Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137332e302f32342d3234203d3e20323039323630.roa
File: 3138352e3137322e3137332e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier: RK+G+mtHivEZhH4INwUmdt71pMDovhkJwHid0mQJ8q4=
Subject key identifier: D1:CA:C1:1C:98:4B:A0:C1:6A:13:37:3B:A7:B1:3B:54:6E:D9:9B:89
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 2AFD94A0B71F2D60FFCF8EF87559C80021D5B76B
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137332e302f32342d3234203d3e20323039323630.roa
Signing time: Wed 22 Mar 2023 18:07:01 +0000
ROA not before: Wed 22 Mar 2023 18:02:01 +0000
ROA not after: Wed 20 Mar 2024 18:07:01 +0000
asID: 209260
IP address blocks: 185.172.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:fd:94:a0:b7:1f:2d:60:ff:cf:8e:f8:75:59:c8:00:21:d5:b7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 22 18:02:01 2023 GMT
Not After : Mar 20 18:07:01 2024 GMT
Subject: CN=D1CAC11C984BA0C16A13373BA7B13B546ED99B89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:3f:c1:3b:f8:b5:2b:73:55:e6:db:9b:3f:
75:92:96:bf:76:f4:6a:7b:d1:8f:cf:ab:45:b4:db:
f9:f2:f8:f3:a2:77:f3:aa:7b:25:30:8d:68:1f:c6:
a1:7a:60:3a:58:b6:e0:00:67:80:9e:10:a6:38:17:
cf:5a:5d:66:83:95:00:4e:ac:15:14:c4:f4:65:af:
4c:31:9e:fc:f6:06:de:7a:dc:91:d8:44:64:20:5d:
86:e3:d4:41:d8:e6:fb:9c:0b:51:cd:be:b2:55:f8:
60:a0:d9:97:e6:f8:29:af:8b:04:d1:b1:17:5d:84:
56:0b:55:53:2d:87:66:04:31:1b:9a:d6:71:7d:76:
18:af:5c:88:c1:1c:8b:4c:b4:d7:be:96:bd:da:b1:
a4:02:a2:09:e6:68:7a:3e:54:c0:c6:ea:f0:96:58:
30:17:ac:ba:f1:e8:5f:ad:f9:c2:31:aa:84:6b:a6:
af:7d:38:a3:66:5a:b1:e1:16:a3:0e:cf:c7:4d:92:
80:08:1b:fa:5a:ee:34:a7:1c:ff:d3:02:a9:06:4a:
1e:8d:99:26:84:c0:d7:f2:86:87:c6:b0:e3:6f:62:
92:d5:48:91:b9:5e:75:8b:ed:7b:e9:dd:16:9e:3d:
d0:65:7e:a9:91:d3:d5:18:e4:51:56:54:45:67:2c:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CA:C1:1C:98:4B:A0:C1:6A:13:37:3B:A7:B1:3B:54:6E:D9:9B:89
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137332e302f32342d3234203d3e20323039323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.173.0/24
Signature Algorithm: sha256WithRSAEncryption
81:3f:9c:0e:65:c0:87:1b:f1:55:a6:61:2a:7a:f4:0e:e6:6e:
51:6d:74:59:f0:d5:01:a3:ba:fe:79:13:f8:12:bd:10:36:d0:
75:ad:56:27:12:11:71:63:2b:d6:42:48:75:fe:44:24:43:85:
1c:93:b6:93:49:ad:6a:19:64:28:bc:36:f7:6f:57:24:de:ff:
69:19:63:77:d1:b6:2d:82:57:e4:cf:63:6d:5c:2a:70:00:1c:
b0:5a:76:d7:01:08:cd:69:b8:b3:75:01:36:9e:54:12:d1:b0:
df:58:ef:e9:f8:d0:74:6f:a6:c2:b6:66:df:0f:9b:bf:7c:62:
c2:cd:b6:4f:a8:02:76:f5:59:3c:ba:16:c0:6b:a2:d8:70:05:
8c:20:bb:26:56:f6:bb:a9:95:a4:75:06:a4:60:3a:ee:9d:46:
c3:16:bf:a0:17:3e:cb:fb:0d:ff:44:1b:a7:6e:6c:44:47:b2:
0b:51:9e:e2:85:cf:0e:a8:e4:33:75:df:7c:4e:ea:3d:4c:a0:
47:08:4f:1e:5d:d2:32:f6:bb:86:0a:36:ec:e8:01:74:81:fe:
f8:14:2a:19:31:43:c4:b5:68:f1:39:70:e6:19:1a:44:54:5a:
0d:8a:7a:36:f5:2f:45:df:19:47:59:2f:ec:4f:f7:04:c3:33:
ae:fe:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org