Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231382e302f32342d3234203d3e203239303636.roa
File: 38332e3135302e3231382e302f32342d3234203d3e203239303636.roa (raw, json)
Hash identifier: GpsTisaefLdhK/VufEg2SdNz9B4rtc46GiWy/MVRpc4=
Subject key identifier: 46:85:60:EA:7B:37:52:B9:A7:D1:86:9B:84:5D:FD:1F:C2:1A:7A:50
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 403BD22374D34364AD41E5D192CA1EEDF2A5830E
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231382e302f32342d3234203d3e203239303636.roa
Signing time: Thu 05 Jan 2023 16:34:21 +0000
ROA not before: Thu 05 Jan 2023 16:29:21 +0000
ROA not after: Thu 04 Jan 2024 16:34:21 +0000
asID: 29066
IP address blocks: 83.150.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:3b:d2:23:74:d3:43:64:ad:41:e5:d1:92:ca:1e:ed:f2:a5:83:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Jan 5 16:29:21 2023 GMT
Not After : Jan 4 16:34:21 2024 GMT
Subject: CN=468560EA7B3752B9A7D1869B845DFD1FC21A7A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:77:13:ff:d3:48:40:0d:3a:5f:0c:5e:0e:
b6:0d:73:0a:d1:4d:2f:32:60:84:95:29:a9:85:65:
f2:ed:ad:9d:90:a3:48:c8:94:0b:5c:2d:92:51:99:
0e:82:97:2b:4b:8c:65:53:3e:4b:2b:5c:fa:e3:bd:
cb:80:f8:e9:88:b0:4e:69:d5:a4:21:ce:3f:2d:2f:
74:4c:18:b1:f6:2d:a8:d9:a9:db:f0:d6:f6:b5:fb:
e3:34:99:d2:ae:aa:ef:a9:e5:c6:ee:ce:54:03:f3:
fe:17:41:c7:63:3b:c1:06:9c:57:ae:9c:5e:0b:c2:
67:f5:3a:42:a8:0d:c5:ad:ec:9b:59:6a:70:02:49:
a5:2d:73:02:8a:eb:81:1e:84:44:73:c3:1c:7c:75:
3a:57:60:9d:1f:df:6f:e1:91:ef:ae:0d:05:ca:9f:
9e:91:53:92:1d:50:c0:c8:6b:f1:4d:db:9d:23:17:
e0:e8:c4:d8:11:67:95:7e:24:a2:b6:b9:ac:23:f7:
fc:f7:a4:71:d9:c5:74:17:5e:e5:24:92:e3:81:b9:
08:1f:37:77:15:95:fc:2e:e0:0e:77:c3:81:ac:11:
f5:c8:10:c2:d1:ad:a0:cb:87:de:7e:13:43:aa:a2:
fe:7c:77:df:38:9a:e3:25:b3:80:59:19:a1:e4:df:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:85:60:EA:7B:37:52:B9:A7:D1:86:9B:84:5D:FD:1F:C2:1A:7A:50
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231382e302f32342d3234203d3e203239303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.218.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d8:86:2f:e6:f2:31:1b:aa:0b:f3:fe:6a:42:9b:b6:a3:96:
6f:2e:ea:1f:8b:19:78:fb:e8:e0:e3:c5:e0:51:5d:4d:31:f6:
61:86:76:50:46:2f:dc:48:2b:ff:bd:14:70:d1:55:ac:87:01:
5c:b3:ed:38:e2:22:ac:e6:18:5d:4a:d2:19:4f:e8:59:4d:0f:
4e:0a:f7:1e:4f:bd:cb:e3:7e:68:1e:8b:e4:c9:06:a7:81:2d:
cc:42:9d:03:49:a3:f7:74:fe:5d:69:41:25:8f:f6:b4:d2:5a:
ca:5b:12:d8:57:6f:6c:ac:7c:b0:75:99:b2:c8:72:42:e4:0d:
d2:07:76:f9:80:f1:d2:57:41:fd:a5:77:06:f1:b2:4f:63:75:
c0:f5:b0:4a:33:82:15:91:d4:c2:e9:63:c0:fb:ad:a1:14:b0:
b8:a7:93:dc:d3:f2:9e:17:07:66:69:3b:11:24:e0:2d:32:60:
70:2f:07:f6:63:4b:3b:a9:f9:0f:e5:be:18:8f:ae:ab:9f:53:
d0:10:81:de:09:9a:f2:5e:52:e1:87:dd:9b:10:0c:be:41:47:
9c:01:56:ae:48:66:49:a2:cc:13:9c:fc:a7:61:3c:79:75:4b:
34:96:d3:29:be:8f:c2:e4:e1:37:2e:5d:5c:89:ec:56:8c:95:
05:d3:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org