Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130362e302f32332d3234203d3e20383334.roa
File: 3138352e3231362e3130362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: +SfkNPmGBtZGvL5wdIR+gf2owHiOUOVQlc6xE6Hksy0=
Subject key identifier: CF:FE:59:06:0C:1F:73:84:EC:CD:67:7F:7E:95:00:6C:CA:91:57:13
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 1155DCF608CA9754E0DA941B23A12FBD51CFA4D3
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130362e302f32332d3234203d3e20383334.roa
Signing time: Wed 07 Jun 2023 06:45:37 +0000
ROA not before: Wed 07 Jun 2023 06:40:37 +0000
ROA not after: Wed 05 Jun 2024 06:45:37 +0000
asID: 834
IP address blocks: 185.216.106.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:55:dc:f6:08:ca:97:54:e0:da:94:1b:23:a1:2f:bd:51:cf:a4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:37 2023 GMT
Not After : Jun 5 06:45:37 2024 GMT
Subject: CN=CFFE59060C1F7384ECCD677F7E95006CCA915713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:01:e6:b2:fe:67:aa:d6:11:6e:61:f5:4f:
17:a0:37:04:b4:f1:ce:18:10:84:fb:d5:3a:28:76:
6a:4c:1e:9d:db:93:eb:12:6f:bd:99:51:ed:57:2f:
93:4c:c2:2c:56:f0:33:86:c1:a2:9f:1f:7d:e0:4d:
4d:d2:c5:f9:73:d3:6c:32:2d:81:95:63:bf:a1:55:
bf:2c:4f:f0:ec:5a:84:76:7f:6d:2a:15:34:4a:1e:
40:e1:c6:af:0a:fb:6d:34:98:f0:ac:90:50:ac:d7:
9c:4b:0f:b0:0a:21:fb:ec:e6:a3:fc:59:32:fb:70:
fb:0b:3a:06:19:3b:8a:9f:a3:cf:23:b5:00:44:9b:
0d:0e:16:ad:03:8c:55:5e:0e:67:5e:57:06:aa:74:
da:b2:62:bc:bc:ba:99:1b:98:b1:bb:09:ac:f5:d0:
99:cb:ee:bb:19:ac:3f:24:14:f3:f6:6a:7e:d9:48:
b8:20:bf:dc:0d:05:d6:bb:e2:09:b2:42:07:15:3b:
4d:ed:44:3b:73:61:0c:4b:cc:bb:fb:e3:a4:09:76:
e7:93:f4:ee:25:24:15:32:43:9e:d6:9f:36:77:4b:
b3:c2:53:21:df:d2:89:46:fa:09:0a:95:20:10:b0:
19:c7:89:4b:5b:ed:c0:b0:f0:50:0d:c4:e7:a1:9c:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:59:06:0C:1F:73:84:EC:CD:67:7F:7E:95:00:6C:CA:91:57:13
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.106.0/23
Signature Algorithm: sha256WithRSAEncryption
98:45:7d:6e:5b:c7:bd:11:9b:c7:ff:22:67:64:b0:f9:30:c7:
93:6e:8e:da:2b:15:c2:f3:90:99:38:a5:1d:24:b1:51:50:72:
c8:31:0a:50:d1:e2:d2:94:80:f1:ef:e5:53:d5:27:4b:de:dc:
9d:e5:47:88:56:77:d3:6a:67:bb:fd:b0:e3:75:26:e2:56:36:
b8:21:2d:bc:d4:68:e6:13:1e:9a:49:2f:80:82:d5:2b:a3:5e:
b9:51:23:32:7c:bb:d1:3c:45:8a:ec:46:fe:1e:fa:d3:96:5c:
a9:38:e3:97:6e:77:65:8c:91:b4:95:3a:67:a0:f8:e0:1b:59:
ff:b0:26:fb:21:59:9d:9e:fd:30:f4:4e:c6:a7:0a:87:d9:9e:
aa:88:19:4e:f4:d1:72:a9:e1:28:e5:5e:8b:79:6d:a0:6a:96:
ac:6b:80:67:86:39:80:d8:1b:91:e6:73:b2:2a:85:80:d0:73:
12:d1:7c:33:64:10:16:ba:d7:24:47:f9:e5:60:e0:2a:f4:29:
87:40:32:55:62:5b:e1:05:23:d3:78:1d:da:a3:19:51:30:50:
59:3a:60:f9:b1:0f:f5:ea:57:c3:44:61:1a:7f:42:49:ac:73:
22:14:b0:99:68:a9:a9:ba:44:c6:ea:7a:7c:46:74:58:71:8e:
52:a1:e8:36
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 16 00:28:59 2023 by rpki-client on console-fra.rpki-client.org