Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138332e302f32342d3234203d3e20323131393735.roa
File: 352e3138312e3138332e302f32342d3234203d3e20323131393735.roa (raw, json)
Hash identifier: UnhCk2GUhUTb7wBu9dfmmLjsPfeNde0JuAkTzrtIOLg=
Subject key identifier: 92:75:7F:64:B2:C5:17:E8:88:26:6B:53:FC:61:26:6F:7D:37:AA:0E
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 2CA77449ED64A3DE9401FC0FAD0D6AB0C1058CBC
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138332e302f32342d3234203d3e20323131393735.roa
Signing time: Wed 07 Jun 2023 06:45:41 +0000
ROA not before: Wed 07 Jun 2023 06:40:41 +0000
ROA not after: Wed 05 Jun 2024 06:45:41 +0000
asID: 211975
IP address blocks: 5.181.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a7:74:49:ed:64:a3:de:94:01:fc:0f:ad:0d:6a:b0:c1:05:8c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:41 2023 GMT
Not After : Jun 5 06:45:41 2024 GMT
Subject: CN=92757F64B2C517E888266B53FC61266F7D37AA0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:bc:f6:32:bf:7c:fc:c1:d5:6a:95:49:02:
e5:9e:4a:f5:69:4e:fb:48:9d:71:7b:f6:76:78:56:
ba:87:f8:0e:d0:40:62:97:11:af:7b:3c:45:5b:9b:
c9:b3:cd:2c:78:86:00:84:b9:82:9d:ec:9c:01:c0:
cb:92:af:80:ad:93:c1:13:20:a2:e8:19:a2:e9:d5:
77:e6:31:9f:70:9b:5a:d5:3c:b9:c9:b8:1e:c1:b7:
89:10:4d:de:4d:d0:ec:ae:91:42:41:f0:76:c4:cd:
8b:9b:d1:3a:75:09:a7:c6:39:b8:23:2c:f2:de:7d:
ad:8c:8a:80:18:55:11:27:e4:9f:a9:66:97:a9:9e:
88:65:89:44:da:25:37:da:a0:0f:eb:5c:fd:ab:67:
31:c3:3f:b8:b0:5e:ad:b3:9b:6c:a1:91:12:c4:e5:
c3:f3:6f:c8:0a:81:fb:71:cf:7a:36:2d:48:88:25:
fb:bb:3b:73:a3:e3:4d:29:3f:ea:3f:c4:2e:c2:ac:
b0:de:43:e2:41:7e:e0:e2:fe:85:53:e7:60:e0:ae:
51:47:07:89:a5:f3:b4:85:7d:3d:75:f4:f9:e7:ca:
5f:6a:f3:af:01:05:4a:93:e3:4e:0c:db:7b:75:cb:
22:a2:6b:0f:33:46:cd:9f:0c:9c:9c:87:d8:40:f4:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:75:7F:64:B2:C5:17:E8:88:26:6B:53:FC:61:26:6F:7D:37:AA:0E
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138332e302f32342d3234203d3e20323131393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e1:41:11:ce:87:ff:21:e3:23:4c:08:e4:b4:0e:a0:ef:c2:
38:6c:84:9a:d8:bc:ea:3b:c8:06:49:7d:9c:be:24:5b:20:12:
15:ef:aa:35:95:39:40:65:1d:d8:3b:50:07:c7:df:20:17:c6:
72:08:25:19:46:88:08:ef:80:4b:42:d4:45:92:84:d7:af:06:
dc:7c:33:85:31:85:a6:0d:73:4d:94:53:6c:94:d3:b5:dc:7b:
f0:67:87:59:c3:c7:5f:1b:ab:f5:64:40:a7:a7:bb:99:aa:ad:
19:44:25:29:c1:64:30:97:f6:0f:09:4d:19:2e:c8:27:53:86:
5c:5c:63:74:39:ad:93:79:af:d7:88:28:c6:96:2d:c8:aa:01:
fc:05:0a:20:85:6e:49:5a:cf:a6:bf:73:fd:ec:ad:83:f0:24:
a1:5b:0a:44:6c:13:e1:cb:ad:41:34:63:e2:89:81:df:0a:aa:
0c:e2:52:18:fb:17:20:24:b0:ae:31:3b:da:1a:ea:09:35:c3:
03:29:ba:d6:e5:62:a3:31:33:9f:89:56:1e:7b:6a:9b:74:0a:
d6:c0:bf:b5:b9:50:1a:12:89:ae:c9:55:70:d9:d9:a0:24:71:
c0:49:a6:6b:fd:76:38:b8:a9:10:b1:fe:5e:1e:99:72:67:3b:
7f:87:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org