Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138302e302f32342d3234203d3e20323032363733.roa
File: 352e3138312e3138302e302f32342d3234203d3e20323032363733.roa (raw, json)
Hash identifier: 63Yf1PSdf8P4klYMsI23bgH8Nf7dc8LBvuosIk5j2uc=
Subject key identifier: EE:FC:25:EA:90:9D:72:14:EA:2F:01:68:6F:48:70:1C:FA:4E:E8:61
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 616330EE77D7509607084E094E0EDAF070868629
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138302e302f32342d3234203d3e20323032363733.roa
Signing time: Wed 07 Jun 2023 06:45:37 +0000
ROA not before: Wed 07 Jun 2023 06:40:37 +0000
ROA not after: Wed 05 Jun 2024 06:45:37 +0000
asID: 202673
IP address blocks: 5.181.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:63:30:ee:77:d7:50:96:07:08:4e:09:4e:0e:da:f0:70:86:86:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:37 2023 GMT
Not After : Jun 5 06:45:37 2024 GMT
Subject: CN=EEFC25EA909D7214EA2F01686F48701CFA4EE861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:6c:f6:66:3f:40:3e:30:2b:7c:31:7e:80:
77:97:d7:80:b1:6d:22:8b:66:d6:67:31:18:78:40:
c6:42:95:01:fc:d9:99:8c:ac:99:3b:74:16:be:54:
d2:0e:46:1a:b5:07:52:d9:b6:32:ff:ff:c1:a1:ab:
e4:35:69:f3:60:e2:6b:0b:e3:55:04:17:7b:99:cf:
31:9c:e8:8a:97:25:8b:90:5f:27:01:e9:1d:f0:22:
61:ff:83:03:4a:30:1f:fa:2f:a7:d8:74:55:f5:c8:
37:c8:f3:70:89:73:1e:37:57:ce:ee:b6:bf:8b:8e:
d1:70:6d:75:c0:76:51:37:f2:4e:5e:12:c3:f8:e3:
80:19:7b:4b:47:36:6f:65:6a:3f:0f:cd:77:b4:1a:
0a:d9:f1:b6:11:13:7e:67:41:7a:8f:9a:81:38:7a:
c3:20:de:6a:f8:58:35:b9:8b:28:a1:e5:18:6a:8d:
f7:4b:9c:72:13:fe:1e:63:27:2a:a4:b9:ad:42:d7:
f7:74:b8:36:e1:84:21:50:14:45:e2:2a:97:e4:1f:
12:f7:4f:ba:91:85:5d:20:ca:e5:59:32:7b:61:aa:
bc:ce:ef:c4:43:cc:cf:39:57:80:17:a6:8a:d2:27:
12:8e:72:2e:cb:0f:3a:c1:49:a5:cd:bf:9a:f1:af:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:25:EA:90:9D:72:14:EA:2F:01:68:6F:48:70:1C:FA:4E:E8:61
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138302e302f32342d3234203d3e20323032363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.180.0/24
Signature Algorithm: sha256WithRSAEncryption
07:31:68:05:c9:b1:20:48:ed:6f:4f:22:46:f7:72:4c:c3:01:
6f:e8:c7:15:68:43:e9:80:5f:e5:f9:e0:f1:dc:36:0b:a4:4c:
30:c5:c3:54:04:aa:06:68:26:9e:33:e8:c6:29:99:ef:3c:89:
9f:b9:e0:c5:34:c3:d9:8c:d4:38:bc:da:b7:14:db:8b:94:96:
48:df:83:45:c3:80:c2:66:c1:95:56:b4:49:12:40:94:e8:62:
37:33:eb:0c:14:8b:74:96:ee:00:fe:3f:75:7e:c9:5a:1f:24:
a7:4c:67:1b:84:a0:b0:8a:1e:41:5f:41:6b:4c:72:14:ae:43:
41:e3:aa:56:38:61:bb:fc:52:1b:86:8c:5f:38:76:ea:b9:79:
e2:08:65:8e:ee:ca:a4:e4:17:68:0c:53:40:c9:5b:72:17:a9:
93:87:20:9d:71:90:13:93:12:1c:ef:dd:14:04:30:8f:03:48:
ff:c0:8d:4a:71:ee:a7:9c:3f:58:dd:02:4e:7f:95:a8:bd:3f:
70:8d:80:74:56:d1:a3:21:ea:f0:01:87:a1:28:82:32:23:95:
12:23:0f:40:9c:64:dd:50:ad:07:40:e6:84:0d:5c:ea:c6:82:
39:c2:0b:f6:4c:0f:56:d0:75:f9:00:3c:3f:0f:5b:2c:b3:89:
ca:73:94:91
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 6 10:55:56 2023 by rpki-client on console-ams.rpki-client.org