2CDCA036D2
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20343030383636.roa
Signing time: Wed 08 Nov 2023 09:24:37 +0000
ROA not before: Wed 08 Nov 2023 09:19:37 +0000
ROA not after: Wed 06 Nov 2024 09:24:37 +0000
asID: 400866
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:94:c5:26:67:80:85:b4:fc:20:26:0a:38:66:cf:2c:dc:a0:36:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:19:37 2023 GMT
Not After : Nov 6 09:24:37 2024 GMT
Subject: CN=56EA80BDCC6985FBB7A37ECF1F5364E91EB4C2D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a9:f4:2f:95:f3:6e:48:32:88:b8:7e:f7:c6:
6b:ae:d7:eb:ec:69:64:35:cf:90:15:a3:e3:24:5f:
a2:00:45:37:ba:0c:5e:c0:f1:e0:a3:b5:cd:9e:66:
22:26:10:81:1d:4c:19:0f:95:28:c4:c9:1d:fe:77:
6a:09:61:3a:b6:67:45:a6:1b:ca:f0:66:20:82:69:
b9:66:28:04:07:60:bb:6b:b4:b9:5c:1c:88:fc:c9:
91:f3:a9:94:fe:ec:3d:7d:72:0f:ee:8d:dd:3d:18:
2a:75:35:f5:11:d1:1d:30:fc:b7:80:60:29:77:bf:
25:36:cc:a7:d3:5f:23:f0:3c:dc:55:d0:71:14:7f:
b6:4e:a5:d0:28:48:96:55:3a:21:d2:0b:e0:02:bc:
fb:57:d2:25:4a:76:cd:0c:13:7f:e8:16:c9:f1:70:
14:9e:33:46:cc:a2:55:4c:96:4d:6e:11:40:81:04:
5e:54:20:ab:b9:2c:9a:1d:6a:ae:4f:c9:57:de:db:
5e:ab:82:bd:1d:83:1b:51:68:d8:0f:f3:81:c1:98:
63:bd:3b:0b:8e:2e:0b:1d:14:5c:30:96:94:3d:65:
76:e5:58:f1:4c:75:a9:9f:d9:98:f6:ef:14:70:6d:
4b:58:5d:eb:fb:99:3f:63:36:1a:14:be:e4:73:fc:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EA:80:BD:CC:69:85:FB:B7:A3:7E:CF:1F:53:64:E9:1E:B4:C2:D8
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
65:1c:13:a6:61:42:82:7f:de:df:30:d7:3b:39:00:f7:f7:81:
48:f6:cb:1e:00:d7:50:f2:82:f2:0a:3e:5d:85:00:75:8a:d1:
81:85:af:e7:1a:cd:0a:4c:35:0d:3a:48:81:6a:74:20:13:6a:
d1:b0:c1:c7:55:bb:48:42:17:86:39:59:d1:34:a7:34:92:3c:
96:81:36:45:1a:bd:3c:6d:a1:03:f3:05:59:3d:2d:f2:79:3b:
87:41:73:84:28:09:f7:45:40:14:e6:7e:6a:e0:46:b9:df:73:
bd:9d:1d:e1:4e:18:b4:4a:b6:29:d6:4a:cd:7c:7c:af:4e:91:
e1:c0:c0:2e:bc:9b:df:f3:b7:13:5a:6e:cc:48:e8:af:3f:fb:
4a:88:0c:bb:d5:0e:7b:52:f1:6b:67:d0:4a:e6:4b:4c:67:e8:
21:4d:c4:1d:58:f7:fa:cc:c0:85:33:fd:23:d7:4d:d9:74:2e:
4f:47:ac:77:1c:05:a0:78:d8:e6:f1:a5:ce:2f:81:51:41:bf:
37:33:36:8d:25:4f:70:83:41:ef:66:2a:ad:fa:3b:95:9b:eb:
08:cf:1f:b0:cb:92:f8:97:37:7d:3e:a3:a2:91:d9:57:ed:d6:
b0:06:92:98:d7:c6:ed:21:a1:68:3e:41:a3:1e:1e:8b:81:ae:
be:36:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 00:46:19 2023 by rpki-client on console-fra.rpki-client.org