Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39322e302f32342d3234203d3e20383334.roa
File: 3138352e3137362e39322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: RFtxYqJXhWVdTB8vXQBN+xfPuCE2AKyE0fRRlhvsCAw=
Subject key identifier: 1B:BD:88:19:D4:AF:EE:A1:B1:B6:BD:13:7B:AB:7D:F5:6B:F8:6D:B8
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 7E327E93CD136A1E924592F9AB5BF4BF3679D4BF
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39322e302f32342d3234203d3e20383334.roa
Signing time: Wed 07 Jun 2023 06:45:41 +0000
ROA not before: Wed 07 Jun 2023 06:40:41 +0000
ROA not after: Wed 05 Jun 2024 06:45:41 +0000
asID: 834
IP address blocks: 185.176.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:32:7e:93:cd:13:6a:1e:92:45:92:f9:ab:5b:f4:bf:36:79:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:41 2023 GMT
Not After : Jun 5 06:45:41 2024 GMT
Subject: CN=1BBD8819D4AFEEA1B1B6BD137BAB7DF56BF86DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:54:43:1e:7d:52:f9:25:33:b9:0e:f5:d2:
fd:0a:2b:ce:e1:89:9f:43:ad:02:db:27:6f:ad:e0:
6f:25:4d:0b:fa:28:96:f1:74:a9:b7:fd:af:c4:1a:
5f:3e:7d:cf:f3:32:d2:ac:57:4d:cd:74:94:4a:aa:
99:92:29:3d:d4:38:71:6e:c0:1e:76:d0:44:f9:c9:
7c:23:61:df:08:ab:f4:cf:f9:ae:01:c0:d6:8a:2c:
68:33:7f:b2:ca:f0:22:43:f9:06:3d:09:e0:96:f3:
aa:06:9f:8c:09:eb:c9:20:61:b1:57:bd:4e:0d:c8:
d1:b7:71:a9:ea:1d:67:fc:61:33:cb:ec:d3:2d:51:
5a:98:92:c7:2e:7e:e3:a3:a9:53:f1:7d:8b:b4:55:
28:b9:92:98:01:a3:69:38:52:dd:d4:69:03:6b:81:
7e:9f:cb:ec:a7:49:75:83:4a:53:83:fb:f2:1d:4e:
f2:e0:7b:dc:59:2d:7a:b9:ba:a5:ea:d1:42:45:52:
bd:7a:3e:4c:b5:4e:a9:15:38:8c:46:e8:1c:3e:6b:
e3:b0:7c:cb:ba:d4:ca:72:0e:b4:1e:3e:3e:7b:1d:
9a:fe:79:e3:f0:51:2a:cb:12:00:40:88:61:61:8c:
ec:21:b0:10:37:ea:4f:a8:22:cc:22:43:3b:f2:04:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BD:88:19:D4:AF:EE:A1:B1:B6:BD:13:7B:AB:7D:F5:6B:F8:6D:B8
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:90:09:92:c6:92:4e:2d:86:65:ac:b3:f7:42:83:c7:de:b8:
cb:11:07:04:84:44:2b:c3:c5:34:d1:be:ba:47:b5:79:9e:7b:
87:33:b5:35:af:91:44:01:11:5d:57:66:58:34:09:36:c7:b6:
94:83:0d:50:03:fe:7b:4c:8a:21:6a:8b:7e:f5:92:81:2a:b7:
46:b6:71:80:84:1e:b9:be:2b:7e:68:74:2f:fb:71:f3:09:0b:
95:90:51:24:00:c6:7a:54:8c:41:77:0a:33:9a:86:e3:23:63:
00:64:2d:b7:cf:49:f5:c7:89:b0:ac:5f:1c:d0:29:42:68:11:
3f:05:b8:87:42:b4:a3:fc:16:61:aa:ab:0a:37:f7:e3:ee:13:
ef:c0:b1:50:25:a3:19:54:30:69:87:15:b6:64:17:f9:d6:cd:
b4:e8:90:bd:b4:8b:50:0c:7e:07:bb:78:b1:36:ea:63:62:d1:
27:80:a3:b5:66:28:b7:be:e1:03:04:a3:44:e4:ca:e0:40:41:
9f:1d:20:b3:19:b0:2c:49:95:fe:c2:32:16:e6:95:dd:13:6b:
1f:a0:01:3a:6a:83:51:77:17:ed:4a:42:d3:79:41:96:3a:01:
63:9f:18:f0:bd:4d:fb:a7:52:2f:92:f7:d9:6a:68:16:61:4f:
49:e6:ea:4d
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 20 13:34:03 2023 by rpki-client on console-ams.rpki-client.org