Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20323039303433.roa
File: 352e3138312e3137362e302f32342d3234203d3e20323039303433.roa (raw, json)
Hash identifier: yIxd+l5HuELfZpaKt/AbB9yajrjb1g1DfSmeo6ZTkjw=
Subject key identifier: C6:25:D2:8F:38:2B:CB:AF:2E:55:6C:EB:2A:F7:02:43:BB:1B:22:1D
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0E11331543CDA8A842E13482B44A8C5FA141E822
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20323039303433.roa
Signing time: Wed 12 Apr 2023 11:28:58 +0000
ROA not before: Wed 12 Apr 2023 11:23:58 +0000
ROA not after: Wed 10 Apr 2024 11:28:58 +0000
asID: 209043
IP address blocks: 5.181.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:11:33:15:43:cd:a8:a8:42:e1:34:82:b4:4a:8c:5f:a1:41:e8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Apr 12 11:23:58 2023 GMT
Not After : Apr 10 11:28:58 2024 GMT
Subject: CN=C625D28F382BCBAF2E556CEB2AF70243BB1B221D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:ac:66:04:b2:f0:d2:f3:82:f4:c6:b6:86:
ba:ae:fb:59:3e:6c:87:4e:d1:3f:f7:b1:6d:e6:d5:
6e:fa:83:22:e7:38:a9:90:88:5f:1b:7c:eb:e8:66:
51:b5:ba:ae:a0:66:4c:a5:d5:e3:6b:e4:99:f4:38:
81:66:6b:99:63:79:2f:a6:0f:55:36:e3:fa:09:f7:
7c:c4:5d:48:46:b0:5f:bf:3c:7c:e7:b7:52:e2:63:
c0:13:48:a5:38:3c:0e:dd:95:06:fe:b0:3f:55:82:
32:b7:e6:c1:31:16:0b:4f:ec:71:8d:9f:bf:84:2b:
f8:0c:a0:2e:4b:d6:ae:28:c3:71:b8:c7:6f:d5:25:
67:2a:33:49:c7:b7:6d:a2:9d:e5:84:66:cc:ce:28:
84:84:24:93:bf:48:ce:2b:2d:47:77:ff:c7:a0:49:
78:bf:26:cb:7c:bc:0d:79:5e:f6:59:a7:2b:3d:da:
da:fb:f0:2f:75:33:d8:ef:c4:4a:28:b7:01:1d:a0:
15:ea:be:0d:3a:0b:78:08:f3:8a:9d:31:d4:f5:98:
89:b6:15:b3:1d:d3:d3:42:ee:d6:a0:59:77:b5:bc:
65:74:8a:d6:36:db:e3:34:67:ad:51:83:6c:f6:98:
85:d5:3d:88:46:2a:8a:6e:d9:04:41:d9:a1:f0:7b:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:25:D2:8F:38:2B:CB:AF:2E:55:6C:EB:2A:F7:02:43:BB:1B:22:1D
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20323039303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:df:67:f9:c7:5d:06:ff:1a:1d:ee:9d:dc:49:83:85:fe:0b:
3f:1c:f3:2c:64:e8:1f:89:f4:a6:13:2b:ff:09:60:24:33:50:
d1:8b:b1:90:bd:66:de:2a:c0:c4:e7:72:be:97:0f:9b:e5:a7:
35:ae:d6:5f:ac:6c:29:29:2e:6d:9d:e2:32:d7:1a:eb:e3:c6:
23:b1:5a:b3:bc:43:43:38:a1:6a:65:25:af:f4:3a:06:6c:69:
8b:4f:35:9c:09:c1:9d:a5:e4:ed:7d:bb:40:f7:5d:bd:5e:e6:
fc:8a:82:13:53:7a:9a:c3:ef:24:cb:de:e2:c5:f5:f2:8c:19:
c4:cc:c4:66:2a:28:c1:b5:0c:ba:3c:cd:8a:12:b4:8e:a7:c8:
cf:9a:a0:d5:38:2f:eb:3d:32:aa:f6:3c:09:ad:b5:16:17:e4:
07:a4:3b:0a:cb:20:e0:b8:a8:64:c1:75:82:eb:94:bf:38:e0:
fa:85:ce:f4:d6:b6:46:9d:98:d7:c8:02:85:bd:63:2c:02:f5:
82:90:cc:3f:71:51:9b:26:41:c4:53:9a:dc:44:f3:9d:1f:80:
4c:e2:ec:49:df:d3:48:57:cb:4f:3a:a7:c9:b9:9c:30:a5:13:
78:8c:69:0f:ed:42:9e:f5:33:16:81:9c:fe:17:2a:1c:9b:c7:
33:32:ae:a8
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 12 00:36:32 2023 by rpki-client on console-ams.rpki-client.org