Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32322d3232203d3e20383334.roa
File: 3137382e3230382e3138302e302f32322d3232203d3e20383334.roa (raw, json)
Hash identifier: 4gzBl5WORuWuOc2z2j+g4SMvtl8osIfIAwPfczGtnNA=
Subject key identifier: D7:A6:28:11:6F:D8:5E:7B:17:02:3A:9A:03:85:F8:59:F1:9B:71:B4
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1F2E02113503B70FFBAD7FFBB079B013EC4CED0F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32322d3232203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:19:59 +0000
ROA not before: Mon 02 Oct 2023 05:14:59 +0000
ROA not after: Mon 30 Sep 2024 05:19:59 +0000
asID: 834
IP address blocks: 178.208.180.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2e:02:11:35:03:b7:0f:fb:ad:7f:fb:b0:79:b0:13:ec:4c:ed:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:14:59 2023 GMT
Not After : Sep 30 05:19:59 2024 GMT
Subject: CN=D7A628116FD85E7B17023A9A0385F859F19B71B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:7a:f5:ed:6d:69:9f:16:b2:7a:45:bc:c5:
f3:30:f4:14:78:79:4f:54:47:a0:90:07:1c:42:4b:
d2:a5:35:ab:50:82:0c:22:b5:31:e7:6a:74:45:15:
d1:e1:7b:3e:9d:24:8b:94:d4:00:a5:bf:68:1f:86:
64:3c:79:0f:eb:e7:b5:aa:9d:7a:b8:d4:eb:a9:d4:
84:0d:4d:9e:3d:17:8b:57:ca:61:0d:7e:3e:85:66:
f0:1e:42:fa:fd:21:e9:7e:67:26:4b:ec:05:03:39:
83:41:5e:81:38:37:e8:27:a4:4e:17:3e:33:24:4e:
c3:a9:83:82:d1:f1:08:5e:de:af:5a:35:3b:30:c4:
58:c1:4a:18:59:58:5d:5b:25:b3:d4:77:c7:2f:4d:
5a:49:84:7a:28:51:34:02:01:c3:1b:7b:f6:e9:f3:
3c:ee:0d:db:d1:6b:2a:e0:f5:da:65:fa:ef:1d:f3:
a1:18:0f:8e:b4:5a:9c:11:40:bd:d2:bf:c5:08:c7:
d6:6c:31:09:7e:13:dc:bd:b4:3c:d6:67:95:3c:0f:
cf:07:3b:4d:4d:11:61:af:57:92:6b:77:67:1c:c9:
03:58:71:7d:48:2e:ec:fd:0e:03:47:75:87:fa:69:
d4:50:ef:8d:1c:e5:be:38:ae:ed:71:9c:a7:00:b4:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:28:11:6F:D8:5E:7B:17:02:3A:9A:03:85:F8:59:F1:9B:71:B4
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32322d3232203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:fa:83:43:60:5b:ca:52:e3:68:3a:0d:ea:eb:ca:65:f4:15:
a6:69:16:f0:c3:60:10:c0:04:20:74:58:5c:3d:a3:b5:fe:99:
b2:6c:4d:81:5b:c6:17:bf:ba:90:29:18:4e:cf:96:f8:b9:30:
67:d1:44:58:1f:32:ea:4c:1e:89:c2:81:f4:4c:b6:e7:01:d6:
20:76:c5:29:38:8a:11:12:37:30:ce:ad:af:ce:1e:28:82:a9:
74:cc:e8:c0:f7:85:79:cf:a2:e0:4f:b2:b8:cb:38:b6:f6:f6:
de:67:0b:b3:de:40:74:ac:29:60:08:2a:93:e6:67:fd:e9:f0:
02:ef:3c:d1:25:70:04:66:a8:eb:0c:96:41:53:aa:37:0b:30:
fe:02:4f:75:f1:7a:5c:7d:45:b3:96:90:42:8c:17:b2:48:7d:
9f:1f:ed:24:99:e5:6a:f1:36:b6:c2:b5:26:31:34:23:11:db:
11:b8:dd:c6:5e:80:af:90:97:76:1c:a3:ca:82:82:26:59:04:
db:5e:2f:0b:ff:ba:de:f3:d1:3e:cf:58:ad:97:1c:59:1f:83:
01:d7:c2:e9:15:e8:64:95:d4:b6:d2:6c:4f:93:43:52:ea:54:
df:be:0b:ee:73:0a:de:02:27:c5:e2:0b:74:34:6b:b2:3f:a9:
cb:17:04:db
-----BEGIN CERTIFICATE-----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Generated at Tue Dec 19 14:23:00 2023 by rpki-client on console-ams.rpki-client.org