Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e20383334.roa
File: 3137312e32322e37392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: gxt/M9sKEmby5+LBxzZrBQtPvfQyOfBbHQsdq1EfGQg=
Subject key identifier: D4:6D:19:FB:81:36:3B:0A:8C:E0:40:D2:D3:95:8A:0A:4A:E8:52:BA
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 1679065CBF996BB995CCD0FA48DE039C00C10246
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e20383334.roa
Signing time: Mon 12 Jun 2023 00:00:22 +0000
ROA not before: Sun 11 Jun 2023 23:55:22 +0000
ROA not after: Mon 10 Jun 2024 00:00:22 +0000
asID: 834
IP address blocks: 171.22.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:79:06:5c:bf:99:6b:b9:95:cc:d0:fa:48:de:03:9c:00:c1:02:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 11 23:55:22 2023 GMT
Not After : Jun 10 00:00:22 2024 GMT
Subject: CN=D46D19FB81363B0A8CE040D2D3958A0A4AE852BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:ba:9e:cd:af:f4:6b:63:87:86:98:74:09:
11:60:58:65:9d:14:27:de:62:10:16:d6:c8:f8:63:
6f:a3:51:d7:8a:78:67:57:45:d2:03:54:3d:74:64:
42:22:0d:e2:48:f1:57:71:d1:e1:67:b3:30:29:23:
ff:04:43:ad:85:1f:3a:08:e4:df:c1:32:4a:c9:be:
bb:c3:ff:a0:c1:3d:f6:c4:b3:a5:31:2e:de:17:20:
4f:e2:66:9d:ee:27:fe:b9:42:90:af:ee:83:2a:92:
c1:24:40:3d:27:58:4d:ab:ee:c6:69:81:78:5c:1d:
8a:0f:cc:b4:6d:e6:ae:09:7a:09:39:e6:c4:47:91:
7a:0b:3e:7c:0b:ea:31:1f:75:df:f1:27:a4:63:e9:
9a:24:40:28:e2:2b:1b:92:ce:14:dd:76:64:dd:4d:
2e:e9:f4:e3:75:9c:98:b8:50:4c:c4:f1:0e:a8:a3:
a4:0c:4f:ea:dc:ad:d1:4f:29:c7:c4:7a:82:be:1d:
ab:24:e0:58:99:28:ab:35:15:e8:c6:b7:ad:3c:bf:
35:08:9b:f2:90:8c:97:4b:d0:64:04:66:8e:2f:ae:
a7:e4:bf:db:d7:3a:8f:b7:c0:be:1f:40:da:3a:b8:
ad:37:81:dd:9a:4c:9f:75:a8:35:15:a5:56:df:a6:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6D:19:FB:81:36:3B:0A:8C:E0:40:D2:D3:95:8A:0A:4A:E8:52:BA
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.79.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2d:94:57:bf:1d:47:1a:27:a5:10:5c:89:9b:9d:00:ce:43:
de:81:94:72:1c:56:dc:b8:f1:10:e8:3d:ff:24:9e:93:88:4a:
bc:9e:35:a3:63:2d:a1:5a:75:c8:d7:f6:8d:d2:8b:ad:d9:4f:
67:84:8e:f9:f8:71:a8:bf:f5:4a:88:50:fa:e6:7b:08:94:f7:
c0:59:4b:a4:70:1b:1f:c9:23:b7:fa:64:df:85:28:11:52:86:
85:f7:d5:02:bf:d1:5d:69:4e:f0:cf:3d:c4:02:90:1b:a0:a9:
1e:c9:b7:61:be:21:38:6d:0d:dc:83:dc:6d:2b:c7:82:5e:ca:
2c:46:1d:50:22:80:2d:c7:10:c5:f6:5e:23:a3:ec:a9:f2:f1:
24:ef:1a:e7:d4:8a:d7:a1:b4:89:31:03:9a:33:5a:e9:ea:6e:
3d:ad:b2:89:ad:29:9e:b9:72:7e:88:0c:c2:48:c0:82:c1:fd:
9a:78:ad:ca:af:42:81:b4:d6:f3:67:87:1c:17:e5:86:4e:32:
59:b5:0f:60:46:24:c1:ad:30:c8:99:82:58:8d:bf:c7:39:d6:
21:e2:a9:5a:d3:0a:4b:39:ae:73:a4:d2:d7:c9:c8:c0:08:77:
3f:3b:1b:48:31:09:ae:b6:ad:c1:99:d7:9d:15:10:c2:7c:8a:
ab:35:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org