Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e20383334.roa
File: 3139332e33392e31302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cVsPapkkQJquDnUGQ9Ed24+wxDV0apsuQLRTXd+/HVU=
Subject key identifier: C9:73:27:19:AE:FC:5D:17:CD:0A:7A:88:25:1D:F8:FF:D7:B1:59:CA
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 131B5D25587DF3FFD988BBDF2727B0E594AE7A81
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e20383334.roa
Signing time: Tue 01 Aug 2023 12:30:03 +0000
ROA not before: Tue 01 Aug 2023 12:25:03 +0000
ROA not after: Tue 30 Jul 2024 12:30:03 +0000
asID: 834
IP address blocks: 193.39.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1b:5d:25:58:7d:f3:ff:d9:88:bb:df:27:27:b0:e5:94:ae:7a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 1 12:25:03 2023 GMT
Not After : Jul 30 12:30:03 2024 GMT
Subject: CN=C9732719AEFC5D17CD0A7A88251DF8FFD7B159CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:61:03:c0:96:09:5e:4c:14:87:63:99:12:
ed:07:cc:48:a2:4f:35:8b:74:b8:1e:e2:59:0d:d7:
4e:ec:89:97:74:12:25:08:da:11:24:43:40:fe:81:
f4:f0:dc:b4:5f:cd:95:09:12:e2:20:cf:9e:19:10:
73:58:67:55:de:3d:75:60:79:6a:4a:cb:51:c9:06:
85:e7:c1:96:26:ea:42:b4:51:9f:d9:44:84:52:85:
60:4a:5a:38:fd:18:a8:21:39:62:53:88:10:de:4f:
cc:db:bc:31:a0:82:98:c4:e3:9f:15:73:ff:e6:74:
b4:2b:4e:36:58:86:4f:50:8a:90:30:b6:f2:bf:bd:
1b:aa:67:4a:a7:d4:ad:d5:fe:62:49:fe:31:a8:2b:
d1:f2:45:2a:2c:5c:b3:13:5a:ab:e4:d5:ac:17:e7:
0e:bc:15:5a:6d:e1:3b:c3:41:fe:44:c7:45:58:1a:
7f:26:e8:4e:0b:39:a9:aa:5f:93:d1:28:d2:ad:f0:
22:3f:81:7e:c0:67:b6:8b:ef:e0:78:37:96:ab:02:
b8:10:08:53:cf:24:e0:c8:c7:04:07:b2:2f:a2:d2:
4d:6c:c1:a4:77:d4:33:dd:56:e1:a3:80:1c:d4:0b:
3e:0e:e6:9c:3a:63:f2:d9:07:5b:3d:49:85:c5:a3:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:27:19:AE:FC:5D:17:CD:0A:7A:88:25:1D:F8:FF:D7:B1:59:CA
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
34:77:1f:1a:46:f0:73:d2:a9:1a:32:30:ee:06:ad:09:66:ee:
b9:eb:a0:08:6f:bf:39:22:c2:64:2e:17:32:30:66:12:ec:72:
b3:31:86:ef:3c:40:1e:a9:15:87:f0:f5:5f:b6:25:63:5f:29:
fb:a8:f4:ba:99:d3:41:4b:c2:a3:39:0b:14:dd:7b:d9:74:99:
0e:e8:51:9d:fd:14:20:2c:a8:d7:dd:d3:bf:27:6b:fc:04:69:
81:0f:b1:9f:6c:62:79:b7:43:bf:ca:fa:20:32:5a:a0:cb:ee:
10:a5:a9:17:2a:23:e9:1c:be:ee:a5:1b:c6:06:75:14:eb:52:
0b:ae:32:97:b7:6f:cf:58:7e:70:1e:bf:0d:45:79:84:71:6a:
01:ef:d2:3c:81:9a:94:74:d8:1f:5c:af:35:88:28:be:7a:e0:
52:5a:6b:65:2e:f8:01:5d:10:81:d1:6a:48:8f:e1:92:be:f1:
58:e8:f8:fb:fa:14:85:b5:0c:42:af:b9:69:72:8d:bf:ea:c2:
86:5d:e1:32:9b:e0:6b:bc:37:bb:2c:fe:d0:c9:8b:6d:ff:03:
0e:67:67:67:b8:1f:dc:2d:69:71:b4:9c:9d:0f:45:61:a5:0d:
94:1e:5e:3b:ff:ed:96:06:29:93:5b:cd:f6:db:c8:26:5a:06:
15:d9:27:d9
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 7 16:10:59 2023 by rpki-client on console-ams.rpki-client.org