Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e20343030383130.roa
File: 3134362e31392e35332e302f32342d3234203d3e20343030383130.roa (raw, json)
Hash identifier: 6TQNJgXHmbh8CzEiDIeaaMzmohqkCkhf6cqcOZwdojA=
Subject key identifier: 00:BA:91:99:6D:76:06:3F:A9:F5:F2:0D:B2:FB:9A:10:46:0E:01:E1
Certificate issuer: /CN=449d34b3ae807293e23a0f8d13d8f4581073b255
Certificate serial: 368C7F2AF40E1A61279D2232F316B516150F5677
Authority key identifier: 44:9D:34:B3:AE:80:72:93:E2:3A:0F:8D:13:D8:F4:58:10:73:B2:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ00s66AcpPiOg-NE9j0WBBzslU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e20343030383130.roa
Signing time: Wed 22 Mar 2023 19:28:51 +0000
ROA not before: Wed 22 Mar 2023 19:23:51 +0000
ROA not after: Wed 20 Mar 2024 19:28:51 +0000
asID: 400810
IP address blocks: 146.19.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8c:7f:2a:f4:0e:1a:61:27:9d:22:32:f3:16:b5:16:15:0f:56:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d34b3ae807293e23a0f8d13d8f4581073b255
Validity
Not Before: Mar 22 19:23:51 2023 GMT
Not After : Mar 20 19:28:51 2024 GMT
Subject: CN=00BA91996D76063FA9F5F20DB2FB9A10460E01E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:ba:97:59:72:1d:35:69:8e:0b:6c:76:08:
75:c0:c7:1e:ea:1e:08:fa:71:4f:fe:0c:50:12:0b:
9e:65:a6:d0:fa:26:c3:9b:72:a4:e2:34:b5:1e:ea:
ee:89:00:7d:be:00:9a:f8:7d:33:4f:91:03:3e:11:
86:ae:41:1a:8c:3e:8a:9e:e4:44:06:c7:8f:0a:ee:
f0:b2:99:bb:e7:eb:53:e4:38:89:dd:5c:59:e7:31:
62:4f:b2:a2:fd:29:ff:71:26:9c:39:b6:f8:2f:e5:
93:07:79:d5:6d:05:0b:f9:5b:73:eb:52:42:ed:ca:
ee:f3:c1:7a:98:93:ab:8d:96:c3:20:d0:cc:8e:b3:
21:79:dd:29:a7:d0:27:52:40:6b:0c:8a:c2:2a:1c:
61:2c:b4:26:63:44:83:8b:2e:6a:81:e4:cc:b0:9a:
be:70:1e:43:7b:97:4c:32:d2:3c:1c:06:14:e4:03:
96:18:88:43:3b:8d:f2:c8:c3:ed:e5:b5:8d:00:ab:
3f:c8:fb:62:0e:eb:45:42:ee:c5:16:4a:fd:3a:13:
2c:07:c6:db:bf:4e:14:7c:86:5a:e3:9a:09:d1:09:
ed:30:76:41:62:16:d1:f8:b9:3f:b9:39:94:c6:01:
2b:8f:32:65:0a:0d:72:99:12:c4:f8:cc:02:e8:cc:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:91:99:6D:76:06:3F:A9:F5:F2:0D:B2:FB:9A:10:46:0E:01:E1
X509v3 Authority Key Identifier:
keyid:44:9D:34:B3:AE:80:72:93:E2:3A:0F:8D:13:D8:F4:58:10:73:B2:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/449D34B3AE807293E23A0F8D13D8F4581073B255.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ00s66AcpPiOg-NE9j0WBBzslU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e20343030383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c3:c2:ff:d4:19:83:e2:e3:05:43:e7:c2:6a:4e:91:f9:a5:
e8:4f:74:0d:93:d8:06:56:6d:1a:a9:79:21:c6:d2:32:f8:df:
7e:ce:86:24:c9:f3:85:bd:46:c7:72:ed:cf:28:6a:78:51:3d:
be:b3:14:14:b6:bf:5e:8a:88:15:b6:d1:ac:97:de:e6:cd:da:
c8:ab:89:34:30:b9:cc:5b:25:06:1c:71:ef:ff:c1:88:bb:ae:
66:dc:6c:d3:e5:fa:5c:4f:15:4a:62:b2:a4:34:57:2e:62:38:
d6:3f:d3:0f:58:48:58:13:fb:d9:57:4a:87:b9:62:d2:e6:c3:
07:9b:45:56:df:7c:0a:31:8e:72:bd:78:ea:67:df:3a:e2:6c:
58:4a:18:0b:9a:7c:6f:eb:55:3c:13:c4:d1:ed:05:ff:7e:44:
7b:89:5c:e1:1e:78:a3:30:10:b1:fb:4d:90:51:f6:f5:9f:c1:
2a:da:ee:ca:55:b5:3f:b5:c2:3b:b9:30:9e:49:35:f8:52:62:
43:92:a0:14:d2:b5:f7:1f:ed:a7:77:f1:1c:62:8b:a4:54:06:
1b:3e:83:8d:cf:63:01:0d:08:42:52:4f:31:7d:e8:56:1d:b7:
22:31:b5:be:6e:fc:3d:e2:33:e3:54:50:87:53:86:41:4a:dd:
07:bb:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org