Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS33387.roa
File: AS33387.roa (raw, json)
Hash identifier: R0KNKQjvuNd0Y0YqVAkh1tvRJmwOOIFPb8fVErZeQcI=
Subject key identifier: 06:9C:E5:DA:3B:AE:F1:55:6D:AE:85:FD:B7:55:06:77:33:1E:CF:C7
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3FF1DD5955E88D5B9B6D6DFE176875FB6C697B53
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS33387.roa
Signing time: Thu 29 Dec 2022 12:26:21 +0000
ROA not before: Thu 29 Dec 2022 12:21:21 +0000
ROA not after: Thu 28 Dec 2023 12:26:21 +0000
asID: 33387
IP address blocks: 193.176.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f1:dd:59:55:e8:8d:5b:9b:6d:6d:fe:17:68:75:fb:6c:69:7b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:21:21 2022 GMT
Not After : Dec 28 12:26:21 2023 GMT
Subject: CN=069CE5DA3BAEF1556DAE85FDB7550677331ECFC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b8:b4:8f:72:e0:d7:f5:5f:f8:76:9a:20:9e:
d5:29:87:69:57:f4:c8:54:5d:ea:e4:1f:c6:18:fb:
0d:6a:4a:64:7f:80:a3:c6:71:6c:d6:dd:5a:10:f0:
cb:2b:f8:36:5e:6b:44:f3:50:5e:94:96:db:9f:d7:
72:c0:48:be:9b:00:01:41:60:ce:fe:01:34:b3:69:
34:89:26:85:7b:f1:c9:94:aa:33:33:6c:69:b4:2a:
8a:79:d7:83:67:c8:94:6d:2c:26:cb:91:c4:98:5e:
70:4f:cd:ab:3b:7f:33:91:fa:59:36:e3:81:b1:ee:
22:25:32:43:8b:f3:5b:93:3d:33:16:d5:94:c0:66:
0e:fc:db:e3:37:a9:01:50:cb:ef:b9:66:2b:bd:e4:
05:3f:c2:c2:4e:2a:57:25:01:3e:c7:bf:bc:d1:6e:
55:a1:2d:8a:4f:31:48:f4:42:78:0f:a6:04:44:ac:
46:63:c7:2f:c1:ba:bb:38:24:65:f5:8e:30:fb:8e:
04:9e:f5:e0:27:c7:12:82:1d:f1:50:5e:c6:fc:65:
b3:eb:85:a2:a3:c8:8d:29:c8:72:26:43:6e:5e:91:
e8:de:40:0a:53:dd:a7:15:d5:90:53:a8:6d:bc:b6:
b4:6e:36:7b:02:db:43:e0:2a:7d:54:1f:35:87:b0:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9C:E5:DA:3B:AE:F1:55:6D:AE:85:FD:B7:55:06:77:33:1E:CF:C7
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS33387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.54.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:38:2b:80:4c:07:cb:14:6e:ef:ea:08:b9:b2:64:db:99:e2:
2e:11:6b:ff:35:7f:f5:fe:a6:86:e3:34:b1:3f:5e:05:3b:b3:
1d:ad:a0:54:9d:67:4a:bc:cc:f3:72:85:0a:33:a3:fe:89:0c:
5d:11:e1:92:55:01:0f:e5:8e:a6:a9:2f:87:e3:ea:1a:c0:8a:
7e:53:66:07:ef:d7:87:5c:ef:81:0e:02:a4:77:5b:15:1e:7d:
e4:24:28:a9:1a:33:b0:60:ef:0c:66:ec:b4:e9:0c:64:81:f2:
fe:b6:46:fd:37:2e:ca:0e:3f:2e:c9:f4:20:ff:c4:f8:06:ee:
ce:65:f1:cf:65:67:99:82:2e:c3:7e:41:c3:3e:c7:d0:6e:e0:
18:84:f6:a8:88:ce:d3:34:f6:d7:04:0d:5a:23:5b:b4:43:8c:
91:cf:2b:98:ac:01:33:cc:c3:bf:56:1c:b0:ce:a9:b5:af:4b:
5e:66:8e:a0:ba:d4:0e:44:2c:d1:0e:d5:fa:bb:32:40:26:84:
c6:71:a5:37:15:00:98:86:46:0c:ae:65:00:c4:4c:0f:fe:8f:
27:15:db:21:59:9f:38:ad:6f:3b:19:83:0e:00:2c:7e:62:70:
3d:df:e9:4a:dc:d2:60:23:15:13:cc:f3:7c:f7:67:0a:2b:bf:
67:39:3d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org