Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e203439393831.roa
File: 352e3138312e3137382e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: WB6A0lu/NymXXBdxWm3TICOhYc3MyCTS5cq4d1AkQME=
Subject key identifier: 7C:0B:E3:C2:6F:38:4B:A1:62:5B:A6:67:58:42:DF:BC:D2:EE:9A:76
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 105132FC450CAD4E1FFD176ABD165BED6C81F139
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e203439393831.roa
Signing time: Sat 29 Jul 2023 10:35:54 +0000
ROA not before: Sat 29 Jul 2023 10:30:54 +0000
ROA not after: Sat 27 Jul 2024 10:35:54 +0000
asID: 49981
IP address blocks: 5.181.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:51:32:fc:45:0c:ad:4e:1f:fd:17:6a:bd:16:5b:ed:6c:81:f1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 29 10:30:54 2023 GMT
Not After : Jul 27 10:35:54 2024 GMT
Subject: CN=7C0BE3C26F384BA1625BA6675842DFBCD2EE9A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:07:20:a1:15:79:9c:d3:b9:25:fb:b2:87:
73:3a:cd:09:1e:a7:87:02:d9:19:12:20:79:36:7f:
f8:52:69:78:0d:a7:04:f2:46:34:5c:e2:99:aa:50:
a2:ff:dd:59:8d:71:a1:08:fc:5e:e4:60:96:45:d3:
26:a8:0a:31:bf:fb:e0:bc:c2:01:3b:5f:1d:bd:0b:
e3:c5:c7:0a:85:6e:0b:57:f3:fb:8a:29:cd:b7:99:
97:2d:d5:12:4e:71:83:6b:29:8c:22:d2:67:9b:d2:
1a:5b:5d:32:6b:ad:93:0f:0b:ea:ff:ff:3a:df:d8:
2a:14:42:7f:bb:f5:10:19:e6:8d:0e:e7:ab:76:44:
64:d8:c2:47:f6:65:98:35:18:35:0c:23:4c:b2:41:
a0:04:4b:aa:65:84:06:a4:be:2d:a6:9d:e9:f6:55:
cb:f3:ae:3d:1a:28:dd:c0:7c:05:ac:f8:1d:21:ab:
7e:0b:2c:54:f7:b2:68:51:a8:6d:14:3c:4f:25:aa:
5b:e6:d4:2f:16:76:2a:21:ac:a3:4a:f0:50:1d:ff:
ba:fd:c1:5d:b4:a0:51:fb:51:cf:d7:65:b4:7d:30:
9b:d8:ab:26:ac:57:4b:65:20:3b:88:36:0a:8f:4d:
12:ce:70:4a:1e:a3:b4:ad:f2:0e:6e:07:3e:b3:09:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0B:E3:C2:6F:38:4B:A1:62:5B:A6:67:58:42:DF:BC:D2:EE:9A:76
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7a:fc:27:6c:28:3b:19:72:a5:12:1a:48:cc:02:01:b2:84:
54:8f:4f:fa:e7:29:fc:ad:c7:3e:1c:9a:f4:6d:fa:bf:3e:34:
b0:ad:9a:07:57:77:d9:68:f8:b2:cf:8f:2d:2a:a2:59:65:70:
a1:9a:ef:8e:43:4f:c9:ad:91:df:3a:e8:39:91:cc:54:dc:67:
90:f4:12:e7:b1:dc:1c:2b:27:3b:62:d4:50:1f:29:c0:5a:e7:
80:fb:54:74:6f:4b:0c:6a:dc:96:15:4e:32:4e:64:b3:59:54:
17:44:b3:5d:f0:fd:c1:d7:d6:f0:e0:34:e9:9a:22:b3:74:54:
04:e3:c0:4d:70:38:de:c5:e1:a7:c2:26:33:38:28:1c:f9:48:
22:31:75:11:ac:77:45:13:26:25:a1:62:e7:71:63:53:14:30:
ce:17:49:f5:ee:77:be:55:26:4e:0c:28:61:50:74:a5:f6:d6:
ad:35:23:16:4d:57:c7:a1:34:a1:43:e2:f5:56:33:b8:46:87:
f2:23:21:ad:4f:7c:c8:ff:af:ed:82:a5:33:8c:29:a7:7b:d8:
f3:25:7e:08:41:2c:db:f8:8b:85:55:d5:b3:3d:2d:96:fb:16:
87:4d:68:f8:1f:00:9f:54:31:a3:4e:43:a8:11:ba:61:2f:f4:
24:e2:3a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 06:28:00 2023 by rpki-client on console-ams.rpki-client.org