Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39322e302f32342d3234203d3e2031323339.roa
File: 3138352e3137362e39322e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: jIXSNtw0SdKq44OX7A2zGA1f8REge1e7Ale9/GMtun8=
Subject key identifier: A8:32:E2:4A:47:59:D8:D7:F2:69:FA:85:CE:74:2F:5B:11:94:36:EF
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 7883E5E6A74D4530160F292619AAFC182E020DD9
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39322e302f32342d3234203d3e2031323339.roa
Signing time: Wed 07 Jun 2023 06:45:34 +0000
ROA not before: Wed 07 Jun 2023 06:40:34 +0000
ROA not after: Wed 05 Jun 2024 06:45:34 +0000
asID: 1239
IP address blocks: 185.176.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:83:e5:e6:a7:4d:45:30:16:0f:29:26:19:aa:fc:18:2e:02:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:34 2023 GMT
Not After : Jun 5 06:45:34 2024 GMT
Subject: CN=A832E24A4759D8D7F269FA85CE742F5B119436EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:c0:53:39:37:05:79:28:c3:73:8c:39:e2:
42:c1:16:fe:f8:d4:97:8e:6a:88:fb:05:91:8f:74:
3d:52:24:38:58:c8:00:41:f0:a6:c0:8d:7b:a9:ea:
43:0e:52:64:3b:0a:87:f9:fc:da:a2:b1:dc:3f:8b:
a8:fd:23:02:74:6c:b8:13:19:0b:a8:2e:9c:75:e6:
53:02:f4:2a:b0:ab:4f:8f:b7:89:f2:6e:49:10:a5:
db:02:ae:57:8e:59:3a:15:57:52:f7:96:c1:1f:fb:
66:3f:ea:6c:7d:e1:81:82:5f:b6:ba:ef:03:3b:bf:
7d:32:fd:21:be:8c:f2:38:ba:fc:2d:bb:80:6b:59:
36:aa:fc:de:32:75:71:6c:0e:f9:b1:4a:73:df:f1:
63:7b:4e:c5:15:88:b9:70:d7:21:3e:67:69:65:43:
b9:2f:ae:fd:16:c7:69:11:42:2e:2e:94:8b:3d:75:
54:bf:7a:7e:70:c0:e6:a1:da:7a:f1:52:fc:ae:34:
fc:66:b6:33:75:33:f5:cd:ab:1d:0b:42:9d:1b:46:
5b:19:e2:2a:87:82:9f:25:72:da:11:10:ac:bd:bf:
5f:90:77:e8:d6:a9:c6:14:95:80:f3:d2:66:7f:dd:
68:23:35:97:5f:13:93:45:34:fb:62:f1:49:32:3a:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:32:E2:4A:47:59:D8:D7:F2:69:FA:85:CE:74:2F:5B:11:94:36:EF
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39322e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b5:3f:5f:e1:0c:44:56:b8:f5:5e:1f:52:17:49:08:14:d1:
e0:23:ff:3d:54:65:f8:1e:e6:c1:60:43:1d:9f:de:ed:9f:bd:
9e:d5:d8:e6:42:09:bb:ab:f7:75:ac:fc:d6:15:9f:75:0b:79:
f8:2c:3b:47:92:ea:64:ca:3b:e4:ea:22:d7:d2:55:53:e3:53:
5a:56:c8:f6:24:7c:80:9b:d8:7a:e9:4e:34:8d:a7:57:65:ec:
87:58:3e:87:ab:a8:fb:f5:4a:5b:ff:11:42:3a:0b:dc:31:58:
be:3e:bc:cf:49:f4:c8:6c:64:0d:53:6d:2d:49:fd:35:60:d4:
f4:3c:3d:79:63:09:5b:76:0e:13:32:1e:6d:25:a2:da:73:05:
a2:0d:8b:61:5b:c1:6d:85:24:6f:33:33:23:d4:e7:d3:12:46:
72:bd:f2:2b:0a:93:68:8f:b7:f7:64:eb:7b:e8:2d:f7:29:b6:
84:57:03:72:c4:3a:0f:04:cc:ad:5e:52:55:35:fe:40:4f:3c:
f0:85:5a:f6:d9:1c:e9:a4:20:df:48:36:68:ce:88:99:62:8d:
c0:4f:66:78:50:0f:55:29:3c:59:de:d6:91:53:64:73:57:a3:
f8:f5:ac:17:6f:90:12:8d:ff:96:0e:a4:6b:23:82:04:70:3a:
71:64:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 13:34:03 2023 by rpki-client on console-ams.rpki-client.org