Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138312e302f32342d3234203d3e20313734.roa
File: 352e3138312e3138312e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: imq91WgEoA6S/okxtzoDTvWvi++7FosDWze5Yq/iXoM=
Subject key identifier: 66:EE:E6:E5:80:4C:B6:85:EF:FB:7F:37:47:2D:BE:C3:C5:5F:AC:0C
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 63573AB15F47A6677269A21EBDB8E3EC76CCCCD7
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138312e302f32342d3234203d3e20313734.roa
Signing time: Fri 15 Sep 2023 14:41:54 +0000
ROA not before: Fri 15 Sep 2023 14:36:54 +0000
ROA not after: Fri 13 Sep 2024 14:41:54 +0000
asID: 174
IP address blocks: 5.181.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:57:3a:b1:5f:47:a6:67:72:69:a2:1e:bd:b8:e3:ec:76:cc:cc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Sep 15 14:36:54 2023 GMT
Not After : Sep 13 14:41:54 2024 GMT
Subject: CN=66EEE6E5804CB685EFFB7F37472DBEC3C55FAC0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:b0:7e:99:e6:76:d1:1e:80:7b:78:4d:e6:
c3:c1:24:ff:76:b6:06:83:8d:f5:17:2d:eb:42:6d:
64:e0:2e:1b:a2:28:08:50:e6:52:81:a7:33:63:ac:
3d:81:2d:19:15:c4:c3:40:20:11:0e:8e:62:57:db:
21:29:fb:f2:7a:8c:40:fa:fc:72:34:ba:49:88:30:
3b:a1:81:a8:9f:59:c6:bb:51:2e:8e:1b:6e:e1:7c:
4b:11:29:2e:f5:3a:da:84:25:04:fb:0f:25:22:32:
01:ba:da:e9:39:53:37:1f:8f:38:58:5f:0a:f9:4e:
3f:6d:a9:43:04:eb:cf:ba:7a:cd:8d:2d:79:06:ef:
59:60:c7:7f:fd:c4:98:59:a1:d2:96:16:9a:62:d5:
de:d7:45:b4:20:cc:1c:81:d8:ee:88:bc:93:19:92:
ad:e5:92:8c:d2:0a:d5:7e:b3:95:d7:19:5a:8c:62:
42:e6:e4:d9:f0:c6:ed:52:e7:34:27:87:f8:25:db:
04:45:b0:33:a2:42:fb:c2:71:d3:19:21:40:ac:83:
dd:63:f0:2c:90:43:3f:c6:89:34:c2:52:78:1a:27:
68:d5:34:c3:9e:b8:9a:c0:d1:b7:5b:06:f3:22:12:
ef:54:d7:a4:6d:7b:fe:94:c3:93:27:b9:55:97:6c:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EE:E6:E5:80:4C:B6:85:EF:FB:7F:37:47:2D:BE:C3:C5:5F:AC:0C
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138312e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.181.0/24
Signature Algorithm: sha256WithRSAEncryption
41:09:d9:6e:42:4c:94:f4:88:4d:5e:5b:07:49:e4:ea:01:c0:
12:39:42:29:0b:94:90:b4:fc:d0:cf:5f:ea:85:60:a9:11:95:
b9:42:01:e6:a6:cf:dc:3d:64:02:f6:6b:e7:da:90:ed:e5:e9:
c8:4a:49:97:42:d1:1e:6b:18:b5:e7:fc:52:96:b1:cb:39:d2:
ea:11:a5:62:fb:37:28:71:b8:5f:34:d6:c3:6d:a5:87:48:4c:
1c:c2:88:49:01:6a:19:9c:50:e7:c5:ae:02:bb:ab:34:a1:e5:
92:e5:66:d9:0c:36:14:1d:9a:f5:e1:db:77:2f:b2:25:49:22:
b2:35:05:9f:e3:ef:68:2b:94:01:a7:61:e4:2e:e8:91:b4:f0:
78:f7:ae:4f:a0:cf:30:df:1c:d7:50:6f:c0:58:c9:00:31:be:
ec:e0:c5:be:0d:23:5d:24:4e:6a:66:e9:8e:f4:c3:17:ba:82:
f6:5d:98:f7:bc:57:61:2b:99:23:aa:f1:39:4c:d1:8f:b0:70:
f1:8a:1a:94:8f:b4:2d:7f:ba:84:7c:bd:cb:0a:79:9f:1d:da:
a9:c9:21:47:d6:ef:fb:d6:03:2c:51:44:ed:57:f3:f3:53:41:
a7:7d:33:84:64:72:ec:26:0e:75:0d:0a:a3:00:69:53:1f:3c:
4c:3f:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 11:08:58 2023 by rpki-client on console-ams.rpki-client.org