Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130352e302f32342d3234203d3e203436343530.roa
File: 3138352e3231362e3130352e302f32342d3234203d3e203436343530.roa (raw, json)
Hash identifier: UK1Co7MYsjCi/eH6XOa+AbGpeiMPfmij81ZKOzPpeDw=
Subject key identifier: EE:DA:58:79:A2:D5:D1:DB:E0:BE:A3:AF:CF:B1:D3:25:4E:09:8F:71
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 35F35362D2C4980922B09BED9E5FC4F5E11AE03E
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130352e302f32342d3234203d3e203436343530.roa
Signing time: Wed 07 Jun 2023 06:45:38 +0000
ROA not before: Wed 07 Jun 2023 06:40:38 +0000
ROA not after: Wed 05 Jun 2024 06:45:38 +0000
asID: 46450
IP address blocks: 185.216.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f3:53:62:d2:c4:98:09:22:b0:9b:ed:9e:5f:c4:f5:e1:1a:e0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:38 2023 GMT
Not After : Jun 5 06:45:38 2024 GMT
Subject: CN=EEDA5879A2D5D1DBE0BEA3AFCFB1D3254E098F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:17:76:72:8e:0e:5d:89:12:af:a8:7f:34:
bb:68:7b:0d:b0:5a:e6:2e:f9:43:81:2b:39:61:9d:
7f:79:f5:b0:48:7d:35:f0:9c:15:43:7b:55:bd:a6:
c7:b6:92:77:4e:fd:33:9b:46:35:10:ab:64:e1:80:
a8:8e:c8:d2:ca:67:be:30:23:e1:6b:0a:10:4f:36:
09:d3:92:d1:75:6e:88:5b:ad:74:65:3c:9f:aa:17:
ea:27:88:56:27:c4:55:20:0d:dd:75:37:04:a7:68:
b2:d5:85:25:94:ea:fb:80:36:69:b5:bc:18:d7:3d:
22:ec:35:39:22:08:5d:47:0c:f6:3f:52:15:de:9e:
93:2f:e2:42:1d:71:5c:28:a6:5f:6b:36:ef:c8:b1:
7f:d3:17:85:ab:b6:af:03:da:a4:b8:d6:19:26:fb:
69:de:42:67:ba:47:59:78:4c:03:0d:1d:d0:47:35:
f9:42:58:eb:fd:80:a7:19:be:7f:5c:70:61:19:6d:
eb:5d:ac:a0:1a:18:5c:73:6f:22:57:05:b9:b8:36:
18:74:f1:e0:29:82:0d:d8:c3:69:97:3f:bd:d9:80:
00:dc:84:1d:14:a4:f5:04:68:5b:72:32:23:25:9c:
1a:b4:d0:7a:9b:1e:2e:79:6c:d7:e0:4f:a5:ac:bc:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DA:58:79:A2:D5:D1:DB:E0:BE:A3:AF:CF:B1:D3:25:4E:09:8F:71
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130352e302f32342d3234203d3e203436343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.105.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b5:45:f9:63:9e:eb:91:39:f4:c2:15:10:56:92:22:d6:e9:
26:d2:02:2d:f1:9f:0c:82:98:46:83:6a:00:cf:f5:1e:f9:5a:
07:51:c3:0b:18:6d:68:dc:1d:72:09:c5:f4:d7:92:2f:81:2f:
10:30:bd:93:ad:76:a9:0f:a9:87:b0:5c:c6:d1:48:0d:f7:13:
57:25:c2:05:d9:04:6b:34:51:33:7f:6c:46:63:20:a7:68:b3:
bb:e3:c6:3b:2e:b4:f9:4c:53:7f:4b:ca:eb:6c:ce:15:e4:15:
8c:dd:01:37:fe:f9:5c:45:61:78:34:25:ea:4b:0c:0e:07:15:
e5:29:bb:2a:6c:a0:da:d9:72:32:5a:44:10:fb:7c:ec:42:e1:
06:2d:9c:f0:60:91:f7:7c:d2:af:4b:4c:f8:7b:25:ee:72:b5:
98:84:cf:83:5f:6e:5d:4a:c3:fe:67:ef:2a:46:ba:17:26:cd:
b1:fc:79:c4:63:9c:48:df:1a:b6:dd:02:5c:2a:b8:0a:46:42:
d0:f8:0e:8f:21:89:f4:f9:dd:2f:aa:fd:1c:4c:a4:f2:42:86:
33:e4:c0:74:9c:c4:3b:24:ce:c5:9d:c4:03:4d:7d:73:0a:57:
3a:27:51:38:9f:7d:22:d1:07:75:6a:f4:ac:45:c6:b0:35:38:
94:a9:d2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 11:06:47 2023 by rpki-client on console-fra.rpki-client.org