Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32362e302f32342d3234203d3e20323036313530.roa
File: 3133392e32382e32362e302f32342d3234203d3e20323036313530.roa (raw, json)
Hash identifier: JEQstRHhZDHsba6FgyoZKGn6TM6n0ipxp6kKslM4dvo=
Subject key identifier: 29:2A:86:A6:AB:3E:19:49:E4:C3:0D:0C:5D:5A:98:9F:43:AA:7E:31
Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial: 230954FF761CBBF03EF1EAEDCB057D9FB4A4846F
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32362e302f32342d3234203d3e20323036313530.roa
Signing time: Fri 27 Oct 2023 14:01:24 +0000
ROA not before: Fri 27 Oct 2023 13:56:24 +0000
ROA not after: Fri 25 Oct 2024 14:01:24 +0000
asID: 206150
IP address blocks: 139.28.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:09:54:ff:76:1c:bb:f0:3e:f1:ea:ed:cb:05:7d:9f:b4:a4:84:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
Validity
Not Before: Oct 27 13:56:24 2023 GMT
Not After : Oct 25 14:01:24 2024 GMT
Subject: CN=292A86A6AB3E1949E4C30D0C5D5A989F43AA7E31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:d3:a3:e1:16:16:13:f7:4f:23:bc:8c:83:
f3:b7:30:bc:a3:f1:7b:4a:86:d9:4e:91:7e:11:74:
3f:8f:19:01:05:69:42:e0:14:5e:24:10:22:82:e9:
b8:4d:b7:d9:c5:a3:98:77:f9:2d:f4:2f:d6:41:3a:
58:d0:4a:03:c1:35:a4:bd:21:43:54:d8:7d:fb:10:
ba:d8:23:c9:6f:e3:09:cf:6c:9f:a0:92:33:ed:17:
72:24:2c:f1:5c:30:76:cb:4c:40:5f:f5:38:17:0d:
b2:76:d1:69:9e:4b:d8:20:78:28:21:3f:93:83:af:
9e:08:2c:a4:1d:7f:cd:04:5f:5a:11:c1:34:1e:e1:
da:ec:14:bf:ac:f7:f9:70:69:d1:0f:17:79:ba:99:
52:49:1c:e1:7c:cd:d5:61:34:87:c9:38:77:87:48:
a5:50:dc:f0:a0:b3:8d:cd:9c:b8:7a:ae:01:56:e2:
58:2f:91:3a:31:52:f1:bb:09:60:86:47:b1:36:ed:
24:52:f6:ff:7c:58:ab:68:d4:4b:10:d3:4d:d9:4d:
89:23:ca:4f:bf:83:b2:d2:ca:bc:3e:a7:7e:d1:86:
61:dd:3f:18:88:18:2a:5d:7b:69:ca:6f:75:27:99:
01:06:9d:d8:c2:50:96:e1:29:c3:82:ad:76:f8:07:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2A:86:A6:AB:3E:19:49:E4:C3:0D:0C:5D:5A:98:9F:43:AA:7E:31
X509v3 Authority Key Identifier:
keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32362e302f32342d3234203d3e20323036313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.26.0/24
Signature Algorithm: sha256WithRSAEncryption
73:46:8b:59:15:65:7d:7a:9f:e9:33:2c:9f:b0:4d:27:d3:f8:
7d:4e:e9:ac:f0:fe:fa:ea:c1:49:3c:b5:df:43:48:11:d1:7b:
e5:69:bd:fa:fc:22:6c:89:f1:a8:bd:10:ed:a9:8f:0e:37:0f:
e0:5e:aa:49:fa:e9:65:d8:28:7b:72:d4:18:c2:fb:2e:cd:05:
7a:96:40:1c:2c:84:10:1f:6a:04:f7:87:e0:b4:52:91:00:4d:
c9:7d:bf:13:3d:bf:9c:a1:e6:4d:5a:09:86:b2:9e:dd:ac:8b:
d2:38:fa:41:bd:f4:d2:95:aa:f2:61:21:e8:ef:96:ff:38:ee:
d5:19:dd:d1:31:f6:bd:ef:96:e6:fb:7c:b4:7d:37:b4:4a:a6:
33:e0:bf:50:c5:67:e8:08:09:6f:d3:d1:b7:b8:9e:74:65:ec:
60:56:0c:41:21:33:a0:fd:19:27:35:1e:b6:4f:b5:35:ed:61:
6d:ca:79:21:34:33:f2:f5:d1:96:ef:38:90:6d:ea:56:b6:09:
0a:7e:a2:d0:e4:39:61:ca:54:fa:6e:cf:2b:3b:4a:be:bd:11:
f4:70:50:73:10:63:89:76:20:1f:d1:ad:6e:11:25:84:a0:6f:
df:e8:77:c4:2b:92:de:ff:af:63:09:c3:68:30:d7:f1:1d:e0:
a7:0d:af:3f
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 30 08:10:39 2023 by rpki-client on console-fra.rpki-client.org