Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e20323131393336.roa
File: 3139332e33302e3131372e302f32342d3234203d3e20323131393336.roa (raw, json)
Hash identifier: kOgEQSIYkmwUsVINYdyXH4maqf7pPsELS6rJHb0dhh4=
Subject key identifier: 3D:92:9A:DD:B1:DE:A3:07:CC:C3:64:B9:F1:48:FA:24:8E:AB:AB:16
Certificate issuer: /CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Certificate serial: 12D6CA534C985529B9C63A6BEC348600F7BDD3B3
Authority key identifier: 42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e20323131393336.roa
Signing time: Thu 30 Mar 2023 10:50:48 +0000
ROA not before: Thu 30 Mar 2023 10:45:48 +0000
ROA not after: Thu 28 Mar 2024 10:50:48 +0000
asID: 211936
IP address blocks: 193.30.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d6:ca:53:4c:98:55:29:b9:c6:3a:6b:ec:34:86:00:f7:bd:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Validity
Not Before: Mar 30 10:45:48 2023 GMT
Not After : Mar 28 10:50:48 2024 GMT
Subject: CN=3D929ADDB1DEA307CCC364B9F148FA248EABAB16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:38:b6:64:5d:6b:0b:e6:30:66:8e:87:b5:
98:90:c2:ea:3f:ea:ab:13:93:1c:d2:9f:16:d4:a1:
dc:73:e2:da:7b:eb:1e:ca:5f:be:c3:a7:7b:52:e7:
eb:21:a1:58:a9:95:d2:1f:b1:1d:09:07:ec:dd:40:
e4:77:8d:c6:b3:aa:1a:5d:32:19:f7:a1:5b:40:bc:
cf:b7:f4:eb:55:62:98:1b:44:4e:71:c7:21:c5:d2:
03:c7:93:31:6f:4a:57:22:9e:50:78:8e:87:18:28:
0f:1a:90:b7:fc:7b:a1:5f:9c:b6:ad:f3:25:1a:21:
f0:10:b4:3e:48:35:24:70:3a:52:b8:c6:59:2e:29:
4f:f8:04:0d:21:91:ed:69:db:67:6e:a1:7f:3f:98:
95:a7:ff:84:70:fd:78:bf:78:cb:6e:c8:73:7d:10:
f6:f6:77:6b:00:b1:79:9e:b0:cb:ed:ea:c4:09:b8:
a7:37:ed:ce:d0:b5:68:03:13:20:a3:dd:cf:3a:fe:
8d:3b:bd:f8:a3:a3:19:bb:25:c0:b3:f6:9a:35:ca:
75:3a:03:37:83:c4:05:11:8d:1f:76:4a:41:d2:53:
fc:0a:da:85:e3:97:e1:c3:64:57:30:f4:84:d3:3e:
3e:06:85:3c:d4:11:87:ac:45:77:52:78:f8:08:75:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:92:9A:DD:B1:DE:A3:07:CC:C3:64:B9:F1:48:FA:24:8E:AB:AB:16
X509v3 Authority Key Identifier:
keyid:42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/423F0571785ED23F10A6CC7B27AC1B1C8781A67A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e20323131393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.117.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f9:97:a6:eb:24:d8:6e:44:16:39:da:b6:f3:d8:4f:0d:a2:
de:14:66:fa:aa:cd:f4:bc:6c:eb:6c:0c:4b:89:c0:91:e4:bb:
14:63:8e:b2:55:27:5e:71:65:df:4e:20:40:0a:93:85:f5:be:
8c:58:95:d2:11:ef:74:a8:98:16:d7:74:21:99:1b:6e:7c:75:
ea:a3:1e:f6:69:4e:03:f7:bc:4c:b5:f0:d5:9f:d4:5b:14:8f:
3e:73:83:6e:c8:19:02:2e:05:50:d3:36:4f:92:13:8d:a5:ff:
c1:e9:41:18:cd:5c:a7:96:06:38:3e:d8:35:b5:3b:9d:9b:ab:
3a:6b:13:a3:60:26:89:68:0a:0a:e2:38:97:8f:92:fa:4e:ab:
9d:5b:ee:91:36:d7:80:a5:c1:d0:e6:5d:ef:8d:90:b2:1c:c7:
07:c9:95:5e:d5:7d:34:1b:32:e9:19:32:de:08:7f:15:ed:57:
51:d3:7a:da:cd:97:95:8d:88:6f:ec:48:5d:e0:ae:60:ef:f9:
26:40:94:53:94:b7:69:ea:69:16:0f:fc:aa:ef:08:b4:58:cd:
5c:42:91:e5:da:33:a1:7f:16:06:9c:ec:c2:bc:af:74:61:48:
f9:72:01:be:0c:35:c3:19:7d:9e:c8:90:26:d7:f9:82:08:c7:
d8:cd:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 22 00:34:22 2023 by rpki-client on console-ams.rpki-client.org