Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37372e302f32342d3234203d3e203631313338.roa
File: 3137312e32322e37372e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: LPHRvSs0Qx8PHQKRDRycYTkzbN1B6ttobIlA9suFAh8=
Subject key identifier: DB:A5:D5:0F:12:57:8B:8B:2E:E9:ED:F1:EF:9C:1E:A4:A9:C5:54:4F
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0B806395E63BBB35D92B130432F628A5301A3682
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37372e302f32342d3234203d3e203631313338.roa
Signing time: Tue 23 May 2023 08:27:33 +0000
ROA not before: Tue 23 May 2023 08:22:33 +0000
ROA not after: Tue 21 May 2024 08:27:33 +0000
asID: 61138
IP address blocks: 171.22.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:80:63:95:e6:3b:bb:35:d9:2b:13:04:32:f6:28:a5:30:1a:36:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: May 23 08:22:33 2023 GMT
Not After : May 21 08:27:33 2024 GMT
Subject: CN=DBA5D50F12578B8B2EE9EDF1EF9C1EA4A9C5544F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:50:e3:10:b8:44:df:98:71:a4:58:1a:b5:
bc:c2:b5:fa:48:f8:13:94:73:3c:af:0c:26:d1:f8:
58:ec:ea:d0:96:de:49:96:8c:01:93:05:01:81:36:
7e:11:c7:44:52:a8:d8:a2:61:ad:f1:41:49:22:20:
d3:b5:01:ac:ef:0d:2a:8b:ba:15:ac:ef:a6:e4:7f:
47:5e:e1:92:49:68:44:0f:89:a3:31:06:b9:b1:96:
d7:55:23:6e:82:58:d8:f3:49:81:60:32:bc:b4:d2:
b0:62:8e:49:56:4a:0f:94:80:ca:31:39:4d:d8:b6:
31:92:e3:5d:d7:4f:4e:49:2b:0f:ef:4e:82:eb:2d:
d2:1c:8d:db:a6:66:13:9f:8d:a3:18:ba:df:b7:d7:
66:0b:99:cc:b0:4f:16:08:60:25:cb:b4:f8:e7:fd:
40:14:33:86:dc:22:46:cb:86:43:78:8b:c9:f9:d8:
ee:dc:4c:fd:80:fb:e6:5d:34:55:1c:2a:c8:05:f2:
d0:9d:87:3a:68:6d:58:01:69:7f:88:ba:aa:d9:2b:
a1:c6:31:8e:72:f6:2b:a0:eb:ac:97:69:ec:d8:97:
89:cb:df:c4:ed:35:19:d1:f6:a9:24:c4:2e:c6:5e:
ae:d0:ce:82:64:f5:d0:aa:6b:02:f9:ce:bc:e8:bd:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A5:D5:0F:12:57:8B:8B:2E:E9:ED:F1:EF:9C:1E:A4:A9:C5:54:4F
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37372e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.77.0/24
Signature Algorithm: sha256WithRSAEncryption
44:02:af:be:ea:a5:04:47:fd:7f:89:31:4a:21:d9:0b:5d:64:
45:82:72:35:05:c6:b0:cf:9d:41:15:8c:a3:a0:48:7a:f8:44:
73:62:ea:5b:f9:dc:0b:b2:af:97:18:e2:28:0f:47:b2:2a:fe:
0c:d7:28:52:11:f5:88:d4:ec:44:91:48:dc:35:58:73:cf:d2:
5c:85:2f:f8:4b:57:1b:1c:40:40:36:d4:c8:8c:28:f4:b3:2e:
56:08:f4:5a:ec:65:2b:43:80:77:5d:dd:e0:68:4e:79:40:bd:
d1:5f:23:51:5d:ad:ff:e6:7d:2e:95:77:00:f9:be:15:f4:5c:
e3:57:1f:db:c8:52:83:c1:91:6c:14:64:b2:88:31:b2:a0:53:
fe:0e:70:89:37:47:1a:42:d0:6b:c4:a2:f9:00:b1:4a:b3:fc:
fd:51:69:e7:d8:2c:a0:e8:12:ca:67:99:3c:77:f2:08:27:d9:
fc:04:33:cf:53:54:9a:5c:66:25:4d:d4:eb:ad:05:26:3e:29:
69:ac:2f:70:6b:d0:27:9a:5c:f8:27:ea:c8:3a:54:13:66:9b:
3d:28:e1:c0:16:85:e1:1a:28:9b:d2:ac:0a:33:78:48:10:ea:
5e:0b:12:8a:38:14:67:27:ca:6a:28:7f:a1:a4:75:46:33:5a:
7a:b5:af:e5
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 23 00:33:50 2023 by rpki-client on console-fra.rpki-client.org