Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e20383334.roa
File: 3134362e31392e32332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GC/YuXrEZCu2OaTZgw3XbUaPFSunU2yizCZcRg4MhMw=
Subject key identifier: AB:77:DD:62:BD:9C:5A:05:4A:E1:AA:83:8E:C0:B3:26:5F:92:E4:25
Certificate issuer: /CN=493377f0bd467548da4ccd542329a7156b8972a2
Certificate serial: 58B8819EE78302136A38790797FFB948B02792E5
Authority key identifier: 49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e20383334.roa
Signing time: Mon 16 Oct 2023 11:00:06 +0000
ROA not before: Mon 16 Oct 2023 10:55:06 +0000
ROA not after: Mon 14 Oct 2024 11:00:06 +0000
asID: 834
IP address blocks: 146.19.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b8:81:9e:e7:83:02:13:6a:38:79:07:97:ff:b9:48:b0:27:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493377f0bd467548da4ccd542329a7156b8972a2
Validity
Not Before: Oct 16 10:55:06 2023 GMT
Not After : Oct 14 11:00:06 2024 GMT
Subject: CN=AB77DD62BD9C5A054AE1AA838EC0B3265F92E425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:32:af:d7:b7:da:89:e7:28:85:8d:fd:49:fc:
40:06:52:e3:fc:4d:8e:9f:d6:a8:5c:b2:e5:cd:6b:
d3:36:d7:b7:af:a6:e9:39:54:8a:dc:7b:45:ad:84:
ff:1f:3c:64:b2:9d:a5:2f:90:b0:50:79:6b:61:e1:
aa:86:7e:63:97:0b:08:ac:24:bf:a0:57:d8:6f:f2:
ff:fc:73:fc:ab:64:99:57:51:b9:21:ae:a5:24:a9:
a6:91:cc:e9:fc:7c:7e:ac:12:0c:63:9b:35:68:53:
d1:ac:84:b4:2c:36:fc:2a:c0:1c:97:98:00:e7:99:
1b:d8:a0:6f:76:a9:4b:fb:f2:cf:43:ae:ac:f8:59:
7e:0c:9a:7b:70:13:a9:d3:51:9f:32:b0:4e:51:08:
02:85:27:f2:8a:ef:0d:9e:22:23:b2:9b:35:a6:20:
b9:35:0e:dd:1b:d9:58:f4:bf:2b:e7:cb:37:99:0f:
d8:c5:90:1f:28:7a:34:0a:47:07:a7:41:2b:5f:a6:
b4:d3:db:95:a9:6a:eb:b7:89:c2:5e:f6:c7:64:64:
28:56:96:a8:be:4f:78:60:30:ff:0b:7d:ab:d3:7b:
26:2f:16:f8:2c:3e:90:21:ab:bd:f6:bb:a0:77:d0:
1e:6c:2d:4d:33:c6:c7:37:b2:12:d4:84:d6:54:91:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:77:DD:62:BD:9C:5A:05:4A:E1:AA:83:8E:C0:B3:26:5F:92:E4:25
X509v3 Authority Key Identifier:
keyid:49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/493377F0BD467548DA4CCD542329A7156B8972A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c7:45:c1:a0:54:a5:73:dd:a2:62:5a:b1:17:03:9c:26:eb:
3d:ef:7e:51:74:44:10:eb:cc:ba:1d:1d:9e:05:79:48:23:94:
f8:63:72:af:97:27:12:09:79:e9:6b:19:38:60:5e:f6:ff:62:
9d:cc:a1:23:52:f9:ae:c8:9c:2f:2d:5f:7e:47:ba:6d:92:5d:
54:14:00:27:43:a6:f9:95:ef:9b:fb:71:1a:e0:d3:0a:64:fc:
33:0d:19:02:38:0a:da:1c:c8:ac:92:9e:74:d6:db:0b:1e:65:
e5:8b:c3:a6:7a:10:db:93:93:ea:cf:7c:82:9f:fe:4f:d0:6a:
6c:e2:dd:56:e1:f5:32:13:be:2f:f3:17:89:ba:c1:85:08:03:
27:6d:bb:c9:34:5f:e0:6c:d2:67:3c:a0:d3:e9:ae:af:96:83:
db:4f:bc:cf:b9:9d:af:9a:94:fc:e6:5e:21:94:41:fe:a3:be:
2e:89:a8:c8:9d:e9:7f:12:82:1d:e9:af:89:41:8c:d1:0d:33:
d7:c1:6f:98:d7:57:d5:29:c2:2d:71:34:d3:06:14:97:e3:ab:
e0:70:6d:99:c2:6b:bd:39:3f:b5:c8:12:c4:08:f5:98:fe:95:
78:3c:f2:da:b0:35:cc:67:f3:b2:25:2a:01:de:ce:0f:6d:76:
72:e7:34:f9
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 19 10:19:22 2023 by rpki-client on console-ams.rpki-client.org