Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e2031323339.roa
File: 3134362e31392e3231362e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: VOEO7OAwI2Leu5cEqKwDSGR3M7aVqq2KGnQU3FQcLUA=
Subject key identifier: E5:7F:03:C2:0F:BF:0F:F8:3B:F2:84:C0:7A:78:C2:DB:15:54:51:38
Certificate issuer: /CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
Certificate serial: 7AC0C6900F850E583A4A0419A1F19D14D2CDDFB6
Authority key identifier: 8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e2031323339.roa
Signing time: Thu 23 Mar 2023 16:43:49 +0000
ROA not before: Thu 23 Mar 2023 16:38:49 +0000
ROA not after: Thu 21 Mar 2024 16:43:49 +0000
asID: 1239
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c0:c6:90:0f:85:0e:58:3a:4a:04:19:a1:f1:9d:14:d2:cd:df:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
Validity
Not Before: Mar 23 16:38:49 2023 GMT
Not After : Mar 21 16:43:49 2024 GMT
Subject: CN=E57F03C20FBF0FF83BF284C07A78C2DB15545138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:3b:b1:04:db:20:bd:fc:59:89:14:63:a9:
47:43:cf:38:9d:87:6f:6b:66:e1:8c:b0:e6:4b:05:
dd:52:d1:ad:bc:80:79:1c:b0:7b:37:c4:86:df:d1:
9a:49:4e:2a:26:a3:ed:33:ae:f2:92:3e:81:5e:98:
a3:3b:21:59:71:5a:45:9d:22:8b:56:75:e1:ce:0d:
9d:af:f4:56:43:1c:0d:ad:61:11:23:6b:3e:16:f7:
3f:78:3e:d9:45:8e:76:d9:7e:52:fe:7c:43:49:84:
07:0f:ae:6b:ec:f0:76:db:1f:d8:9a:27:da:7a:dc:
14:e0:41:86:8e:4c:d4:0e:65:45:2d:bf:47:48:08:
8f:c2:6f:44:61:4f:45:9e:76:a1:f6:3e:e6:6a:52:
da:a4:98:96:d5:1b:3d:c6:de:6a:6b:6b:9d:c1:7a:
43:b4:37:46:29:ca:24:ef:a2:e2:72:9d:f9:6f:99:
05:91:27:5c:53:6a:4b:ea:72:35:15:2b:dc:07:02:
e0:22:7e:72:08:0b:34:bd:a1:9c:36:3d:77:16:b6:
52:f6:ba:3b:62:c1:e0:41:66:ca:27:ae:10:76:1f:
cb:17:cb:01:32:4e:8f:19:0c:e2:0c:be:6e:39:92:
3d:cf:e6:db:74:18:81:2b:c3:ae:f4:b9:aa:75:e5:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7F:03:C2:0F:BF:0F:F8:3B:F2:84:C0:7A:78:C2:DB:15:54:51:38
X509v3 Authority Key Identifier:
keyid:8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
80:18:82:9b:a5:62:6b:51:32:a9:08:97:13:23:f5:37:c4:35:
da:8e:27:21:2f:a8:66:9f:d1:2f:da:11:01:b7:13:c7:af:40:
f0:b4:14:9b:81:0e:0f:9c:02:0b:f8:b6:9a:ac:8d:09:61:59:
93:d1:5b:35:96:0e:b1:e9:48:0b:b6:00:74:0a:d7:0f:ab:a8:
23:89:4c:7a:2c:ff:97:5e:a1:a4:f3:27:20:54:12:00:6c:fd:
50:15:2a:fc:8a:52:f1:86:b6:26:d8:ad:c7:e7:67:f1:9f:8f:
62:0c:5f:b8:6d:e5:00:7e:ec:4e:5a:d8:81:73:a0:ec:39:af:
a3:f8:6e:80:14:e6:b8:20:9e:e8:67:c5:80:7b:e1:77:64:c0:
05:b9:88:05:1b:99:1f:8c:88:77:a4:70:2a:63:73:5b:01:41:
bd:54:52:d7:2e:a1:8c:c7:57:5b:2b:70:af:28:a7:d8:5b:ae:
e7:b1:e6:bd:a9:72:32:33:c8:1f:63:40:ca:2c:bb:ed:0e:7a:
fa:e7:2b:2b:2b:64:10:a0:34:03:7f:b4:dd:03:98:19:b6:9b:
42:10:d8:13:53:63:01:44:c1:b6:4d:76:6b:8b:21:a5:3c:a0:
6d:82:35:a3:f9:fc:e4:45:ed:fa:40:bc:db:80:a2:49:0f:8d:
25:9b:5e:fe
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 21 00:35:19 2023 by rpki-client on console-fra.rpki-client.org