Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3234203d3e20383334.roa
File: 3137382e3230382e3137382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 2MrqEKoPONyXiEaOIkYUeAyVnCDEO+MwrOv79CK+j6A=
Subject key identifier: BB:F9:41:3E:8D:3B:82:7C:65:96:33:9B:AC:CC:4B:D9:5A:66:C0:A5
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0341C2ED05134E13D3679761B9FBBF523C78B890
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:20:07 +0000
ROA not before: Mon 02 Oct 2023 05:15:07 +0000
ROA not after: Mon 30 Sep 2024 05:20:07 +0000
asID: 834
IP address blocks: 178.208.178.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:41:c2:ed:05:13:4e:13:d3:67:97:61:b9:fb:bf:52:3c:78:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:15:07 2023 GMT
Not After : Sep 30 05:20:07 2024 GMT
Subject: CN=BBF9413E8D3B827C6596339BACCC4BD95A66C0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:b6:06:8d:50:0d:61:18:dc:a4:c6:c9:21:
92:77:bf:35:e3:8e:01:19:db:b3:c1:60:ef:fe:53:
54:22:15:00:79:a0:e0:02:50:70:18:8f:59:39:54:
5b:c8:fe:2f:16:2a:94:61:66:e6:c2:bb:94:88:c8:
bb:12:c0:4b:4c:a5:96:fb:80:b6:bf:06:13:8f:b9:
70:78:a4:6d:c4:fd:83:68:f6:82:0e:f7:0f:92:7a:
82:28:db:9c:bd:15:39:f0:93:69:be:91:f6:17:a1:
96:3c:41:97:e6:5a:03:d9:9a:35:74:6c:af:40:03:
cd:44:49:2d:a7:92:16:0c:27:ff:9d:03:c5:15:16:
61:15:ae:e2:91:2d:e6:01:cc:92:7d:ff:69:6b:8e:
60:9c:1d:69:43:8c:68:46:22:a7:80:a1:6d:3f:c3:
2f:bf:18:92:f6:80:c2:02:72:c3:56:e3:71:b3:60:
00:00:71:0c:8c:92:1d:c2:05:d8:94:62:46:f7:42:
9b:92:f4:26:be:24:0d:33:f5:77:a1:b2:18:93:d7:
10:07:2c:cd:5c:55:fe:49:9f:13:1a:27:9e:cf:d7:
5f:af:ff:7a:2d:f4:db:ec:ce:d9:4b:fa:91:1f:c8:
b2:30:19:52:58:32:c7:af:86:52:fb:1e:32:06:ef:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:41:3E:8D:3B:82:7C:65:96:33:9B:AC:CC:4B:D9:5A:66:C0:A5
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.178.0/23
Signature Algorithm: sha256WithRSAEncryption
44:58:2f:ea:73:d9:fb:4b:7a:83:99:e9:d5:db:41:06:62:b8:
e2:a2:98:ba:6c:86:6d:37:8f:98:03:1b:41:09:93:52:f3:8c:
67:34:d0:17:eb:58:1e:28:2e:48:e7:ea:90:b3:2f:7e:59:52:
93:1a:d6:1c:bb:1b:31:24:5a:03:71:05:bd:3f:df:a5:df:66:
12:70:ba:b3:08:a9:1a:ee:4d:e2:9f:5f:61:61:a7:24:b8:11:
80:c3:74:5a:04:b1:10:00:5b:70:df:17:34:b6:38:c4:1d:29:
d4:6b:4c:2b:04:77:10:4c:50:8e:7f:dd:3a:4d:21:55:ce:68:
82:ac:e4:c2:9b:5f:94:3f:aa:56:76:23:55:7c:a3:71:d9:47:
3a:94:11:0b:a5:e1:d8:5c:3c:c1:e1:43:03:33:4b:0d:9e:82:
10:15:33:59:c4:11:3f:e4:95:1a:27:0a:ea:04:3e:28:48:85:
84:8d:81:bd:ba:96:5f:60:29:9d:98:15:cd:cf:2f:a1:46:c5:
71:d9:0f:56:38:b2:b9:17:4b:ef:2d:2e:6f:e6:ec:23:a7:83:
d5:cb:23:45:c1:ab:34:bf:d1:31:a1:fb:95:cd:fe:3a:38:27:
d0:05:4a:c4:2e:56:48:23:03:1e:67:83:9b:d4:47:0f:f4:e0:
41:b0:fa:df
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 24 16:21:33 2023 by rpki-client on console-fra.rpki-client.org