Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138312e302f32342d3234203d3e2031323339.roa
File: 352e3138312e3138312e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: cpj1gXJBmWPzAdv85cWQhrgvSBpBjv5KVsw8U7eSkWQ=
Subject key identifier: C1:F6:85:7A:ED:0B:DE:ED:AF:51:E9:71:B7:80:99:E8:25:66:A2:11
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 53D3A8BE46CEA7971AD0AE937FE39D4714AFD8D9
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138312e302f32342d3234203d3e2031323339.roa
Signing time: Wed 07 Jun 2023 06:45:35 +0000
ROA not before: Wed 07 Jun 2023 06:40:35 +0000
ROA not after: Wed 05 Jun 2024 06:45:35 +0000
asID: 1239
IP address blocks: 5.181.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d3:a8:be:46:ce:a7:97:1a:d0:ae:93:7f:e3:9d:47:14:af:d8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:35 2023 GMT
Not After : Jun 5 06:45:35 2024 GMT
Subject: CN=C1F6857AED0BDEEDAF51E971B78099E82566A211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:36:fc:ed:c3:17:09:92:90:d6:c8:2f:2e:
df:b0:d6:2a:a9:e1:3c:01:22:ef:ce:07:14:7e:e3:
f3:04:25:aa:84:6e:98:29:6e:a9:c0:4e:ee:f6:47:
04:85:83:2b:18:99:73:10:ec:b1:58:13:4f:fe:50:
cd:48:dd:8a:53:31:28:6b:bb:7e:b0:0a:23:96:ed:
16:30:d5:2b:c7:60:a0:4e:40:4c:a4:95:62:f8:49:
02:b5:e0:82:74:7c:d3:4b:85:c1:7a:e6:0a:ec:b3:
e1:41:f3:8f:34:f9:d3:da:47:89:e7:36:eb:b4:04:
3c:92:15:3a:d4:05:42:93:98:84:d8:b9:51:05:d3:
43:4f:cc:9c:49:1f:da:78:30:74:d1:a5:b0:90:74:
ee:31:d9:c5:24:07:2a:e3:ac:d8:85:67:cd:39:2a:
5c:d3:13:dc:4f:15:b5:c7:df:49:a7:b8:34:f8:08:
bf:e6:2f:80:f3:b2:f9:16:7b:f0:74:91:4f:2a:92:
81:46:d9:81:f3:c0:bf:01:e1:ad:01:f8:4d:e4:1d:
70:72:f1:ad:53:e0:88:8b:aa:88:c3:6c:b2:7a:b0:
85:66:81:fe:b5:ef:01:d8:57:33:da:f7:80:5d:c7:
59:ca:0c:26:58:cc:9e:47:71:50:b8:5e:81:df:5b:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F6:85:7A:ED:0B:DE:ED:AF:51:E9:71:B7:80:99:E8:25:66:A2:11
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138312e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d7:1f:e2:fd:03:f2:a0:69:98:2f:c0:6f:3f:b2:d8:a1:d3:
01:6f:c3:6a:0d:97:01:06:b4:e0:75:72:a1:76:44:c3:cd:75:
eb:0a:2d:95:29:1c:6e:56:0c:4e:1d:59:a5:d5:9b:ff:a2:4a:
df:ee:cd:05:d7:91:38:90:7c:dd:88:0d:ff:41:7a:5a:32:96:
32:81:e7:75:88:9a:de:3d:75:a2:93:39:df:b5:46:f0:12:f8:
e3:e1:e0:85:6f:53:96:ce:6c:7e:c4:6d:93:18:c0:e4:e0:60:
3e:02:b1:f0:f0:d9:8c:49:65:bf:d7:ee:2b:7e:5e:d7:bf:64:
ef:93:2b:fe:39:ee:73:b2:e4:ed:b5:5f:65:ba:92:52:99:9a:
d0:2e:0f:d7:02:45:4a:b9:3f:83:06:62:35:95:74:96:1b:75:
b0:65:df:9e:f2:99:2e:8c:a5:b2:3d:8c:ff:05:04:0e:e1:74:
1f:ec:9e:93:ce:17:1f:b6:6f:2a:1e:38:04:bc:ce:81:ef:97:
bc:36:47:4f:14:d9:ca:ed:5d:a3:64:e8:a5:03:5f:58:72:64:
4d:a3:c2:89:a6:8c:dc:f6:41:f0:a1:ec:94:1e:76:04:e5:41:
ed:18:9a:b8:dc:30:91:cc:ed:40:75:d7:14:0c:0f:23:5e:5b:
53:bd:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 16:04:21 2023 by rpki-client on console-fra.rpki-client.org