Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/3139332e332e3136352e302f32342d3234203d3e20323037393630.roa
File: 3139332e332e3136352e302f32342d3234203d3e20323037393630.roa (raw, json)
Hash identifier: kfyo31TQtw9OZodGPcaJg6Eb3FgauztHXk/YcZcJKGo=
Subject key identifier: 5F:71:77:F0:91:51:BD:DA:7C:2D:7B:7E:59:62:A5:17:FF:88:28:4C
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 07C65D40968FC4A54F8BC8F5EAD283C8DACD1585
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/3139332e332e3136352e302f32342d3234203d3e20323037393630.roa
Signing time: Wed 07 Dec 2022 14:01:40 +0000
ROA not before: Wed 07 Dec 2022 13:56:40 +0000
ROA not after: Wed 06 Dec 2023 14:01:40 +0000
asID: 207960
IP address blocks: 193.3.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c6:5d:40:96:8f:c4:a5:4f:8b:c8:f5:ea:d2:83:c8:da:cd:15:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: Dec 7 13:56:40 2022 GMT
Not After : Dec 6 14:01:40 2023 GMT
Subject: CN=5F7177F09151BDDA7C2D7B7E5962A517FF88284C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:6c:0b:c7:d1:bf:06:82:a9:39:16:24:a7:
b1:17:a4:76:b2:41:97:5e:60:fc:79:59:0e:31:52:
35:4b:9b:d3:a9:d3:f3:c5:77:98:42:93:4f:4d:c7:
13:e0:b2:30:d8:82:57:59:41:30:e9:27:27:e2:3c:
68:3b:d6:34:d6:2a:97:4c:25:a7:2c:6a:0d:23:49:
28:a4:27:91:91:38:0f:84:ac:00:2e:c9:1f:96:c0:
3b:b6:b4:0f:82:29:d6:22:ba:18:b8:a9:ad:5a:63:
b0:84:08:eb:66:80:9b:29:f3:ff:d1:a7:26:90:61:
71:88:00:4c:0a:0a:4a:8c:f0:7f:f7:a9:09:47:84:
54:0b:8e:86:ee:7b:6b:15:67:1c:3a:19:da:d3:bb:
c8:3b:d8:58:89:62:c0:78:01:4f:dc:2c:55:50:6d:
06:ed:3b:10:7e:eb:1b:17:72:95:cf:a7:e1:cd:0d:
b7:c0:39:71:0a:5d:78:81:40:71:df:93:25:5c:db:
bf:50:34:02:c7:3b:df:ea:97:42:9f:34:31:67:d4:
2f:5f:3c:55:1d:9b:bf:5d:c3:72:76:8a:9f:33:57:
7c:90:0c:a7:f3:15:32:7c:fc:85:88:53:89:fb:26:
a1:d8:bf:f1:e5:9a:dd:d4:48:27:e7:19:2d:f3:57:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:77:F0:91:51:BD:DA:7C:2D:7B:7E:59:62:A5:17:FF:88:28:4C
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/3139332e332e3136352e302f32342d3234203d3e20323037393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.165.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:2d:7c:92:4d:ba:8b:4b:1d:37:ee:6e:45:a2:89:17:49:c5:
7e:82:b4:6a:9e:52:62:22:59:2c:75:b8:9f:74:ef:62:34:00:
50:7d:90:ba:cb:08:17:f8:f7:0e:51:2e:13:4d:f3:bb:88:44:
91:c1:66:53:d3:0f:13:8f:89:37:a4:ef:b5:e8:f6:14:0c:2f:
75:3e:c4:27:a7:a2:88:1e:c4:ca:18:17:ea:bd:66:bd:f0:4a:
a2:be:85:67:60:8c:29:3b:39:d2:3e:b1:9d:f6:f7:95:72:ab:
18:bd:8e:e9:4a:c9:5b:d3:92:4f:73:5f:e7:11:f6:eb:29:58:
2a:0e:0a:b6:7d:c9:24:74:ed:14:32:24:88:3c:0f:84:df:78:
c6:83:82:17:18:1d:76:c6:59:8e:e5:d5:f9:c8:60:dd:71:05:
8a:9d:a9:9f:1a:de:37:fb:72:c1:a2:a9:eb:06:9b:07:73:7b:
12:01:7c:b1:06:55:f4:b8:15:d3:6d:06:79:1d:26:86:68:cf:
f0:32:4c:d5:58:85:a5:38:ae:65:3a:94:06:b1:73:ef:c3:dd:
42:b8:c3:73:f7:18:10:e4:c3:d5:30:42:1f:65:fb:5a:bd:ac:
c4:d9:c2:62:b3:71:0a:01:d8:bf:ff:58:1d:a3:48:2c:59:92:
23:0e:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org