Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e2037303138.roa
File: 39312e3233352e3230352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: fS5VyLLOB1cCSKR5S5dg6ZNGKOHzS9SYBzNS+TTi1x4=
Subject key identifier: C1:A7:21:EE:1D:0D:B4:FF:2B:BA:BD:AD:6C:91:BC:72:8E:05:B1:77
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 44212FEEEB4D8E0D074A9A74DEF009B1F21E461A
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e2037303138.roa
Signing time: Thu 01 Jun 2023 18:45:38 +0000
ROA not before: Thu 01 Jun 2023 18:40:38 +0000
ROA not after: Thu 30 May 2024 18:45:38 +0000
asID: 7018
IP address blocks: 91.235.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:21:2f:ee:eb:4d:8e:0d:07:4a:9a:74:de:f0:09:b1:f2:1e:46:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Jun 1 18:40:38 2023 GMT
Not After : May 30 18:45:38 2024 GMT
Subject: CN=C1A721EE1D0DB4FF2BBABDAD6C91BC728E05B177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:e9:28:ac:90:84:46:3d:1e:7a:d4:f0:fd:
ae:d2:54:01:d7:fc:0c:4e:4e:86:0b:c1:12:03:c7:
c9:a1:5b:4b:78:6f:95:0b:b5:8d:52:4f:0e:62:ce:
6f:c6:a8:97:5a:8e:9b:e3:45:8a:18:a8:44:8d:fc:
ef:4a:6f:2d:58:c6:a2:dc:1c:67:b7:90:16:d1:97:
b4:2d:84:63:f5:11:57:1a:fc:d2:6a:98:ec:49:7c:
74:98:e7:4f:2b:60:e9:9c:70:fe:9b:65:e5:2e:60:
c2:0a:95:7b:93:b5:e8:18:5b:be:9f:b0:bc:62:04:
b0:04:b6:c1:6a:61:50:48:08:5d:d7:96:78:e1:58:
5a:ac:40:be:69:a9:16:9d:96:69:1f:f1:c8:45:bb:
d6:b6:ac:b1:ba:69:48:49:fb:52:d2:ca:d1:2b:f1:
ac:53:f2:2c:c6:ab:8c:81:61:83:b5:07:99:f9:40:
78:b1:90:bf:5b:05:55:a7:be:f9:f8:03:e6:de:ac:
45:1c:ac:d6:05:58:fe:43:36:3d:f8:cd:8b:63:06:
1d:fc:21:f9:f9:6c:cb:69:6a:24:06:81:89:d1:b2:
75:03:a4:80:23:21:ad:b8:9c:05:ce:3d:47:2c:94:
57:85:ad:46:a3:06:cd:1e:f5:2a:22:9a:e7:67:e0:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A7:21:EE:1D:0D:B4:FF:2B:BA:BD:AD:6C:91:BC:72:8E:05:B1:77
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.205.0/24
Signature Algorithm: sha256WithRSAEncryption
27:14:a0:b9:6b:1a:1c:77:e0:66:e4:09:ee:ef:67:79:47:f4:
a7:d3:f5:f1:0b:cb:e3:b7:f3:f7:91:33:a6:fc:78:88:e8:5b:
83:7a:3e:d9:a6:12:e0:9a:aa:5b:8f:9f:82:a2:43:76:50:54:
91:0e:c4:6b:e9:b8:d2:d4:a9:4c:7a:60:51:14:28:8e:6a:d5:
0b:fd:4b:e3:04:f8:32:fc:bf:07:f1:9d:11:69:4c:3b:43:de:
1f:c5:7f:85:5d:50:40:fb:96:91:b4:ef:5c:e8:92:28:de:0a:
e1:84:e4:81:80:88:18:2d:84:39:90:df:8c:41:e0:5f:c3:73:
d9:45:15:7f:4b:3f:13:97:8c:9f:f4:51:0a:86:b0:d4:1b:14:
52:82:6d:33:e7:70:c3:16:ee:e8:d5:1e:f4:e4:fb:c2:92:9e:
fe:0a:d1:8d:f7:34:b1:6e:0e:ba:e6:95:4f:69:6a:68:3a:e4:
9e:20:de:25:6d:df:06:67:fb:64:1c:ab:9a:52:ca:96:6c:4c:
ff:6f:40:47:f5:a9:c7:ae:26:93:71:43:69:5c:a4:da:66:f6:
22:bd:cc:82:30:16:d4:16:c5:11:8d:ff:08:cb:be:55:9b:94:
cb:a5:39:27:4f:22:6b:73:44:94:51:ba:a8:21:b3:90:d3:1d:
e7:5f:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org