Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e20323039333731.roa
File: 3139332e33302e3131372e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier: qB/sFZjB846aelE5oOJfqcB5QIWZyLySnScpThAniVo=
Subject key identifier: 6D:31:39:20:69:C7:D3:AA:DC:03:9A:EB:4F:7C:3F:6A:8F:F9:CC:3A
Certificate issuer: /CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Certificate serial: 106FACE69A64FE18A81C3ECC1619E18F1FE8C41C
Authority key identifier: 42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e20323039333731.roa
Signing time: Thu 30 Mar 2023 10:50:33 +0000
ROA not before: Thu 30 Mar 2023 10:45:33 +0000
ROA not after: Thu 28 Mar 2024 10:50:33 +0000
asID: 209371
IP address blocks: 193.30.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:6f:ac:e6:9a:64:fe:18:a8:1c:3e:cc:16:19:e1:8f:1f:e8:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Validity
Not Before: Mar 30 10:45:33 2023 GMT
Not After : Mar 28 10:50:33 2024 GMT
Subject: CN=6D31392069C7D3AADC039AEB4F7C3F6A8FF9CC3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:54:52:a4:36:a3:fd:fa:46:1e:9b:16:ff:6f:
97:36:51:c7:ef:3b:74:4c:0f:39:95:6d:d4:ea:93:
03:5e:28:4c:d0:bc:64:cd:44:35:0c:32:79:a2:00:
e5:bb:e0:55:49:fb:46:04:a4:b4:ec:8a:3b:cf:de:
fe:12:7b:20:40:91:a8:87:e0:99:ee:27:75:9b:a3:
71:42:e9:db:ec:60:ba:aa:a9:35:24:a6:7c:d1:ec:
96:f7:41:e4:06:db:5f:11:2a:e4:7c:a0:83:32:85:
de:d3:7d:93:ae:9d:68:b5:30:08:d7:36:7a:05:95:
c6:8a:88:2c:3d:75:a6:3f:60:5a:5e:d6:f5:df:8c:
74:95:45:13:36:68:da:37:4d:e7:5b:d2:dd:37:e7:
94:11:db:6f:99:ad:b2:8b:5d:b6:66:a6:b8:e3:eb:
76:22:74:31:0f:15:81:36:a1:74:da:31:c5:28:26:
6f:58:02:0e:6a:9a:f4:56:82:7c:a5:29:d4:ff:05:
20:a8:4a:8f:7a:60:2a:fc:cf:a9:27:bf:1c:7e:94:
5f:c0:ed:09:41:5b:77:7e:0f:1a:8a:a4:87:f3:8d:
2e:5e:81:d8:04:e2:f7:85:24:e8:9c:60:d0:07:08:
3a:2b:36:7a:25:2e:89:63:58:62:08:ef:f8:a0:77:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:31:39:20:69:C7:D3:AA:DC:03:9A:EB:4F:7C:3F:6A:8F:F9:CC:3A
X509v3 Authority Key Identifier:
keyid:42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/423F0571785ED23F10A6CC7B27AC1B1C8781A67A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e20323039333731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.117.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d2:31:a8:8f:8a:93:f2:1c:e0:9e:4a:0b:55:42:42:82:87:
74:59:1e:84:35:95:d3:b9:4e:5d:c5:db:0f:1e:e0:ce:65:2a:
24:ba:53:5b:ce:bf:1d:cb:2f:fe:75:61:40:12:db:02:ca:37:
a9:0f:07:3f:38:65:f7:60:3b:5f:a8:e4:73:f6:7d:c2:c4:5d:
06:c1:31:3a:cd:6b:d3:ba:ed:65:c0:94:df:95:c7:2d:b8:59:
94:15:e0:37:52:84:60:e4:8e:22:ca:36:30:39:eb:ee:f2:b5:
43:68:ce:36:d0:0e:ea:54:7a:48:28:40:d0:3a:87:55:87:8a:
49:83:27:90:c4:e8:00:fa:5e:cd:45:a0:33:d2:a8:31:98:c8:
3a:73:fd:e0:9d:78:83:1a:51:6f:dd:7d:d7:cc:bb:55:b0:bd:
57:02:52:32:1c:56:6e:35:d1:21:47:94:c5:9b:b7:4d:66:56:
df:98:4c:3f:4d:a7:a4:d2:4e:87:1c:72:9b:9a:6d:91:10:5e:
d8:31:2b:d0:0f:ca:d0:73:ce:ad:b2:f2:63:ec:a6:fd:ac:df:
d4:1f:e2:d7:e1:aa:ff:61:dc:4b:b5:77:d1:13:34:39:b1:c3:
d0:bd:21:4d:14:92:f1:b8:0a:5c:a3:7c:6e:b0:93:20:a6:e1:
eb:fa:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 22 00:42:32 2023 by rpki-client on console-fra.rpki-client.org