Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e3231312e35312e302f32342d3234203d3e20383334.roa
File: 3139352e3231312e35312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: afRiXEm9IzOAf4VycKJ6NVsf940e8mMZ5Pn/l2RlAt8=
Subject key identifier: 5D:A0:F9:C4:D8:C3:06:4A:F2:5D:74:08:A3:DE:6F:65:E4:63:FE:02
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 75EDDACBE1AAC21BC4464C09199956C71C10929D
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e3231312e35312e302f32342d3234203d3e20383334.roa
Signing time: Wed 06 Nov 2024 00:02:24 +0000
ROA not before: Tue 05 Nov 2024 23:57:24 +0000
ROA not after: Wed 05 Nov 2025 00:02:24 +0000
asID: 834
IP address blocks: 195.211.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 19:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ed:da:cb:e1:aa:c2:1b:c4:46:4c:09:19:99:56:c7:1c:10:92:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Nov 5 23:57:24 2024 GMT
Not After : Nov 5 00:02:24 2025 GMT
Subject: CN=5DA0F9C4D8C3064AF25D7408A3DE6F65E463FE02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:1f:cd:b2:55:58:1b:53:2a:4d:7f:bc:de:
6a:45:95:dc:50:2b:14:4d:3e:d2:3a:b3:44:22:8c:
98:e5:92:e9:cc:b5:65:a0:bc:f7:ee:c9:37:04:fa:
47:7a:60:cb:51:e5:32:e8:2f:83:4b:74:74:48:17:
b7:f7:31:6b:29:8c:5d:30:e8:11:d3:f7:ad:d9:58:
3d:62:0d:68:65:dc:00:61:27:1f:60:01:4b:e8:d1:
51:19:ab:fd:59:17:a2:c6:13:65:46:f6:41:ea:94:
a8:6e:bd:b6:a6:fa:1c:81:bf:e5:48:9b:7b:e6:d6:
d4:be:61:fd:70:85:92:0b:90:52:14:93:c2:93:04:
78:85:d3:17:4d:f7:4d:e0:d5:6d:d5:93:14:cd:0b:
5d:26:c3:1d:24:5e:be:68:d3:d2:84:7e:58:9f:2a:
a4:7b:44:c1:c0:c1:0d:8c:12:be:b7:ca:ef:83:36:
5f:30:59:a3:fb:15:d8:4b:08:1e:79:91:78:1c:c4:
9e:d4:3b:1d:0e:2b:bb:35:ce:ab:20:09:4d:c1:b9:
e4:d0:69:b5:14:25:67:a2:f9:49:a3:78:c8:9d:73:
63:57:bb:59:fc:f7:ad:99:53:e2:7d:24:c4:11:e7:
ca:06:33:6f:de:f9:3f:79:e9:5b:d2:f8:87:ec:ee:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:F9:C4:D8:C3:06:4A:F2:5D:74:08:A3:DE:6F:65:E4:63:FE:02
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e3231312e35312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.51.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ec:aa:3b:7c:2d:07:e7:23:4c:93:b5:51:b8:76:9c:0a:94:
ab:cb:a1:7e:aa:c0:0f:cf:0f:3b:14:63:06:28:63:59:68:74:
fa:59:75:03:6f:a3:cc:0c:31:1d:78:8d:6b:97:49:33:2e:a9:
09:a6:28:23:4d:74:03:30:e5:6a:b1:d7:03:ca:97:08:cf:46:
c8:37:82:67:24:bf:08:c4:5e:46:70:68:19:78:3e:ea:95:f7:
dc:48:02:ac:88:c8:5e:0a:1a:03:58:a6:b4:ab:8f:35:30:6e:
09:26:3b:28:1c:a7:6d:44:4d:a5:62:e8:ae:c8:ef:cc:54:8d:
5e:e0:96:1e:78:04:1d:64:37:12:94:bc:e2:16:70:2d:eb:a0:
63:c2:cb:e8:64:ea:5b:16:01:9f:bd:6c:74:94:9c:52:a6:bf:
a0:8f:70:e5:7b:03:2c:d4:17:1c:53:18:7e:c1:7a:fc:95:6a:
4b:f0:bc:94:ff:58:3c:a8:b8:ea:7b:8b:47:41:96:8c:cb:e6:
47:f2:d6:7d:31:8e:8d:8f:8e:fa:07:a1:4b:f1:aa:d5:ca:91:
42:26:33:58:90:a7:e4:e6:9a:9d:80:86:e8:73:5b:2d:f0:13:
2f:3f:1d:4a:71:6b:55:c5:ea:dc:7d:f9:9a:40:32:04:87:84:
bb:1f:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 22:35:44 2024 by rpki-client on console-ams.rpki-client.org