Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20313335373532.roa
File: 352e3138312e3137382e302f32342d3234203d3e20313335373532.roa (raw, json)
Hash identifier: OB1ob8nPhemXAsYzeQKJ//trwjosFQP5GUSoAwgJ59Y=
Subject key identifier: A4:89:2E:67:46:7D:83:68:57:85:92:E6:4C:AD:0E:B7:D6:4E:E2:95
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 7679237147486206AC3E68C163630DA81EF6CB17
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20313335373532.roa
Signing time: Fri 14 Apr 2023 05:59:33 +0000
ROA not before: Fri 14 Apr 2023 05:54:33 +0000
ROA not after: Fri 12 Apr 2024 05:59:33 +0000
asID: 135752
IP address blocks: 5.181.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:79:23:71:47:48:62:06:ac:3e:68:c1:63:63:0d:a8:1e:f6:cb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Apr 14 05:54:33 2023 GMT
Not After : Apr 12 05:59:33 2024 GMT
Subject: CN=A4892E67467D8368578592E64CAD0EB7D64EE295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:45:17:7b:40:fb:d1:df:30:48:c1:f7:7d:
26:86:f7:90:18:7e:19:b3:19:0f:0a:14:bd:b2:86:
5f:ef:6d:ee:42:11:03:87:2e:8d:4d:71:25:55:91:
fa:33:0e:8f:15:38:af:51:b3:c3:c7:4f:f2:f6:ed:
7c:78:99:ab:3c:78:5d:3b:c8:68:9b:8f:0c:bc:c7:
ea:c3:ba:07:0a:09:83:30:6e:ec:ab:e2:ae:0a:ad:
ef:e6:05:da:76:3e:b1:c4:39:31:3a:3b:04:5f:e1:
86:f4:69:30:af:d8:d5:60:b0:52:80:51:06:31:4f:
b7:19:b0:29:21:96:a6:fa:0f:84:5f:0b:3c:ea:88:
22:56:19:1a:19:2c:d9:8a:96:ba:40:78:39:54:48:
f9:e7:f3:a0:6d:e0:e6:91:0b:6f:0b:b3:96:d8:bf:
86:be:21:04:60:d0:91:34:61:dc:27:9f:3c:8e:ec:
1f:3d:f7:ac:72:d5:c0:21:c7:03:31:cc:fa:33:8c:
a4:a4:d9:24:b4:a3:02:34:e0:6e:b3:be:35:80:9c:
0f:39:3f:a3:c1:52:4c:f4:b2:65:ec:8b:78:8c:20:
24:40:f0:90:fa:ab:15:6d:a5:21:7c:b2:4d:36:2e:
a5:3d:d3:f4:f9:0d:7b:2b:a1:2a:13:d4:40:03:ba:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:89:2E:67:46:7D:83:68:57:85:92:E6:4C:AD:0E:B7:D6:4E:E2:95
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20313335373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f3:27:26:1b:7c:88:80:00:17:ad:20:fa:99:d9:8d:d7:d1:
67:6d:26:86:61:1c:32:e6:e7:4d:21:82:ff:c8:79:93:36:9d:
35:35:88:8e:0b:d2:c4:13:75:fe:cd:cb:ed:00:61:91:75:2c:
07:9a:69:02:04:65:0b:2a:f8:56:63:60:6c:19:e8:bc:a9:e9:
71:14:29:b9:37:b1:d0:35:91:fa:ab:fb:1a:24:7a:fd:71:e2:
0e:c2:6e:60:16:40:92:51:42:eb:bc:13:6a:50:d1:6f:a4:ef:
d1:c1:e4:89:6d:3c:07:2f:a7:82:34:36:17:c9:b8:65:4e:b7:
21:59:54:07:95:f7:ea:04:65:8f:3a:0d:83:ae:b6:98:ba:af:
85:1e:21:18:42:ed:1c:b1:2b:32:ce:70:12:b3:46:e4:0a:2e:
93:46:0a:35:77:01:b1:a7:28:bf:ee:6e:6e:56:de:a2:f4:32:
60:aa:0b:51:e6:9d:77:87:cb:c9:6e:e8:eb:d2:2b:78:a9:a0:
58:5a:86:04:33:c0:f1:16:ac:a1:f7:5e:3e:cf:12:b6:d2:34:
cb:3a:d8:14:0a:9f:f0:94:c4:e6:2b:78:8a:e8:78:2b:c3:d0:
ab:27:bb:38:08:fc:e2:6a:8d:1c:98:a0:8a:f5:ce:a4:29:ff:
c2:05:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:00 2023 by rpki-client on console-fra.rpki-client.org