Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20383334.roa
File: 352e3138312e3137382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QnLCKiWmnoM82Ed+7KMjxgdwcQRozZRzaoQx1uekjRU=
Subject key identifier: 48:40:44:74:D6:8E:42:BD:D5:EC:6B:55:2B:CC:16:E0:90:1B:3E:CB
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 713EB5741CDA74ED4EBA5B7D59EC42AF6AEC6781
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20383334.roa
Signing time: Mon 28 Aug 2023 06:00:07 +0000
ROA not before: Mon 28 Aug 2023 05:55:07 +0000
ROA not after: Mon 26 Aug 2024 06:00:07 +0000
asID: 834
IP address blocks: 5.181.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3e:b5:74:1c:da:74:ed:4e:ba:5b:7d:59:ec:42:af:6a:ec:67:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 28 05:55:07 2023 GMT
Not After : Aug 26 06:00:07 2024 GMT
Subject: CN=48404474D68E42BDD5EC6B552BCC16E0901B3ECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:2d:60:ec:73:ec:75:b6:86:0d:a8:b8:29:
9f:e1:24:ce:49:38:4b:90:cc:0e:59:00:4f:13:c3:
aa:76:df:3e:ba:e4:13:ac:cc:1f:f4:66:6f:07:1f:
69:2d:7d:28:f0:c5:53:c3:55:0a:00:1c:77:4c:69:
c4:d7:f5:08:22:d3:90:88:94:5b:b2:6c:ca:15:5d:
9e:79:be:cd:47:a4:dc:9b:99:03:4c:2b:f1:a6:61:
8c:25:08:f3:21:6a:ab:c8:21:bc:35:0e:1b:9f:ad:
a0:e4:b1:69:04:50:f5:b1:da:73:ac:bc:eb:91:45:
ac:41:b9:ef:96:e6:a1:35:a4:50:6b:32:c0:9d:d4:
62:9b:53:1e:78:b6:9e:99:e8:ed:64:92:25:fd:13:
8d:19:78:ec:3d:23:3e:33:0d:ba:31:1f:a3:7b:5f:
a7:a4:29:96:52:41:45:5b:ce:03:0f:4e:4b:8d:27:
bc:af:70:55:69:64:1a:7d:b1:d8:de:b2:47:44:3d:
c8:3a:33:35:45:c5:87:34:83:f8:f8:80:d4:aa:6f:
9c:7e:c4:11:26:6c:d1:f2:4f:74:95:15:fa:e1:f9:
3f:e1:7d:4f:b6:ab:79:68:f6:f0:ef:f5:79:ba:c8:
42:60:c5:75:08:86:d8:a7:65:de:93:8e:57:03:b8:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:40:44:74:D6:8E:42:BD:D5:EC:6B:55:2B:CC:16:E0:90:1B:3E:CB
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
54:80:34:59:e5:49:82:b5:79:0b:c7:dd:5c:16:47:1f:b2:de:
b7:58:0e:34:04:15:06:d3:87:1c:82:2d:3f:cc:91:4d:b4:15:
40:fc:de:76:63:9d:6f:5d:9e:f3:50:18:45:4b:d7:fa:21:0b:
8e:9a:4c:3b:73:41:f1:6a:84:71:bc:70:b8:66:d3:d4:f7:79:
e1:5d:04:bd:d2:60:23:51:9e:2c:1f:8e:74:cb:a2:f8:46:6f:
d7:5b:b7:76:21:f2:ff:ed:be:84:00:ec:5a:1f:60:0c:a6:5f:
03:b0:d5:8a:18:18:19:8e:43:13:0b:c3:b0:6c:02:6c:78:b2:
ea:7d:7c:c3:6c:2e:fe:03:ea:e7:52:78:a8:3c:af:d2:97:5b:
15:bc:0e:76:26:4b:5b:7a:7b:a1:fa:27:09:ac:7f:35:fc:38:
31:76:63:5f:88:97:35:f0:ec:eb:71:aa:bb:ec:03:d4:57:88:
a2:9f:86:da:fa:4b:a2:9e:52:8e:fc:52:67:ed:3e:e5:10:54:
9a:18:6f:64:26:8c:35:b2:91:40:27:12:bb:06:8d:2a:b6:07:
e9:e4:56:eb:59:95:9f:81:1c:85:8c:4f:69:f0:f7:16:a1:d7:
11:1e:09:45:ec:eb:2d:de:c0:2e:c5:03:aa:09:e8:ae:c5:6d:
ed:91:54:ed
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 30 14:11:48 2023 by rpki-client on console-fra.rpki-client.org