Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32332d3234203d3e203439363038.roa
File: 3138352e3230352e3232302e302f32332d3234203d3e203439363038.roa (raw, json)
Hash identifier: xkRZzFAFcNcSCd3/uAy0jbG7QLN9c5ewR/t7yeAYGfo=
Subject key identifier: F9:04:66:97:28:05:EC:41:3D:90:9F:83:B6:B3:5E:18:DD:02:7C:38
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 210C287CE49F5AEDBF39B1D453267277C129327B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32332d3234203d3e203439363038.roa
Signing time: Wed 29 Nov 2023 18:45:13 +0000
ROA not before: Wed 29 Nov 2023 18:40:13 +0000
ROA not after: Wed 27 Nov 2024 18:45:13 +0000
asID: 49608
IP address blocks: 185.205.220.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:0c:28:7c:e4:9f:5a:ed:bf:39:b1:d4:53:26:72:77:c1:29:32:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 29 18:40:13 2023 GMT
Not After : Nov 27 18:45:13 2024 GMT
Subject: CN=F90466972805EC413D909F83B6B35E18DD027C38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:be:53:66:69:5e:d6:e8:32:51:20:f4:02:
73:8c:b0:b6:ab:29:d2:eb:84:ea:33:0c:da:b7:c4:
63:83:00:b1:c9:59:50:66:f9:6f:13:cd:15:b3:7d:
d8:b4:6a:62:69:7b:c4:25:61:4f:db:4e:ab:f0:2c:
cd:e8:9c:7c:a3:94:15:59:84:64:54:3f:6c:3a:c0:
dc:16:85:3e:2c:b3:95:bb:5d:a2:37:8e:76:ec:da:
ca:d2:63:1e:1a:c9:81:66:b5:c4:5b:20:2b:74:6c:
ed:68:1d:ed:d7:11:e3:80:78:ee:5f:cb:bd:55:d1:
d1:15:cf:d1:2c:7f:0e:c7:74:be:ae:29:47:de:30:
39:c4:fb:b6:ce:02:26:42:9e:5d:94:6d:b1:8e:b7:
75:41:f6:eb:bb:00:93:d2:77:cb:a9:f4:f1:19:1f:
c5:35:3b:1e:fa:f2:9b:ef:72:83:0e:6c:cd:43:97:
e9:9b:32:f4:bf:a2:63:65:06:5b:3d:16:d5:f2:c8:
84:e3:c6:22:54:3e:a6:30:a0:8c:0f:7d:74:18:cc:
47:48:74:3e:6c:6a:3b:ad:82:71:74:b6:5a:33:f3:
b8:28:cb:2b:60:df:14:a4:b2:5a:43:94:54:2c:cf:
d7:17:2e:bb:dc:3d:6a:bf:ec:0d:0d:41:39:d6:c4:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:66:97:28:05:EC:41:3D:90:9F:83:B6:B3:5E:18:DD:02:7C:38
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32332d3234203d3e203439363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.220.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:c7:ba:7c:bb:29:9f:8e:75:49:69:e1:13:19:e7:64:8f:94:
8e:09:94:9a:d7:37:1a:ee:51:94:14:3f:d8:6e:77:f6:aa:0c:
a6:4e:39:ed:e8:1d:e8:a1:59:0b:d6:d5:c6:f5:d3:2e:c7:75:
c8:dc:10:1d:e6:da:59:4e:c8:dc:52:3c:46:82:13:48:8b:5e:
73:6c:1e:e1:cb:f8:49:25:6e:94:a8:47:74:cb:15:08:01:a2:
26:59:21:79:d3:84:f4:9d:43:38:b9:c6:4c:72:63:dc:12:9e:
58:ba:35:fd:b5:e0:eb:bd:7e:a7:8e:a5:2c:3b:84:d2:e7:67:
67:ae:0b:50:79:73:c5:e5:e0:42:f6:b3:91:bb:81:20:cb:1d:
b8:7b:8f:41:e0:68:a4:41:f1:f5:fa:2e:ef:16:f5:e5:b8:d2:
6b:0e:b8:16:61:b6:1a:c9:bc:01:dc:94:06:f3:47:14:2e:44:
21:60:e5:e9:66:ae:85:ce:61:2a:bf:8d:f3:9e:68:2b:25:3d:
3e:77:2b:2d:96:9a:bf:99:62:db:7b:04:d2:4d:60:83:25:95:
4e:ab:af:5a:1f:11:0f:12:20:32:37:80:06:4b:8b:65:b1:20:
2e:56:aa:2a:09:6c:66:fd:4c:a4:3b:bf:4b:30:ad:85:df:b3:
06:1d:d3:45
-----BEGIN CERTIFICATE-----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Generated at Fri Dec 29 01:23:27 2023 by rpki-client on console-fra.rpki-client.org