Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32342d3234203d3e20313734.roa
File: 352e3138312e3138322e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: Q2XkopNiCCuCi1dKeWF0QcXLpoCWzixwXJBCFKbUTRA=
Subject key identifier: 54:D1:CF:43:F7:00:23:C1:38:A2:38:BC:10:F0:C3:04:C4:2A:C3:BC
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 3B864029B61A9E9E16B6F878F35CDFB86111B160
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32342d3234203d3e20313734.roa
Signing time: Fri 15 Sep 2023 14:41:54 +0000
ROA not before: Fri 15 Sep 2023 14:36:54 +0000
ROA not after: Fri 13 Sep 2024 14:41:54 +0000
asID: 174
IP address blocks: 5.181.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:86:40:29:b6:1a:9e:9e:16:b6:f8:78:f3:5c:df:b8:61:11:b1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Sep 15 14:36:54 2023 GMT
Not After : Sep 13 14:41:54 2024 GMT
Subject: CN=54D1CF43F70023C138A238BC10F0C304C42AC3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:bb:62:2d:69:6c:69:c9:a6:0a:7a:d7:20:
37:38:12:62:07:e5:b6:69:6c:68:f3:5c:00:ae:83:
77:34:3f:a8:b3:35:e1:27:54:17:bf:bf:89:36:20:
1e:1d:8c:4e:0e:e6:88:27:e6:87:57:b1:9d:68:58:
24:2c:3e:56:22:2a:34:bd:88:87:cb:6d:12:11:53:
ac:54:2e:d7:4d:dc:10:37:35:5b:12:81:d3:9f:5f:
b2:ff:c4:2a:b0:a8:28:a0:d3:32:f8:0e:1b:67:94:
89:c6:e4:f0:0b:51:a3:8f:8e:d2:d3:e4:07:20:42:
6d:1d:a4:51:83:99:7a:57:3f:e0:a7:8d:95:11:f7:
22:51:08:2b:41:22:2c:18:8f:46:90:c6:1b:14:eb:
24:9d:53:35:fc:14:8a:a8:29:9b:cb:10:16:27:61:
24:c5:75:f0:de:c3:5b:30:00:20:cc:1e:52:f5:2e:
66:55:fe:09:3e:4f:a5:eb:a8:71:6e:d5:db:52:db:
be:81:6d:b0:38:7b:71:94:44:d5:33:7f:c5:2d:9d:
af:81:46:7e:e0:be:28:94:0b:eb:71:a8:07:b9:89:
17:5e:0f:fd:08:81:24:f6:ff:86:bc:82:ab:89:bf:
e4:ca:42:94:91:38:9f:27:51:86:d8:ab:aa:d2:41:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D1:CF:43:F7:00:23:C1:38:A2:38:BC:10:F0:C3:04:C4:2A:C3:BC
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.182.0/24
Signature Algorithm: sha256WithRSAEncryption
42:60:38:eb:aa:e9:b9:44:d0:a9:4a:b4:1d:29:54:1c:db:16:
43:ef:d8:74:4b:cd:5e:55:e6:f3:83:92:e3:c1:00:ab:62:4b:
50:0f:16:d1:d7:c9:e9:70:f3:fd:12:68:c2:d6:e2:a8:21:cf:
db:21:8c:66:6a:b6:2f:f1:79:7f:6b:c3:8f:c3:fd:1e:b9:84:
57:ee:eb:20:e0:04:9f:46:4b:1d:0b:e0:2b:81:a8:89:27:d1:
a5:fd:75:86:07:5f:3c:71:9b:19:9f:7e:20:a7:cf:59:a8:7a:
bd:cb:8a:7b:a3:76:98:80:b2:14:e9:cb:34:4b:4f:95:9c:4c:
6d:e6:bf:05:de:97:1d:20:25:a3:7d:e2:13:b7:59:c6:0d:3d:
b1:12:12:b3:94:5d:cf:bb:84:ab:f4:79:d8:9d:ba:a4:23:2a:
7e:1b:fc:0f:10:06:bf:89:83:5b:ac:da:3b:3d:3b:bc:08:e5:
65:a1:9a:4e:04:09:32:6a:71:bc:a2:55:38:42:4c:d1:ef:dd:
7f:8e:22:ac:4c:46:ac:b6:c3:ca:b8:eb:60:27:1d:8d:02:40:
30:96:f6:f0:e2:40:05:5b:2b:59:84:53:6e:89:8a:95:5d:f2:
14:e0:c9:96:4e:60:90:4c:da:eb:86:bf:34:24:e9:b5:9f:ca:
49:76:1b:38
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 21 11:08:58 2023 by rpki-client on console-ams.rpki-client.org