Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137372e302f32342d3234203d3e203631333137.roa
File: 352e3138312e3137372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: Z7JReTuegsyBGDDAOGRVDtWNnJKslVDgUvtOHMh6qSw=
Subject key identifier: 5C:1F:40:0C:16:D1:72:5D:27:39:C1:E8:5B:D8:82:DF:40:50:4D:02
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 3B1A43203020F0B530F5D172724E6F46CFDB690E
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137372e302f32342d3234203d3e203631333137.roa
Signing time: Wed 07 Jun 2023 13:11:32 +0000
ROA not before: Wed 07 Jun 2023 13:06:32 +0000
ROA not after: Wed 05 Jun 2024 13:11:32 +0000
asID: 61317
IP address blocks: 5.181.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1a:43:20:30:20:f0:b5:30:f5:d1:72:72:4e:6f:46:cf:db:69:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 7 13:06:32 2023 GMT
Not After : Jun 5 13:11:32 2024 GMT
Subject: CN=5C1F400C16D1725D2739C1E85BD882DF40504D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9c:c0:16:6f:b2:14:e8:a7:c0:e6:b7:fa:b4:
a0:b9:3d:e6:3e:90:c4:92:83:3e:7d:a9:3a:dc:e1:
1d:52:6d:8c:e3:a4:5c:da:dd:54:d1:31:84:23:f9:
a5:14:68:22:50:a5:71:85:4d:90:ff:ff:90:23:3a:
f7:40:c6:41:f7:dc:07:95:29:59:4a:03:8b:95:6c:
a2:c7:94:7f:b6:89:b4:99:7c:7a:76:6c:97:d0:84:
8e:57:ac:ab:ab:bd:ab:b1:82:4e:0d:c0:83:ec:ff:
76:48:3f:21:ae:67:f3:39:29:a9:1b:38:a4:46:52:
0a:fd:8d:ae:15:3e:08:7e:50:a1:4e:ac:42:ad:36:
f9:b3:27:35:58:ca:31:a3:94:7d:56:fb:86:ab:27:
42:65:07:d8:8c:8a:9a:4b:b6:de:9a:26:70:cf:57:
1a:3f:b4:a2:d1:43:bc:a0:47:e1:d4:39:f3:14:f3:
13:5f:a7:62:01:ec:a8:30:df:b0:41:6e:f5:8b:00:
63:cc:ce:4d:ad:e1:96:7f:79:9b:ec:1e:b6:6e:e4:
f1:b2:99:11:5b:9a:f1:90:cf:6e:c4:34:3b:13:19:
f0:81:4c:2f:0a:8c:0f:f6:12:e2:4a:b4:4e:53:e1:
8a:0e:f5:88:28:87:28:07:1b:f8:1d:9f:2f:bb:e1:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1F:40:0C:16:D1:72:5D:27:39:C1:E8:5B:D8:82:DF:40:50:4D:02
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:2d:6f:68:55:e7:c7:86:68:e2:8f:80:19:52:51:3c:38:b0:
b0:8b:4a:28:99:52:81:80:72:3b:52:06:a6:31:71:3a:54:3f:
01:92:15:6d:38:0e:90:a4:fe:e6:e7:09:6d:51:c4:fa:2e:05:
12:27:4d:38:3f:b6:74:fb:78:48:6b:b3:22:c2:9e:91:6b:28:
d2:92:57:99:d7:d0:33:88:42:2b:91:4f:9d:9c:e5:8e:5d:0a:
40:f1:7f:5c:e7:92:b0:90:32:05:88:3c:b3:8e:3c:66:76:7f:
a2:71:30:bc:8c:f1:89:11:f5:79:28:78:69:d3:3c:a1:d8:b3:
40:7b:68:51:04:59:ab:fa:ee:48:59:62:8c:1b:05:05:21:01:
31:e8:c1:8a:f3:04:6a:e7:74:75:fb:0c:d6:02:7c:57:e7:67:
c3:25:cc:36:78:ea:57:16:81:ec:12:3f:83:4d:4c:15:65:ce:
41:43:3f:41:12:58:84:c8:d2:28:77:c4:ff:3d:b4:07:7c:ed:
22:fe:32:94:b6:98:f6:34:5a:87:c6:bd:91:b6:f5:7b:8b:21:
84:5d:85:b0:c2:32:46:07:52:a9:64:44:fb:e8:e3:a4:83:ee:
61:f0:a6:77:35:6c:23:e3:cb:b7:9f:68:06:9b:d8:a7:6c:ee:
54:e7:64:16
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 7 00:27:37 2023 by rpki-client on console-fra.rpki-client.org