Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231382e302f32342d3234203d3e203532303733.roa
File: 38332e3135302e3231382e302f32342d3234203d3e203532303733.roa (raw, json)
Hash identifier: qy3pUQabjtttoxDeLUErKcOUIn1xWZw1DrDdWrwbcY0=
Subject key identifier: DF:BC:96:1E:04:96:B8:60:D0:0F:6E:9C:C0:AC:D4:18:CA:47:2E:99
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 3346591003BD7148C3CD6DD763531C4907FC2BF7
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231382e302f32342d3234203d3e203532303733.roa
Signing time: Tue 30 May 2023 19:38:02 +0000
ROA not before: Tue 30 May 2023 19:33:02 +0000
ROA not after: Tue 28 May 2024 19:38:02 +0000
asID: 52073
IP address blocks: 83.150.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:46:59:10:03:bd:71:48:c3:cd:6d:d7:63:53:1c:49:07:fc:2b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: May 30 19:33:02 2023 GMT
Not After : May 28 19:38:02 2024 GMT
Subject: CN=DFBC961E0496B860D00F6E9CC0ACD418CA472E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:a0:b7:42:f5:a9:b2:e2:a9:ed:92:aa:d5:
68:6a:cf:39:15:54:01:88:04:95:be:5b:80:0f:cb:
19:23:13:d1:13:d6:32:af:7b:b6:8d:4e:4b:58:7e:
15:f6:c3:57:51:be:8e:3e:69:dc:79:dc:f7:c5:6d:
b4:e3:b1:46:b5:14:55:ce:4f:a5:2e:ed:b1:64:7b:
0a:fb:0a:3c:c1:ba:20:ca:b1:20:bd:2e:27:f1:22:
9a:e7:58:39:f4:24:e2:86:f1:4b:8d:76:e7:4a:33:
ca:b2:d0:85:fd:68:46:70:b8:46:c1:fc:0d:4e:b5:
1e:42:c7:61:c8:36:be:0d:ac:89:de:ca:37:91:cd:
e1:4f:75:60:39:73:69:43:16:42:89:4d:6a:d0:bd:
ce:10:03:34:1c:15:ee:a0:51:a0:f8:8e:92:4d:98:
af:f9:cd:22:20:c0:f8:d0:57:d3:f3:d1:4e:9d:cd:
cd:43:43:c1:3e:0d:bf:3a:84:cd:13:c5:d1:0c:f9:
e2:d4:f0:36:a8:19:1c:ea:01:79:5f:19:6b:04:c3:
8d:89:b6:8c:b3:f5:27:66:a7:85:e6:d3:d7:15:6b:
98:92:cb:e3:2f:c2:39:3d:d2:4d:72:1c:a2:01:d9:
7e:09:77:76:80:7f:cc:d6:b6:41:42:05:94:2c:0b:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BC:96:1E:04:96:B8:60:D0:0F:6E:9C:C0:AC:D4:18:CA:47:2E:99
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231382e302f32342d3234203d3e203532303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.218.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9e:26:5a:fc:86:65:47:31:53:5e:ba:87:68:17:6b:2d:cd:
94:1a:37:88:49:41:bf:b9:37:c7:10:93:4f:33:a5:a9:fa:44:
4b:81:87:01:7c:5c:8f:09:65:08:1b:f6:ea:f7:88:1f:50:52:
26:10:97:71:8d:94:a8:3d:a0:74:80:6f:2b:a4:a4:48:fc:39:
08:58:92:be:87:5c:7e:8a:b5:06:f5:ba:23:b3:d1:cf:0d:27:
3a:88:17:95:1e:cc:6b:0e:7e:95:2e:35:fd:ea:73:59:c4:0c:
58:73:a8:ce:03:ad:18:f1:e7:59:6f:ef:4e:c9:53:f2:74:2c:
45:af:99:10:d7:88:e6:a9:d9:30:e7:0e:84:9a:66:22:f7:f2:
db:e5:9f:4b:2b:73:bb:d9:07:23:5c:5d:00:21:5e:99:11:d7:
56:08:78:b3:b8:7c:d1:1a:0d:0b:9a:c3:f6:7d:d8:3c:9a:c2:
42:c9:a6:ac:a3:68:94:f7:1f:82:5a:80:b5:71:50:b3:72:7c:
5d:4c:8a:2e:f7:a0:4a:13:00:c1:c2:b2:40:3f:ff:86:a1:d4:
ce:03:8a:f4:54:3b:9f:6c:d3:64:7f:5d:01:58:08:8b:a8:d7:
60:5d:f3:1c:0f:fb:ac:11:b9:20:dc:e8:95:78:1c:91:bb:df:
5f:0d:0e:0c
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 6 11:20:08 2023 by rpki-client on console-ams.rpki-client.org