Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139302e39322e3136382e302f32312d3234203d3e20383334.roa
File: 3139302e39322e3136382e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: sxRMZhY5LeKAqalgpd1rO8b3uebh7IRJVC4Wjeri/ks=
Subject key identifier: 7F:48:79:82:A8:3F:EB:C6:01:D5:52:AF:14:D6:41:79:C8:3D:20:EC
Certificate issuer: /CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Certificate serial: 241B39259F581B0FDC2D91660EEB8A810CE74338
Authority key identifier: 42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139302e39322e3136382e302f32312d3234203d3e20383334.roa
Signing time: Sat 15 Jul 2023 00:00:30 +0000
ROA not before: Fri 14 Jul 2023 23:55:30 +0000
ROA not after: Sat 13 Jul 2024 00:00:30 +0000
asID: 834
IP address blocks: 190.92.168.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1b:39:25:9f:58:1b:0f:dc:2d:91:66:0e:eb:8a:81:0c:e7:43:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Validity
Not Before: Jul 14 23:55:30 2023 GMT
Not After : Jul 13 00:00:30 2024 GMT
Subject: CN=7F487982A83FEBC601D552AF14D64179C83D20EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:49:76:13:47:ac:ae:13:2c:6c:a1:c8:5e:
d2:47:d4:91:b1:a5:54:09:f2:24:44:0b:39:19:6e:
e6:f8:87:d8:a6:87:45:7b:ec:8a:a6:09:06:62:0b:
98:6c:20:1e:b7:2a:1d:36:12:17:39:72:ee:40:5d:
94:d6:44:d5:ad:b0:03:4e:c5:97:07:37:a3:21:07:
23:6b:48:31:ba:a9:6b:18:67:48:a2:39:de:ba:76:
8b:84:fd:bc:a2:b2:57:3d:0d:2e:3b:ab:53:7a:61:
a0:61:50:a1:88:ea:6f:3b:34:17:ba:ca:ad:8b:84:
9a:0a:6d:43:27:e0:97:bd:8d:26:a0:83:b9:d4:4e:
c2:8f:34:77:09:84:a0:7b:65:cc:97:2d:f8:d5:01:
cc:c9:b8:b9:e1:3f:a7:65:3a:b7:f6:51:94:56:b7:
cf:e4:d2:f1:56:d7:8a:89:20:a2:c6:3b:ec:21:c5:
df:3d:a8:56:c2:8f:3f:1c:9b:2a:20:06:ec:b2:a2:
3b:42:8b:c9:82:aa:90:d9:03:12:a7:b5:b8:56:8f:
a2:b0:02:4a:48:87:fa:26:60:c0:c5:da:c4:b1:3e:
07:e7:d6:ca:e6:e4:5b:ec:96:c7:4d:8f:5d:05:3c:
56:5d:56:3c:f4:04:ce:ee:0f:a4:6c:7d:a2:c5:21:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:79:82:A8:3F:EB:C6:01:D5:52:AF:14:D6:41:79:C8:3D:20:EC
X509v3 Authority Key Identifier:
keyid:42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/423F0571785ED23F10A6CC7B27AC1B1C8781A67A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139302e39322e3136382e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.92.168.0/21
Signature Algorithm: sha256WithRSAEncryption
32:a6:6b:fa:fe:f2:0a:1e:fa:3a:4d:d4:d6:8b:b0:8f:ce:b6:
f3:93:d2:81:d1:44:f2:d7:2b:2b:a3:5b:02:8c:14:ee:ba:83:
44:1d:5a:b6:6b:e3:99:73:1c:e0:74:a5:cc:e0:d9:5c:1d:f2:
62:d4:79:fe:87:04:63:5f:04:dc:f9:b0:0d:ab:68:2b:2b:12:
e3:32:ce:25:ab:20:a5:95:4b:68:c1:15:af:d5:25:ee:c1:d4:
21:10:aa:fd:84:97:98:bd:c3:9a:cb:d3:aa:d1:91:ed:c6:c3:
1a:04:fb:1a:f2:5b:30:c5:df:f4:26:c3:eb:fa:bd:0d:09:fa:
d1:14:88:3e:33:e1:62:9d:08:2c:0d:71:d1:2a:fd:85:df:a0:
84:f0:05:40:d2:5e:83:c9:c4:4c:83:0a:e7:47:d0:32:20:31:
f2:88:ce:d0:a4:b5:df:c6:e5:8a:0b:06:4f:35:e6:d1:39:6f:
b2:ab:c9:73:df:17:3a:1d:1e:fb:df:3a:eb:14:91:21:98:c3:
fe:e2:ec:3f:89:f8:13:6d:c1:d7:e3:cc:16:76:ce:af:d5:36:
24:aa:03:c1:2d:9a:66:6d:a5:aa:93:e3:2b:db:6f:f7:d3:2d:
e4:a3:eb:c3:80:a3:24:54:b4:9f:d6:e4:ee:54:ae:e3:c8:27:
c4:bd:54:ff
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 29 11:49:49 2023 by rpki-client on console-fra.rpki-client.org