Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136312e302f32342d3234203d3e203239383032.roa
File: 3139332e3234362e3136312e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: 2o6dw/iWSAndoKV6BXGGiPIK4HPKLAFdJ/VnEnYtoi4=
Subject key identifier: 8E:BF:6A:38:9D:46:3B:B6:E3:CC:20:56:3E:1C:A8:E8:DD:FF:0B:D5
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 11B61855F90405A432100CAEC6827E9EB5F80B17
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136312e302f32342d3234203d3e203239383032.roa
Signing time: Fri 24 Nov 2023 10:03:02 +0000
ROA not before: Fri 24 Nov 2023 09:58:02 +0000
ROA not after: Fri 22 Nov 2024 10:03:02 +0000
asID: 29802
IP address blocks: 193.246.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b6:18:55:f9:04:05:a4:32:10:0c:ae:c6:82:7e:9e:b5:f8:0b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 24 09:58:02 2023 GMT
Not After : Nov 22 10:03:02 2024 GMT
Subject: CN=8EBF6A389D463BB6E3CC20563E1CA8E8DDFF0BD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:6e:77:7d:db:11:0d:d2:99:67:22:f0:74:
93:82:2c:27:5b:74:37:e5:51:63:a2:7f:e6:ea:7a:
ad:19:14:ca:aa:a4:8b:bd:e3:b9:41:8c:22:ae:64:
46:fe:fc:11:9f:64:70:43:7f:82:8e:22:70:0c:0f:
d1:af:f9:26:6c:24:6b:83:00:d2:b1:d7:17:09:c3:
1b:54:31:7a:47:37:69:2b:b2:5a:69:f4:0e:d7:0d:
8e:23:cb:27:88:50:e4:11:a5:d2:5a:4f:bb:c5:ce:
b4:50:3e:4d:77:26:f8:ad:1b:35:53:27:b7:5e:9c:
36:14:b6:04:b6:bf:bf:7f:41:0c:c4:94:2a:50:15:
01:fc:91:9b:d8:b3:07:be:85:7b:e0:77:3d:17:88:
b2:bf:af:c4:26:19:c5:87:58:06:a0:ea:fe:ba:86:
90:b5:93:9d:d4:c7:9e:9f:8a:a4:84:6b:d6:f3:e2:
d3:02:f0:8a:82:cd:52:0a:30:71:17:bd:fb:73:33:
47:40:d2:4f:a2:72:28:a0:57:52:c5:41:60:8c:f8:
79:02:53:a4:de:c6:0f:d5:df:44:53:b3:b9:82:9a:
32:75:4e:22:e2:93:17:30:12:b0:12:e8:18:37:59:
40:84:da:01:05:d7:6b:0b:e0:dc:35:90:2c:ab:43:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:6A:38:9D:46:3B:B6:E3:CC:20:56:3E:1C:A8:E8:DD:FF:0B:D5
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136312e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1c:c7:15:64:a6:b6:e7:30:06:91:cd:24:da:8a:01:12:6b:
60:b9:19:88:44:f9:ad:2b:50:60:3a:d7:86:3f:96:ba:6d:84:
74:d9:57:62:3f:cd:f4:4d:e6:a7:d8:55:d0:3a:8f:b0:79:8d:
b8:ae:14:df:75:e5:1d:ec:c6:f3:21:38:3c:d1:0b:7d:ce:9b:
98:ff:6d:97:cf:a6:8d:11:cb:b3:6d:ba:7f:1f:2a:8b:14:63:
cc:49:c8:cf:98:85:21:12:18:af:99:f7:5d:5c:d0:cd:97:79:
73:fc:c2:ab:f1:80:6a:41:b4:e3:8f:9a:7d:84:21:10:6a:d5:
56:ed:73:51:5f:6f:4d:98:8e:10:03:00:a0:da:ed:fd:92:e1:
16:fb:56:7b:b1:76:4a:00:cb:1b:10:30:83:00:a8:e4:a2:d3:
8e:f8:8a:aa:c4:7c:cb:57:29:9e:50:17:da:2c:6c:8d:16:3e:
76:b2:9b:1e:d4:3f:a8:70:f1:e6:a8:bd:7f:8c:d5:05:4e:eb:
ef:03:e4:2c:5a:c0:40:f6:bc:cd:91:58:65:a8:70:ae:b7:4d:
da:49:5f:47:e2:19:ac:17:2c:58:97:20:51:dc:a3:3b:12:d2:
5a:06:ea:ae:99:96:ba:e4:57:e8:a2:82:07:7c:c9:42:21:12:
50:d2:fb:d8
-----BEGIN CERTIFICATE-----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Generated at Sun Dec 24 00:28:46 2023 by rpki-client on console-fra.rpki-client.org