Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e20383334.roa
File: 3134362e31392e35332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: S9ZDRMNCHFhyrMXzSu6FbvaJm/e9GJo0oBwN0FiRPwo=
Subject key identifier: 77:53:A0:17:28:05:7A:D8:8F:55:B0:41:82:74:12:DD:71:A4:9B:8F
Certificate issuer: /CN=449d34b3ae807293e23a0f8d13d8f4581073b255
Certificate serial: 0D8748B439BB9826C51AED93CCF6A8FCDA74158B
Authority key identifier: 44:9D:34:B3:AE:80:72:93:E2:3A:0F:8D:13:D8:F4:58:10:73:B2:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ00s66AcpPiOg-NE9j0WBBzslU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e20383334.roa
Signing time: Tue 02 May 2023 12:30:04 +0000
ROA not before: Tue 02 May 2023 12:25:04 +0000
ROA not after: Tue 30 Apr 2024 12:30:04 +0000
asID: 834
IP address blocks: 146.19.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:87:48:b4:39:bb:98:26:c5:1a:ed:93:cc:f6:a8:fc:da:74:15:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d34b3ae807293e23a0f8d13d8f4581073b255
Validity
Not Before: May 2 12:25:04 2023 GMT
Not After : Apr 30 12:30:04 2024 GMT
Subject: CN=7753A01728057AD88F55B041827412DD71A49B8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:16:4c:1f:fc:b0:d7:19:87:99:e8:f5:0b:
a2:9c:04:70:6e:0b:b2:23:ab:81:03:6f:08:47:70:
db:17:75:11:67:5d:2d:b9:ed:c8:43:60:81:1f:45:
ae:d2:c8:eb:6b:fa:f1:8f:e8:30:5d:c7:cf:2b:23:
5d:00:a9:ef:fd:aa:18:fa:31:8d:c3:44:1a:80:6c:
33:d9:f0:60:c7:21:aa:80:0e:bd:4f:e5:45:ce:80:
0b:54:6a:d6:89:ae:00:cb:fb:b7:be:0c:2c:cd:39:
f2:d0:18:5c:41:16:fa:54:71:0a:83:7d:94:6d:9b:
91:cc:42:2c:1d:12:33:ce:12:10:83:cb:4d:bd:c2:
df:ad:06:fc:1c:31:87:20:11:f2:c0:2f:a7:bb:2c:
84:42:97:dd:4e:57:cb:5c:7d:83:d0:cc:99:45:48:
39:57:ae:f2:c0:d4:a3:86:75:31:89:ad:d4:2c:c2:
f4:dc:15:3e:ef:f7:27:ce:9f:33:cc:a1:20:04:36:
73:5d:26:94:0e:a5:23:68:55:ec:fa:14:82:78:50:
87:58:12:9c:75:2b:b5:6e:07:76:71:ef:a8:fd:bb:
fa:f7:42:59:61:7b:81:05:d2:cc:ef:06:da:45:7a:
96:86:28:5b:6f:e7:cd:40:4c:17:f2:d8:71:47:7d:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:53:A0:17:28:05:7A:D8:8F:55:B0:41:82:74:12:DD:71:A4:9B:8F
X509v3 Authority Key Identifier:
keyid:44:9D:34:B3:AE:80:72:93:E2:3A:0F:8D:13:D8:F4:58:10:73:B2:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/449D34B3AE807293E23A0F8D13D8F4581073B255.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ00s66AcpPiOg-NE9j0WBBzslU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:7d:44:a4:8c:ec:4f:e0:c0:96:b6:13:c0:56:1c:d0:e6:36:
eb:3c:e2:ff:5d:64:4b:7d:bc:1b:93:ee:7f:56:c3:87:82:22:
1f:20:ea:ab:09:24:b2:c4:0d:e9:35:52:0a:65:3e:cc:17:c9:
8e:53:cf:ec:8f:98:23:a2:4f:35:35:d0:53:df:6b:bc:da:63:
48:52:c8:bb:6d:b5:b1:18:15:99:09:89:f9:57:85:03:82:bf:
3a:27:f0:f0:7f:d0:35:38:79:9f:9e:cc:02:00:ce:8c:ec:1e:
4c:0e:be:e6:d1:49:05:39:2c:99:df:31:97:77:b9:2c:67:9f:
ee:6d:dc:6a:a8:34:ea:7a:fb:80:b3:40:4c:5e:5c:e0:a2:e2:
94:31:bc:fc:fe:14:3a:b1:0d:91:bc:3b:fc:9e:19:a7:63:f9:
0a:2a:24:e8:d2:9d:59:b9:6e:1c:d5:2c:98:03:be:fb:14:3b:
5a:01:2b:e6:09:a1:f4:c0:77:ae:1d:29:31:c9:fe:1b:96:48:
ad:b7:c0:95:9c:4d:94:bb:5f:d0:8a:d2:99:35:bf:52:e4:2c:
2d:a0:1f:fb:42:f0:ac:6d:1d:99:f7:d0:19:9d:61:89:02:5e:
e4:c7:1a:53:48:60:04:a4:26:1f:b4:8b:5f:92:6a:07:1c:98:
d1:63:38:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org