Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138332e302f32342d3234203d3e203438333134.roa
File: 352e3138312e3138332e302f32342d3234203d3e203438333134.roa (raw, json)
Hash identifier: VbqT95Xos31vspKGfdHGZC7GMDwdTU9LsuPqa1fvUp8=
Subject key identifier: F0:EC:6E:13:71:D0:6C:CC:74:E5:0E:D9:02:C5:CB:32:78:62:37:34
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 50FFB0D7FD4996AD78016B0F1F911F015553409F
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138332e302f32342d3234203d3e203438333134.roa
Signing time: Tue 25 Jul 2023 12:58:34 +0000
ROA not before: Tue 25 Jul 2023 12:53:34 +0000
ROA not after: Tue 23 Jul 2024 12:58:34 +0000
asID: 48314
IP address blocks: 5.181.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ff:b0:d7:fd:49:96:ad:78:01:6b:0f:1f:91:1f:01:55:53:40:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jul 25 12:53:34 2023 GMT
Not After : Jul 23 12:58:34 2024 GMT
Subject: CN=F0EC6E1371D06CCC74E50ED902C5CB3278623734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:cd:2d:44:3b:07:8b:88:3b:9f:4c:73:e5:
c8:23:66:da:e8:db:17:f1:6a:58:1d:63:37:ab:3f:
dd:5c:94:81:21:fd:92:7f:c6:f1:5b:67:ed:67:f3:
88:50:d4:3b:13:a2:82:a7:68:c6:fb:c0:8b:7a:e2:
05:13:7c:85:cb:ea:6b:78:16:d5:dc:e6:df:5d:35:
18:1a:2c:07:2d:d8:d9:ef:6a:64:52:94:50:d5:4e:
8a:a2:2f:78:1a:8e:a0:7a:59:ff:1c:6a:9d:47:c1:
a0:9b:57:48:c4:ca:e6:e1:bd:23:51:bb:b6:4e:49:
56:27:d9:b8:fe:c5:d1:f2:36:bb:c0:27:8d:bd:82:
14:41:3e:f6:c1:46:e4:08:75:f4:d8:b1:d8:32:57:
4d:2c:64:a6:ea:7a:6b:a1:9e:5d:ee:91:33:bc:a2:
c0:66:d9:a5:ad:34:37:f3:8c:72:c4:89:97:ff:de:
63:51:e2:80:ab:33:fd:f4:cc:f1:eb:e9:4e:1d:72:
ea:7b:4d:a7:38:fa:18:85:71:67:24:8f:5d:47:c4:
ab:7d:af:3b:68:85:00:3a:ae:2b:29:91:ec:42:2a:
b1:3b:09:9d:d3:30:fb:78:80:5d:10:cb:49:d4:e6:
34:af:2e:b4:6e:a0:9a:b7:26:25:b4:41:d0:d8:cf:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:6E:13:71:D0:6C:CC:74:E5:0E:D9:02:C5:CB:32:78:62:37:34
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138332e302f32342d3234203d3e203438333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.183.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a9:ee:b5:cb:02:d7:83:7d:cd:4c:6a:76:80:4c:32:35:76:
a2:2e:d0:81:4d:9f:dd:5a:08:5f:ea:36:53:94:89:af:69:95:
b7:2f:f0:12:eb:d3:48:95:a5:94:a2:9f:b6:ed:91:46:3e:b0:
02:3f:a4:40:a2:2c:17:4e:94:28:01:41:8f:59:00:d8:be:6a:
c2:e1:fe:68:51:28:8e:fe:72:86:0d:fd:87:f6:4a:e7:b6:30:
fc:71:89:fc:ea:bb:31:49:45:f0:f7:b3:1f:e5:a5:fa:5d:35:
a7:78:d1:7f:f8:f9:aa:9c:c8:c5:a6:4f:59:45:33:dd:09:65:
ff:3b:d9:b5:fe:2c:55:d7:00:c1:7b:e5:67:a7:d9:4e:f3:41:
2f:d3:3b:6d:5e:cf:07:01:fd:f1:78:46:6c:e6:a6:1d:3a:97:
a4:0e:58:81:e0:43:54:4a:32:53:55:a8:f5:2d:45:96:68:3d:
08:c6:33:03:a7:8a:b6:cf:54:2e:a4:03:0a:c2:3e:1f:9b:6b:
32:16:14:1d:f5:6b:f6:7f:75:d7:1e:b3:76:27:7d:18:7f:32:
55:64:10:6b:15:69:8d:0f:1e:68:a9:30:86:ca:58:8a:54:cc:
0d:25:07:b9:3e:d5:18:69:af:3e:a6:b9:fe:94:f1:b5:14:34:
d6:c2:62:1b
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 28 13:37:22 2023 by rpki-client on console-fra.rpki-client.org