Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136312e302f32342d3234203d3e20383334.roa
File: 3139332e3234362e3136312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ZW/OPNNAUG6I3xW3CEvNwVrTBFDu8I8JAU8Jr7iytTY=
Subject key identifier: 65:21:53:E5:1D:2F:11:49:F2:4F:54:AD:B5:97:E4:01:E7:CB:CA:56
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 156D4B36865A15D2B3E6498078D81B6ACED6DCC1
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136312e302f32342d3234203d3e20383334.roa
Signing time: Sun 24 Dec 2023 00:00:07 +0000
ROA not before: Sat 23 Dec 2023 23:55:07 +0000
ROA not after: Sun 22 Dec 2024 00:00:07 +0000
asID: 834
IP address blocks: 193.246.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6d:4b:36:86:5a:15:d2:b3:e6:49:80:78:d8:1b:6a:ce:d6:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Dec 23 23:55:07 2023 GMT
Not After : Dec 22 00:00:07 2024 GMT
Subject: CN=652153E51D2F1149F24F54ADB597E401E7CBCA56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:c5:27:d4:53:b7:22:6b:e0:42:e8:20:b7:
b0:2d:64:23:6d:c9:03:8c:86:9a:48:32:a0:90:7f:
61:60:8b:46:a0:da:03:c8:bd:30:77:b7:51:e7:2e:
7e:cd:1e:83:31:e3:06:a1:67:a9:75:73:38:88:fb:
74:3c:06:36:0b:f5:6d:ec:99:7b:df:ba:22:4c:89:
62:3f:ea:2c:e3:41:14:23:fd:80:8a:8e:11:a1:4a:
92:d5:02:bd:09:6c:eb:c4:2d:67:7c:06:cb:95:5a:
3b:c2:d7:02:49:9f:ff:9b:6b:29:d2:32:80:9f:7a:
66:a1:76:d2:91:3e:23:fb:db:c0:46:e7:12:30:4b:
56:5b:82:8b:7a:d0:3f:29:0b:09:b9:bd:4c:0b:c3:
af:e8:79:38:97:0e:b9:be:f6:22:20:fd:9e:84:9a:
84:63:75:bb:6e:52:56:e0:99:7e:1a:e2:e3:90:c2:
24:a8:f9:91:d8:0c:3d:79:62:91:fa:a8:b0:4d:23:
84:a2:0b:ea:dc:5b:92:b7:bd:84:9f:e6:4f:d7:3f:
4c:d4:6e:a1:7d:49:1b:0d:dc:37:a3:ee:d1:37:c8:
39:5b:b4:73:96:46:45:cc:b2:e5:33:60:da:f4:26:
7b:b1:44:5b:59:84:16:fc:ad:6e:eb:aa:c4:48:48:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:21:53:E5:1D:2F:11:49:F2:4F:54:AD:B5:97:E4:01:E7:CB:CA:56
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c3:9b:d7:bc:a3:d9:4b:8b:17:2e:67:06:28:04:0c:7f:87:
e1:ce:b1:f1:2e:c5:ff:95:04:28:dd:0b:50:eb:4c:16:f6:72:
9b:e0:08:ac:7b:f1:cb:5f:fc:91:42:dc:45:79:aa:bd:84:da:
d9:1a:06:cb:39:04:1c:44:ce:ed:9e:04:af:4a:78:b3:7d:a4:
47:45:9d:f5:35:00:92:d6:8d:e6:41:68:96:60:2e:67:94:4f:
eb:ba:a2:e3:cc:ae:be:82:27:e8:41:2d:b4:3c:f7:5f:9a:79:
7c:3d:60:f4:2b:ba:f1:51:fc:4c:44:78:f0:db:6b:73:1f:3b:
2b:76:b0:3c:e3:25:8a:79:1c:25:ce:fc:1f:a3:50:cd:05:db:
c5:d6:c9:29:c3:52:1b:13:e5:c3:91:f9:40:c3:2a:9f:25:b0:
93:fb:1e:c8:c3:59:6f:f6:4a:24:9d:ae:80:05:65:12:78:9b:
3b:86:60:4a:48:8b:f9:62:18:08:66:10:d2:0f:89:9c:6f:c1:
7a:e5:3e:48:eb:ca:f4:78:7b:88:60:e0:ad:09:42:a8:57:e1:
87:7a:80:1f:8a:2f:ef:1d:7b:1e:cf:79:d4:54:aa:3d:bb:4f:
15:2a:0f:ce:7a:16:7d:39:39:a4:75:bb:fd:c4:c2:73:e8:a0:
cc:df:12:ee
-----BEGIN CERTIFICATE-----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Generated at Sun Dec 24 11:38:40 2023 by rpki-client on console-fra.rpki-client.org