Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e203631333137.roa
File: 3134362e31392e32332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: TWm+bwjvKAvPQLvqohrbmuw/Fb+/jAMEZ0HBAjEBX2I=
Subject key identifier: 78:78:1C:B6:CC:51:40:B8:C7:20:47:31:76:62:BE:FD:62:E3:E9:21
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 487D0F58885532D1F9B9B0BD0B32BEEFC2CFAF6C
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e203631333137.roa
Signing time: Fri 01 Dec 2023 07:28:02 +0000
ROA not before: Fri 01 Dec 2023 07:23:02 +0000
ROA not after: Fri 29 Nov 2024 07:28:02 +0000
asID: 61317
IP address blocks: 146.19.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7d:0f:58:88:55:32:d1:f9:b9:b0:bd:0b:32:be:ef:c2:cf:af:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Dec 1 07:23:02 2023 GMT
Not After : Nov 29 07:28:02 2024 GMT
Subject: CN=78781CB6CC5140B8C72047317662BEFD62E3E921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:5e:ec:73:a9:dd:32:b4:de:a6:be:99:76:
41:f1:4f:2c:2d:b2:c7:fa:5f:69:0e:0f:45:55:19:
60:3d:69:57:59:ad:09:2a:41:78:c3:06:83:b9:9f:
f8:ff:d3:e6:c5:ba:48:14:f0:18:69:6f:0e:55:66:
48:ce:27:73:95:88:14:2a:ac:b6:b6:83:b1:a8:22:
65:a3:df:66:74:64:87:e1:04:fd:79:ff:79:c5:8f:
e8:86:95:c2:d3:c8:5c:b8:29:46:59:ae:c1:c3:fd:
4b:7b:c5:d7:4d:0d:34:8b:e5:13:46:f2:8c:d7:25:
04:5b:90:67:07:7d:4c:62:aa:ce:2d:bf:43:ce:ef:
0e:1d:04:4a:af:d1:35:bc:19:88:1f:f3:01:4a:27:
79:52:6e:aa:28:36:72:01:cd:4b:12:74:f3:fe:66:
67:f2:27:e7:5e:08:94:49:14:d4:ae:4d:d2:99:fc:
10:72:61:e1:73:55:47:99:e6:89:0c:60:1e:7f:5d:
e4:1d:ff:37:22:8a:2a:35:60:54:b8:ba:af:de:df:
86:df:76:b8:bc:0c:c9:a9:d1:df:9c:d3:d1:d9:47:
5f:9c:84:b5:46:e8:3d:37:62:51:a6:ed:21:86:9c:
b0:c4:6c:ee:49:75:fa:a9:ea:c7:12:6e:9a:3b:da:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:78:1C:B6:CC:51:40:B8:C7:20:47:31:76:62:BE:FD:62:E3:E9:21
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d0:eb:c4:16:17:af:7d:38:a9:d4:b2:30:b2:fe:52:a5:03:
97:57:43:d2:03:dc:3d:00:e3:60:f5:2f:80:01:d6:7b:89:e9:
62:52:ab:13:e7:21:3d:f8:fc:4e:42:8c:05:63:47:c4:12:e3:
99:3a:d6:0a:62:95:66:de:bf:9b:b9:a2:0d:b8:f9:26:b5:26:
fc:a5:24:66:0e:51:22:01:12:49:42:c5:06:99:e4:e0:41:ae:
7c:bf:e1:60:5d:d0:a1:ef:5c:af:cf:9f:06:2f:6f:d2:fc:fd:
57:ce:1b:58:54:a7:89:da:88:58:0f:31:9c:6b:87:1f:0f:43:
84:fe:c9:b8:03:be:8e:cf:d2:d8:84:ee:ea:ea:4d:7c:51:a3:
13:35:e0:4a:14:66:24:6d:35:e4:d0:87:ce:00:9f:94:07:83:
f1:ec:a3:12:1f:a2:34:b9:46:fa:4d:75:51:e1:4f:24:3e:ee:
92:b0:36:d1:e1:bd:c7:0d:fb:33:4e:fc:71:93:ef:f4:9e:a9:
ba:03:2b:88:2f:de:26:1a:c9:33:fc:ab:79:51:b6:99:f0:5f:
25:b4:70:cd:48:52:cc:f2:27:05:09:f9:85:f0:c3:ba:1e:72:
4f:5e:ce:ec:89:39:20:2e:cc:5b:8d:f5:bc:63:74:1a:cc:32:
d3:40:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 23:50:07 2023 by rpki-client on console-fra.rpki-client.org