Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e20323132303237.roa
File: 3134362e31392e32332e302f32342d3234203d3e20323132303237.roa (raw, json)
Hash identifier: a31gQffC3o1Bvj7vkiBtcCcQFqjNR2QJwLwExXW9ozc=
Subject key identifier: 7D:F8:A0:C9:A3:59:BD:DC:08:66:B2:0E:21:4C:E1:EA:8E:00:9F:89
Certificate issuer: /CN=493377f0bd467548da4ccd542329a7156b8972a2
Certificate serial: 49D760E313E02B3A04C50CBA7D9E29226F1A9C44
Authority key identifier: 49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e20323132303237.roa
Signing time: Fri 06 Oct 2023 19:40:05 +0000
ROA not before: Fri 06 Oct 2023 19:35:05 +0000
ROA not after: Fri 04 Oct 2024 19:40:05 +0000
asID: 212027
IP address blocks: 146.19.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d7:60:e3:13:e0:2b:3a:04:c5:0c:ba:7d:9e:29:22:6f:1a:9c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493377f0bd467548da4ccd542329a7156b8972a2
Validity
Not Before: Oct 6 19:35:05 2023 GMT
Not After : Oct 4 19:40:05 2024 GMT
Subject: CN=7DF8A0C9A359BDDC0866B20E214CE1EA8E009F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:00:6c:ef:30:42:91:f1:30:e5:31:54:81:
ad:68:a6:c3:80:a1:dd:56:74:67:61:6e:6b:1b:7c:
65:c6:84:18:a6:35:08:3b:99:91:0b:4f:b2:e4:6d:
ae:cd:af:c6:f6:86:91:5e:ea:d9:fa:29:b6:2a:1c:
54:bc:5b:c1:27:f4:c9:e5:e8:e0:d1:26:c6:54:f4:
5c:01:96:96:93:08:2a:f8:06:3e:55:8e:0d:92:c6:
23:04:58:79:ed:5a:0c:a7:82:d6:2d:3e:8b:51:bb:
e6:27:1c:29:90:8a:06:0d:d6:cc:b9:3f:7d:7c:7f:
57:e1:39:b0:41:7b:cd:5b:c6:d4:18:07:fb:4d:e9:
c5:db:45:0b:c1:ea:11:cc:b7:f2:d5:1a:58:5e:96:
b0:83:0f:14:7e:ee:c3:78:36:4e:4d:5f:2f:34:5c:
43:8f:da:4a:e0:60:cf:87:9f:f8:88:61:b5:fe:d0:
95:d6:4b:24:29:44:a1:0b:e0:e8:fb:e0:80:98:38:
7c:b4:47:a9:11:d8:7a:05:ea:ac:5e:f7:a8:4c:f1:
fa:4a:4b:83:51:dc:5b:de:f8:2f:c7:86:e7:7e:77:
54:c1:7d:02:86:09:8b:24:e9:15:28:b5:5a:d3:5f:
71:2a:1a:e7:9e:73:24:7c:24:8b:9c:9b:a7:87:05:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:A0:C9:A3:59:BD:DC:08:66:B2:0E:21:4C:E1:EA:8E:00:9F:89
X509v3 Authority Key Identifier:
keyid:49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/493377F0BD467548DA4CCD542329A7156B8972A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e20323132303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:28:23:30:ee:98:11:da:39:7a:68:3a:58:ad:15:a7:b4:3e:
a3:a4:d7:a0:6f:15:b1:07:21:28:bd:3e:7f:f0:22:05:90:8d:
8d:d2:c1:0a:8e:3a:00:fd:76:30:d6:a8:a8:7c:ce:1a:9d:b2:
4e:9a:b4:46:c3:60:f2:6c:7d:8f:10:ab:45:7f:cb:0c:86:e6:
fc:3b:22:15:cb:49:01:d7:02:8d:e2:6e:94:62:19:1e:4d:13:
49:f3:19:6f:ac:62:e6:de:92:9f:c6:47:19:65:78:6c:25:74:
1b:d9:38:ba:d5:3c:df:78:17:44:25:bd:a3:78:12:3f:ae:fe:
4d:0f:f5:44:85:d0:d4:63:00:ff:d0:69:79:e4:88:06:43:16:
5d:d9:da:d4:a8:8e:f8:25:43:d4:2c:1b:08:8b:a7:26:79:33:
c1:2e:e8:0d:7f:55:c0:a7:b1:83:9e:fe:b1:04:04:d8:06:a8:
2d:1b:45:81:b9:2d:77:fa:8d:fe:62:c0:ed:78:b7:bb:3b:f1:
96:60:f7:3b:ef:c7:41:de:f7:20:1c:f9:70:4f:c9:a7:f4:e0:
35:ce:9a:d9:3d:91:a9:76:fd:38:b5:c3:dc:68:53:36:77:4b:
f3:1e:6a:e9:f0:f0:3b:0c:d2:ee:03:ca:f4:f0:32:61:2a:58:
28:90:36:d5
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 16 11:27:35 2023 by rpki-client on console-fra.rpki-client.org