Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e203233343730.roa
File: 3138352e3231322e3131332e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: mAgBVWqtqshGPaARytvxWaYvGvMgHKH/EWuH3YzrgtM=
Subject key identifier: A6:10:2D:A2:9F:D6:36:46:FD:FF:C7:F6:12:8A:54:07:52:82:73:05
Certificate issuer: /CN=afb20114c4090291ec402479a620ddeae6bad620
Certificate serial: 62EE89BEAA573B3A9A32EF3FC1B0772C9EDDC531
Authority key identifier: AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e203233343730.roa
Signing time: Thu 04 May 2023 13:33:23 +0000
ROA not before: Thu 04 May 2023 13:28:23 +0000
ROA not after: Thu 02 May 2024 13:33:23 +0000
asID: 23470
IP address blocks: 185.212.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ee:89:be:aa:57:3b:3a:9a:32:ef:3f:c1:b0:77:2c:9e:dd:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb20114c4090291ec402479a620ddeae6bad620
Validity
Not Before: May 4 13:28:23 2023 GMT
Not After : May 2 13:33:23 2024 GMT
Subject: CN=A6102DA29FD63646FDFFC7F6128A540752827305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:49:96:bf:8b:e9:68:cb:6f:a3:19:d3:70:13:
97:ab:a1:1f:6c:bf:04:4c:3a:27:d0:4f:dd:7c:9b:
b7:74:7d:f9:3e:8b:94:4e:81:e6:67:5f:8f:b8:69:
3e:0e:b9:cc:17:6b:fb:42:8c:c2:30:99:45:d1:f0:
1c:8b:a9:49:90:93:21:2a:29:90:82:af:e3:da:2d:
a9:46:21:b4:86:9c:31:0d:5b:76:79:f2:dc:f0:4c:
fd:0c:b5:61:fb:04:47:94:dc:e9:63:72:bc:98:03:
1b:f5:19:29:77:5b:02:08:59:53:bc:24:33:54:16:
7c:1e:12:0e:0b:1e:07:76:5d:ac:2f:4d:04:2f:32:
89:80:2c:86:d3:8b:a1:67:40:0c:35:72:48:fd:84:
79:83:c8:41:ff:22:c2:5d:6a:63:25:df:e0:86:e4:
75:ae:6f:30:4d:6a:da:9e:65:7b:68:ce:ce:2a:da:
36:06:62:5e:23:c2:ad:fe:fd:70:a1:81:16:3f:cd:
1f:ee:6b:f2:31:c4:d0:76:6a:ea:61:bd:c0:c6:50:
3a:ee:3f:23:b7:e8:b2:5e:10:fb:e4:c5:8b:dd:18:
b9:42:f4:c0:b4:3b:72:8a:1f:1d:6d:54:0e:ac:f1:
5b:02:ee:73:ac:46:77:0f:4b:29:74:f3:bd:48:c8:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:10:2D:A2:9F:D6:36:46:FD:FF:C7:F6:12:8A:54:07:52:82:73:05
X509v3 Authority Key Identifier:
keyid:AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/AFB20114C4090291EC402479A620DDEAE6BAD620.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/3138352e3231322e3131332e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:5a:33:e6:0a:76:66:0b:84:a5:4a:8a:fe:0c:bb:b9:83:b1:
86:fe:4c:cc:4d:75:13:88:fe:1a:7e:85:f5:3d:29:c5:b6:d4:
bf:de:ee:45:8b:f7:3a:66:b4:b5:fb:0f:7f:3f:03:40:85:d2:
00:72:ea:5f:5c:67:e9:ea:fc:05:dd:12:b8:cf:e2:10:a7:ba:
fc:6a:fd:18:db:a4:9a:16:7b:51:f8:17:28:5b:fd:b9:89:ad:
0a:68:50:71:ee:5a:11:68:b7:32:27:bc:75:dc:34:3c:d0:a2:
00:0a:cc:11:a3:e0:6a:70:c9:4d:01:61:e8:a4:77:3f:4f:86:
cd:ca:06:46:ed:2c:5d:f4:e4:c6:4e:19:d1:32:26:7d:cb:46:
3a:62:9c:99:53:c0:ec:10:25:90:5d:e4:3a:21:5e:57:9b:ad:
a2:98:fe:8a:8b:5f:69:93:9e:6e:a0:5d:30:60:3a:9f:cd:e8:
4c:9a:69:79:53:14:47:13:ef:a1:6f:3c:78:30:71:8a:9b:c5:
c4:58:f5:5f:44:31:a6:36:4d:91:80:d4:46:dc:7b:a2:c8:65:
a0:54:3b:7f:72:89:85:76:3c:44:68:9e:20:d1:30:d1:cd:85:
9d:36:81:ad:0e:c3:ea:bb:10:c3:ed:46:1b:01:03:83:6b:64:
b1:b9:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org