Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e203136353039.roa
File: 3138352e3231322e3131332e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: RawcIsu21bZWyLHQeWVnjgS6ipKQYfH/bFrV0RnJ1dc=
Subject key identifier: 69:B7:27:4B:37:65:3A:90:11:1D:5E:D2:29:B9:06:4F:B3:36:7E:55
Certificate issuer: /CN=afb20114c4090291ec402479a620ddeae6bad620
Certificate serial: 4821585EC12D17B01EFBC8BF0BE9F924BF436DFC
Authority key identifier: AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e203136353039.roa
Signing time: Wed 22 Mar 2023 19:53:26 +0000
ROA not before: Wed 22 Mar 2023 19:48:26 +0000
ROA not after: Wed 20 Mar 2024 19:53:26 +0000
asID: 16509
IP address blocks: 185.212.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:21:58:5e:c1:2d:17:b0:1e:fb:c8:bf:0b:e9:f9:24:bf:43:6d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb20114c4090291ec402479a620ddeae6bad620
Validity
Not Before: Mar 22 19:48:26 2023 GMT
Not After : Mar 20 19:53:26 2024 GMT
Subject: CN=69B7274B37653A90111D5ED229B9064FB3367E55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:ef:f1:3f:df:79:63:2f:45:14:04:be:58:
05:69:6e:6c:e0:92:24:6d:9a:fd:7c:50:88:6c:09:
78:0c:3e:95:60:ea:46:91:43:00:91:35:e6:da:62:
37:87:07:f8:a3:89:d9:67:c7:5f:b3:7c:3e:7b:cd:
20:b6:2e:15:ef:98:4b:fe:61:69:86:67:d8:1c:b1:
ac:69:21:53:49:23:1f:2e:0e:64:80:98:f9:4a:02:
63:a0:84:f9:06:34:7d:85:ee:d8:74:79:9b:a9:5a:
4d:e6:fc:53:97:05:6c:f5:aa:85:d8:0d:15:02:e8:
ce:32:7b:e1:26:db:2c:9a:06:10:1b:ef:7b:9b:1d:
0e:11:2c:fa:51:a5:05:3d:cd:5e:07:d1:c6:ae:1d:
cc:b0:c1:6f:81:a1:51:d1:64:f1:d1:7d:30:4c:77:
a6:71:2b:40:57:b7:7f:93:2a:15:e4:90:7e:d2:14:
05:b1:71:b5:bd:fc:2d:0e:27:de:ad:2a:05:45:0d:
d5:8a:c6:2d:cf:89:16:57:17:d6:ee:9b:27:62:55:
64:08:f8:ac:fd:87:f0:54:f2:dc:35:4a:1b:68:18:
7f:83:27:ca:8c:a2:db:a6:36:5c:54:f6:20:1a:35:
6d:bb:fd:50:80:91:47:7a:97:a4:84:51:98:2b:e5:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B7:27:4B:37:65:3A:90:11:1D:5E:D2:29:B9:06:4F:B3:36:7E:55
X509v3 Authority Key Identifier:
keyid:AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/AFB20114C4090291EC402479A620DDEAE6BAD620.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
59:88:ed:24:66:f1:0d:05:e3:23:40:7d:f3:33:a8:ef:ff:da:
ef:9c:e3:52:14:30:43:e8:04:c1:b8:f4:0c:8a:85:8a:d4:20:
de:6f:16:75:61:8d:be:85:0f:d8:d0:c2:7e:31:31:e5:16:41:
d9:f1:d4:ed:fe:46:fe:bb:d3:6c:e7:21:e9:30:f5:bf:b9:6b:
f1:f8:a9:9c:ba:27:44:de:9a:f2:7c:10:7a:a4:1f:b7:f4:04:
27:b9:ea:86:a8:0f:24:64:30:84:d6:ca:62:78:86:3b:1e:bd:
3e:dd:b7:4a:2c:78:95:4c:9a:35:e8:f2:f1:7d:36:f8:92:ab:
88:5b:59:45:93:64:95:b9:85:58:79:3f:13:b2:cf:19:28:d4:
08:c8:b4:b9:73:11:2d:b0:34:98:36:3c:e9:d0:66:c7:ea:f2:
14:14:d6:c9:81:7e:9c:0f:fc:3a:ba:0d:5c:6e:dd:1f:39:ce:
c6:1d:59:01:d8:21:9d:74:2e:86:a2:15:1c:d9:47:f9:2f:3a:
f6:18:9e:0b:e5:89:f6:9a:77:3a:06:52:cd:2c:ac:2d:08:61:
e1:dc:29:5e:ef:da:09:50:0e:1d:d2:57:5b:e8:1a:47:8b:e6:
e9:e5:18:2e:2b:f2:4e:6e:95:d5:65:85:d3:57:c0:77:ab:4e:
dc:f6:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org