Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20323136343134.roa
File: 352e3138312e3137362e302f32342d3234203d3e20323136343134.roa (raw, json)
Hash identifier: lKd6eYEkuRVOh6H0flHQSSroAyux0DymbwK+tHRxIDE=
Subject key identifier: F6:AD:7B:70:C4:0C:82:29:90:85:E3:D5:BB:80:73:F6:6A:F5:19:AC
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 767675F7DF6ADBDA3EC26D82848369671C847868
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20323136343134.roa
Signing time: Thu 21 Sep 2023 11:39:09 +0000
ROA not before: Thu 21 Sep 2023 11:34:09 +0000
ROA not after: Thu 19 Sep 2024 11:39:09 +0000
asID: 216414
IP address blocks: 5.181.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:76:75:f7:df:6a:db:da:3e:c2:6d:82:84:83:69:67:1c:84:78:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 21 11:34:09 2023 GMT
Not After : Sep 19 11:39:09 2024 GMT
Subject: CN=F6AD7B70C40C82299085E3D5BB8073F66AF519AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:93:21:6f:37:dd:20:61:77:3e:51:51:f1:
4f:01:a1:bd:6f:22:8c:52:6b:f5:4a:1f:40:ee:e4:
35:66:50:3d:10:ae:1e:6b:34:4f:5f:09:1b:93:60:
ca:4a:3d:30:19:b3:63:cf:30:93:d0:21:3c:5c:e1:
43:cc:f6:d5:75:30:da:74:b7:27:98:61:bb:1f:0f:
6c:ed:5d:d4:76:d4:a6:e5:c4:99:65:d9:dd:e0:e6:
6f:49:97:ef:e5:5b:3f:49:4e:fe:3d:21:53:c7:ef:
5a:0e:bf:67:5e:22:8d:05:8b:82:08:73:be:f1:d1:
94:9d:e4:55:13:04:77:a9:11:e6:f7:a7:2f:7b:29:
c8:08:e9:96:e4:c3:9f:f8:13:54:1b:10:f7:4b:a7:
d3:78:7c:bb:2b:35:f5:30:45:32:c7:ab:61:16:cf:
8a:b2:aa:1f:89:79:62:b0:9e:0b:34:1d:7d:4e:6a:
c6:21:e0:e9:94:d9:c4:43:fa:7c:f1:f7:25:ad:8f:
c6:b0:5e:56:8a:08:f0:e7:c8:f1:7c:92:e3:05:c6:
d7:9f:98:a0:55:e1:b4:3c:f8:75:c2:35:68:77:ce:
46:8e:0a:08:2f:f4:81:53:45:d1:ac:9d:58:27:95:
7f:0c:d9:5e:e8:32:7c:9e:2e:5c:e2:57:e2:9b:2e:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AD:7B:70:C4:0C:82:29:90:85:E3:D5:BB:80:73:F6:6A:F5:19:AC
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20323136343134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.176.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:47:22:c5:e5:8e:0d:6e:b1:c1:62:5f:5d:20:2f:dc:d5:ca:
61:57:57:cb:1b:df:16:0c:c9:24:d7:c5:79:31:20:fd:7f:97:
5c:de:af:f0:af:bc:e2:9d:33:49:2d:27:86:95:03:02:bf:49:
fe:25:23:3a:1f:e5:81:2e:17:bf:2f:bc:50:1f:24:be:c2:a2:
c7:70:e9:06:a0:47:fd:8c:56:c1:55:0b:14:9f:0f:36:4a:67:
65:72:9e:83:12:93:31:4e:97:56:87:52:dc:88:d7:b8:af:1e:
1a:92:99:af:54:78:25:5e:0d:40:c3:f4:33:e3:e7:7b:c3:aa:
91:7f:f4:a3:8c:7c:df:51:22:30:bd:c1:91:1b:8a:4a:b7:e4:
ef:31:89:8b:80:9b:f7:6f:a8:08:51:51:08:76:56:f1:eb:76:
fb:46:4c:24:13:2d:e3:5a:70:46:f4:98:20:a6:f7:78:b5:43:
0b:33:4f:46:04:8e:69:a0:d8:2a:b1:92:b3:c7:3a:88:40:3b:
e0:15:98:21:e8:b9:46:79:93:d4:1a:16:c7:5d:5f:a2:0d:78:
51:81:bc:c0:48:b8:f4:06:19:4d:ec:5b:90:28:b9:3f:84:16:
ee:de:9e:d9:fd:a2:07:53:f8:3c:fa:39:d8:7c:51:ec:7b:fe:
05:b1:96:ef
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 26 03:00:18 2023 by rpki-client on console-fra.rpki-client.org