Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234392e302f32342d3234203d3e20323635393139.roa
File: 322e35362e3234392e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier: iz/7z5A/7h1Tayi4QWSV1FsTSd/W+O9u9BHC08Ap0Iw=
Subject key identifier: 07:61:1E:4F:A2:79:94:0B:6D:2A:8F:B9:B8:20:9B:93:0D:17:11:04
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 349877EA77FC95897DAFCBDAAC5DA33B55A90ABF
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234392e302f32342d3234203d3e20323635393139.roa
Signing time: Fri 11 Aug 2023 21:17:51 +0000
ROA not before: Fri 11 Aug 2023 21:12:51 +0000
ROA not after: Fri 09 Aug 2024 21:17:51 +0000
asID: 265919
IP address blocks: 2.56.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:98:77:ea:77:fc:95:89:7d:af:cb:da:ac:5d:a3:3b:55:a9:0a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 11 21:12:51 2023 GMT
Not After : Aug 9 21:17:51 2024 GMT
Subject: CN=07611E4FA279940B6D2A8FB9B8209B930D171104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:f2:67:91:54:e5:5b:44:f4:eb:a2:40:3e:
6e:cd:af:67:a8:8f:46:5c:68:0e:ca:86:3c:36:0d:
a2:e7:af:76:0e:a9:c9:89:de:a3:74:eb:21:d2:d8:
ce:40:e2:96:84:be:c8:43:39:83:ac:bf:91:51:09:
d7:6f:d4:e4:80:02:2c:16:e9:b1:48:b3:77:eb:1b:
f9:89:fb:b1:22:26:2b:6e:4a:47:d4:a4:41:31:ba:
7e:56:72:05:09:ec:3a:b7:4b:5b:0b:aa:25:11:d0:
9d:af:2e:e9:99:50:19:64:3c:af:e5:ab:12:e4:ed:
08:f9:52:ff:c9:16:d9:cd:52:ce:2d:f9:ad:d3:78:
05:61:ee:e8:75:97:3a:29:09:bd:f0:cf:7e:b5:20:
41:a6:12:1c:a3:b8:9e:43:9f:09:d6:e7:73:04:4f:
a1:f5:ee:ef:26:1c:f9:10:17:21:dd:32:55:ca:d4:
e0:0d:a2:27:7f:c2:86:a6:18:b6:00:65:98:bd:e1:
d7:32:b5:72:d3:f9:ea:09:6e:47:20:a8:24:36:89:
40:fa:bf:ac:af:dc:c7:23:bf:14:26:34:aa:9c:c3:
e9:64:1c:78:6c:4b:fd:50:07:97:0a:e7:59:d3:a0:
40:2e:f9:54:11:ed:cd:64:91:4e:e5:22:b2:62:0f:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:61:1E:4F:A2:79:94:0B:6D:2A:8F:B9:B8:20:9B:93:0D:17:11:04
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234392e302f32342d3234203d3e20323635393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.249.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fe:eb:ce:68:c7:d9:7f:18:68:76:42:62:43:e7:1e:36:4c:
29:79:83:fe:5c:f1:76:ab:35:e1:71:37:74:68:f1:2e:a1:07:
d3:e7:a4:04:b0:8a:19:c1:34:4d:46:6c:7a:57:b7:a1:23:c7:
a2:80:dd:4d:a0:b8:47:d0:0d:fc:69:43:63:17:d1:ce:59:cd:
e9:55:46:a0:a1:c5:d7:11:83:b6:21:48:3c:4d:b3:0a:a0:9d:
0e:b1:3c:08:7b:ba:12:1c:57:84:18:6a:3a:12:59:77:f1:3f:
33:6d:81:4c:08:4b:9a:be:1d:93:aa:c3:5b:00:58:49:14:54:
28:ac:4f:cd:a0:9b:27:52:a1:a9:2f:e3:cc:82:f5:67:55:04:
fd:57:bf:4e:46:b6:27:5d:05:4e:55:33:cf:66:33:1d:12:64:
c1:53:00:e3:f9:be:15:04:1c:bc:b3:d7:46:8c:6b:1b:66:4b:
12:73:95:b7:b5:6f:89:ac:c9:63:f7:ad:e8:c6:93:a6:a3:40:
9e:49:19:87:aa:a1:29:0e:28:7f:e9:79:06:a2:5c:be:c3:a2:
6f:9f:b8:21:a5:1b:03:d6:dd:4d:9d:d9:01:05:c8:6e:51:ad:
a9:c0:89:bf:be:c1:ae:79:a1:65:4a:4c:68:84:61:ba:30:2f:
98:c2:45:7d
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 11 00:54:07 2023 by rpki-client on console-ams.rpki-client.org