Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32342d3234203d3e2031323339.roa
File: 352e3138312e3138322e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: u74abPfz9E08VCld4ePUSpOqIyJxPOauCzR55ha+L1A=
Subject key identifier: 58:FD:15:DE:ED:D9:3E:80:79:30:8B:7E:37:8A:52:0D:70:56:A3:BC
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 22D1C762E1B3E2D02420D503026943B20F91E9A4
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32342d3234203d3e2031323339.roa
Signing time: Wed 07 Jun 2023 06:45:36 +0000
ROA not before: Wed 07 Jun 2023 06:40:36 +0000
ROA not after: Wed 05 Jun 2024 06:45:36 +0000
asID: 1239
IP address blocks: 5.181.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d1:c7:62:e1:b3:e2:d0:24:20:d5:03:02:69:43:b2:0f:91:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:36 2023 GMT
Not After : Jun 5 06:45:36 2024 GMT
Subject: CN=58FD15DEEDD93E8079308B7E378A520D7056A3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:15:75:bb:eb:83:13:60:70:ac:21:82:17:
0c:9a:60:91:9d:5a:06:a7:24:5c:f0:5f:d4:34:f3:
47:a5:65:b9:51:a3:53:a4:b6:0d:2c:ce:c2:b0:7d:
3c:37:ab:75:8b:3f:c4:aa:a9:81:c2:2e:00:b3:4b:
d0:8a:ec:9e:40:80:5f:a7:9b:10:2b:49:94:a7:f5:
89:3a:f3:28:ce:91:61:d5:12:4e:3f:67:3c:2d:e0:
3c:3c:52:9c:d0:f5:1a:2f:7d:66:db:65:74:26:5b:
63:e2:86:71:ba:ef:8a:bc:ed:32:56:e7:0e:4e:3b:
03:5e:48:41:25:b0:76:f7:e2:f1:39:2c:c1:58:40:
4a:21:fb:79:4c:9e:c8:42:81:3e:de:53:3b:63:ed:
11:c7:d4:cb:01:dd:80:ca:67:16:d7:f6:49:a3:01:
56:04:ff:5e:7a:54:98:fb:d5:d4:2a:b1:d6:95:f6:
c6:45:ee:53:6e:46:b1:b4:d3:13:bd:1e:09:59:85:
25:4c:a9:12:b6:9c:35:4c:ba:f5:38:73:df:6a:e0:
4a:dc:9b:af:07:e2:bd:5a:7c:52:a0:97:2f:4e:0e:
05:99:ae:52:79:98:55:4e:03:d5:a9:a0:ba:fd:d8:
82:f9:d5:d0:fd:26:50:2b:59:07:bc:c8:63:15:18:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FD:15:DE:ED:D9:3E:80:79:30:8B:7E:37:8A:52:0D:70:56:A3:BC
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.182.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2f:f2:52:29:43:78:96:66:7d:78:2c:37:d6:f9:53:35:72:
bf:14:87:11:31:2e:1e:a2:d3:54:f5:1d:f2:c5:2d:8a:db:d3:
10:dc:2f:e4:9f:8a:37:50:1f:0d:a3:77:ba:1f:cd:c8:c9:0c:
f3:a8:4c:3c:c0:d1:31:6c:8e:84:43:55:0e:9d:47:cf:5b:ee:
89:68:50:e0:38:3a:64:70:69:af:1e:ed:ea:19:78:6c:32:5e:
0d:a6:26:c3:85:27:3e:f9:22:88:6e:d8:65:7d:45:aa:2b:bd:
87:d6:ac:58:f0:38:8a:31:b2:2a:fc:69:29:e0:ed:61:ec:71:
7e:42:bb:bd:40:c5:bc:92:ab:46:e8:8c:1c:ef:36:e8:ab:50:
d0:ba:d0:f6:dc:b0:db:62:dd:dc:dc:70:ce:8a:f5:33:1a:83:
83:e3:ff:3f:61:a7:74:c2:e4:ac:5d:cf:67:17:ff:af:c3:95:
6e:08:84:b5:34:5e:e3:cf:95:e9:5e:64:3e:81:3d:84:65:ec:
54:f2:d1:99:4c:9b:fd:a0:8a:a6:c5:fe:8e:9c:bd:a2:89:b7:
42:c5:48:34:a9:13:80:cf:36:c0:d3:34:bd:f8:3e:c6:9e:2f:
f4:63:4d:b5:a3:a8:6a:f7:76:67:e0:35:c0:bc:91:d5:ba:75:
44:29:03:b4
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 28 16:21:30 2023 by rpki-client on console-ams.rpki-client.org