Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234392e302f32342d3234203d3e20383334.roa
File: 322e35362e3234392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Z5xymS0psmuLSdAMMUwIR8ptuWdO6kjG5YUDlCgrjww=
Subject key identifier: 11:32:15:96:F1:9A:4B:56:BB:E6:B2:89:4E:85:D1:B5:70:09:74:5A
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 3DC1C0BF9408B2458B9EA6305E2C3BF3D097541A
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234392e302f32342d3234203d3e20383334.roa
Signing time: Wed 11 Oct 2023 00:00:06 +0000
ROA not before: Tue 10 Oct 2023 23:55:06 +0000
ROA not after: Wed 09 Oct 2024 00:00:06 +0000
asID: 834
IP address blocks: 2.56.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c1:c0:bf:94:08:b2:45:8b:9e:a6:30:5e:2c:3b:f3:d0:97:54:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 10 23:55:06 2023 GMT
Not After : Oct 9 00:00:06 2024 GMT
Subject: CN=11321596F19A4B56BBE6B2894E85D1B57009745A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:c9:12:87:8b:e8:34:22:4a:6e:ac:04:60:
a0:10:ce:ef:a6:4a:80:d7:7b:e2:e5:70:5f:1d:ad:
48:0a:5a:35:79:cc:8b:42:50:8b:31:05:b7:ae:c6:
00:fa:80:39:b2:28:17:1c:83:50:44:d1:c7:bf:7d:
15:e5:45:91:d8:69:48:f9:a1:d1:b2:2b:bc:39:7d:
b6:22:d2:14:81:91:18:e8:01:66:08:bb:87:1a:bc:
73:23:04:72:36:ab:ef:ca:28:cc:b2:c7:bd:8a:ba:
d2:3a:f4:ce:a9:e5:e7:c8:c0:93:e3:ad:7e:68:83:
87:b8:39:37:0e:23:2b:24:28:78:92:9d:40:04:c9:
c7:0c:c9:43:13:51:23:5f:5d:03:00:7a:6a:2c:9f:
ba:9b:bd:4a:5c:7b:57:48:18:9f:a5:63:9d:92:6b:
39:24:9d:82:8c:62:b4:2f:47:26:1d:44:c1:32:83:
7b:b6:57:22:9a:8e:1f:80:14:af:72:f5:d5:76:a8:
31:f2:a0:49:fe:2a:e7:4a:f5:a0:3d:89:cf:29:cc:
d0:d2:07:59:c2:5f:f9:32:3e:e3:3e:6b:fa:6c:36:
e3:7e:bf:a4:ef:e8:a9:22:21:be:de:96:03:3e:83:
5c:f6:77:b4:96:cd:2a:49:a4:09:18:f8:4f:73:06:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:15:96:F1:9A:4B:56:BB:E6:B2:89:4E:85:D1:B5:70:09:74:5A
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.249.0/24
Signature Algorithm: sha256WithRSAEncryption
69:21:a5:2d:c3:73:5e:01:bb:a4:df:ca:0d:fd:b3:0c:3d:bb:
15:6e:af:60:b7:c3:71:15:f5:c3:5f:b6:91:85:49:db:b9:24:
e4:b4:1d:7c:19:c2:6f:25:15:5e:ac:c7:2c:ca:cf:36:c2:47:
4f:ca:d6:1a:9b:f1:27:2d:13:11:c4:6f:8a:81:73:09:53:62:
6a:c0:cf:bd:e5:2a:d8:f6:79:b1:bb:63:be:28:44:e6:34:6e:
fb:2d:bc:98:e6:15:ad:6f:50:5b:92:26:a8:96:c4:b2:00:d1:
15:85:d0:f3:65:7c:5c:ec:da:57:df:06:ac:1f:0c:03:e9:0d:
50:35:52:f8:dd:60:1a:20:58:7c:68:f9:70:66:47:eb:5a:ae:
de:2a:65:65:ea:a0:cc:50:1f:dc:32:7f:68:9c:13:95:aa:fa:
b2:f1:98:c3:d1:2c:24:2f:e0:a9:ce:c0:b6:fd:e5:5b:45:33:
8d:b2:db:49:85:58:51:01:f0:0e:56:2d:dd:4f:df:79:5a:50:
95:4f:60:fb:a6:1a:14:c5:88:0f:64:0d:82:bc:43:80:85:9f:
1e:29:d6:a1:4e:fa:ee:50:08:96:d0:a1:83:74:81:e4:97:17:
c7:0e:7a:d4:ab:62:90:f4:d9:ea:8d:68:89:d2:ef:cf:cd:35:
08:c3:0d:cf
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 11 13:07:14 2023 by rpki-client on console-ams.rpki-client.org