Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e2035303839.roa
File: 3139332e33302e3131372e302f32342d3234203d3e2035303839.roa (raw, json)
Hash identifier: wlUaO1D0jo4B7Tr2ggFMhq4CTfo/watOX7jCDs9M158=
Subject key identifier: 95:DD:AA:C9:A6:8D:31:E2:13:0E:21:8A:ED:F9:CB:3A:B3:52:1F:C8
Certificate issuer: /CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Certificate serial: 3355EEE72ADA528003ACDA1329997E3D2F8090A1
Authority key identifier: 42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e2035303839.roa
Signing time: Thu 30 Mar 2023 10:50:23 +0000
ROA not before: Thu 30 Mar 2023 10:45:23 +0000
ROA not after: Thu 28 Mar 2024 10:50:23 +0000
asID: 5089
IP address blocks: 193.30.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:55:ee:e7:2a:da:52:80:03:ac:da:13:29:99:7e:3d:2f:80:90:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Validity
Not Before: Mar 30 10:45:23 2023 GMT
Not After : Mar 28 10:50:23 2024 GMT
Subject: CN=95DDAAC9A68D31E2130E218AEDF9CB3AB3521FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:9a:ef:d8:f1:7e:75:bc:73:96:2d:54:6a:
72:a0:07:5a:a6:89:a3:d0:63:cb:87:64:95:45:85:
17:f0:6c:d2:85:1a:80:b8:12:4f:03:bd:8d:d6:f4:
84:b0:0b:ac:ea:b0:f4:7c:ae:94:e4:4b:ff:56:b3:
7a:4e:69:f6:74:65:b6:c0:76:5a:79:11:15:7a:8f:
d8:7a:cb:8d:64:e5:aa:d1:2d:3a:c5:6a:fa:45:8b:
b2:96:fe:6f:0b:eb:26:a8:1c:f4:ba:99:2c:54:64:
b5:84:68:57:9f:90:d3:05:49:64:9a:15:a3:59:d0:
12:0a:09:03:70:67:73:49:bf:64:1b:ae:32:43:9a:
16:da:05:73:f6:71:99:fe:08:14:5c:54:59:5d:91:
16:14:5c:9a:cd:82:0e:6f:5d:b1:1e:f3:ac:cd:08:
ed:d5:26:f3:dc:b2:82:c6:7c:06:e7:de:3f:79:64:
bc:d0:57:2a:0f:e6:26:0f:1e:93:fc:b5:ed:f0:83:
7c:ef:30:89:37:58:89:0d:e6:29:aa:7f:f8:8d:24:
f3:d6:39:27:da:27:3d:14:f5:e4:b8:42:51:16:18:
b2:27:b0:23:9b:f6:c1:30:e3:01:1f:53:ef:eb:d0:
4c:86:36:8d:d9:97:f2:78:ee:48:27:7c:0b:d8:95:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DD:AA:C9:A6:8D:31:E2:13:0E:21:8A:ED:F9:CB:3A:B3:52:1F:C8
X509v3 Authority Key Identifier:
keyid:42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/423F0571785ED23F10A6CC7B27AC1B1C8781A67A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e2035303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3f:ad:79:13:0d:19:cf:71:6e:1e:94:34:73:f9:26:b6:57:
cd:05:86:5b:ba:36:c9:41:59:64:8f:a3:ae:c5:9f:d9:dd:71:
4e:6e:e2:0e:c2:89:0f:82:6b:94:c2:28:fc:d9:b2:fc:b6:64:
1d:0b:9f:13:a2:bf:04:46:fd:3b:8b:5c:57:c0:be:c6:dc:49:
72:b6:4a:60:d3:29:b3:a8:40:8a:14:be:f4:66:fc:16:ef:a9:
28:09:6e:0f:7b:2d:dc:ae:1e:09:9c:ee:c3:7c:22:05:8a:31:
32:da:25:fe:74:91:36:e4:80:ee:01:33:8c:35:b1:51:7a:9e:
eb:06:42:30:e9:ff:27:f3:37:c1:9a:f3:6d:fe:f8:a3:a8:40:
75:6c:1f:ab:c5:42:8a:02:2a:cd:84:a5:b6:48:c6:4f:26:70:
1c:f7:71:bf:86:cd:94:e9:db:2e:fe:68:b6:03:37:ae:3d:c5:
6a:11:b6:56:22:94:6b:f3:d3:15:27:30:a3:91:28:b5:eb:cc:
a3:eb:38:87:9f:41:de:4e:61:61:41:ee:0d:02:cb:d7:79:1f:
53:f0:68:99:30:ed:63:80:3c:71:42:38:6c:53:d4:82:bc:be:
3f:d5:80:d6:7e:54:be:ea:39:61:17:23:85:73:d2:67:46:f6:
19:ce:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 22 00:34:22 2023 by rpki-client on console-ams.rpki-client.org