Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39332e302f32342d3234203d3e203433323630.roa
File: 3138352e3137362e39332e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: R2tPqpsa73ZXdUtEajcGySYwb9ToSEpWVq98Sr+XD3g=
Subject key identifier: 04:B8:59:92:68:8E:60:C9:BF:17:8D:E8:45:DF:FB:BA:81:9E:33:F4
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 2861B5025FAA3E94DD52D44A32DDA1015D0DE9E9
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39332e302f32342d3234203d3e203433323630.roa
Signing time: Wed 07 Jun 2023 06:45:39 +0000
ROA not before: Wed 07 Jun 2023 06:40:39 +0000
ROA not after: Wed 05 Jun 2024 06:45:39 +0000
asID: 43260
IP address blocks: 185.176.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:61:b5:02:5f:aa:3e:94:dd:52:d4:4a:32:dd:a1:01:5d:0d:e9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:39 2023 GMT
Not After : Jun 5 06:45:39 2024 GMT
Subject: CN=04B85992688E60C9BF178DE845DFFBBA819E33F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:ea:54:ae:10:c1:8a:4c:92:ad:29:6d:40:
a3:d4:99:a1:ea:28:e8:22:f9:d5:50:f2:61:59:3f:
38:5b:6f:96:00:31:7d:7a:ce:42:86:fe:04:4f:5c:
8f:d7:a6:c3:3e:e2:54:0b:43:56:c4:66:9a:16:0f:
50:17:ff:43:b6:bf:90:a3:c2:8b:30:c8:35:26:b4:
89:79:66:6b:1e:1e:d6:a6:60:d3:4c:6a:05:94:f3:
3f:96:10:29:f8:04:2a:9a:21:57:0b:c2:2d:e8:26:
b2:62:86:16:0b:96:9f:f7:c7:57:1f:fa:c1:29:a0:
1a:86:2a:33:51:d3:04:78:6a:ac:5c:41:73:8b:8c:
e0:4e:73:37:37:7e:0b:88:c8:fb:ef:37:ae:d7:ff:
65:f5:d1:3b:09:1a:a5:b0:49:61:9a:ec:e5:69:59:
1f:3a:45:8e:ae:81:e4:2b:91:4e:7c:e6:59:94:71:
b4:4d:dc:b1:55:7d:c9:bd:17:ab:25:88:18:13:02:
a7:2b:48:98:8e:da:46:56:07:64:63:6f:f0:23:d5:
30:53:ae:ed:e3:f5:9c:89:a1:3b:d4:35:06:8d:d0:
da:5b:32:e2:9e:d2:69:54:4b:b8:70:cc:39:2d:9d:
9d:fa:12:d5:c7:41:62:30:bf:c3:6a:b7:a3:81:f6:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B8:59:92:68:8E:60:C9:BF:17:8D:E8:45:DF:FB:BA:81:9E:33:F4
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39332e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:52:98:fd:f8:bb:02:0d:55:53:8c:27:e9:d2:30:cf:f6:f1:
6d:1a:50:0a:e2:aa:b8:a6:5e:c9:df:59:c6:29:1f:57:13:4e:
a5:4c:9d:78:fd:d0:23:d9:65:4a:a5:77:01:13:e0:f3:5b:39:
cc:53:cc:22:ba:d7:16:93:9e:f5:d7:fb:a8:ef:e9:41:39:5b:
a3:c8:ba:36:df:0d:20:43:a3:2c:45:a0:28:43:63:42:ec:33:
94:63:ba:ec:c5:15:d8:57:7b:82:ca:05:6d:13:2c:5b:2f:7d:
53:1d:9f:df:b8:63:1f:63:09:e9:ce:00:f1:38:1b:d2:70:d8:
bb:80:f4:88:50:8b:f0:c2:4b:2e:47:3e:32:f4:d5:31:a0:bd:
c3:40:af:71:5e:f4:88:bf:a9:0a:80:28:50:2d:10:5c:33:52:
d0:66:ad:cc:9b:36:5a:02:10:d8:66:03:33:e8:48:95:65:13:
7e:96:c2:a1:e3:e0:05:b7:0c:68:04:1c:61:32:99:1b:d6:b4:
cb:37:6d:2a:76:b8:3b:7e:10:2c:71:d8:47:6f:bd:4b:8c:bc:
ec:53:c4:94:b1:f8:55:6d:86:ce:00:af:cd:ac:9b:17:90:b5:
a9:2b:3e:f8:c9:27:aa:e9:27:41:35:e2:44:05:63:a1:a6:6a:
87:8f:a4:a0
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 20 10:47:56 2023 by rpki-client on console-ams.rpki-client.org