Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135322e302f32342d3234203d3e20323037323739.roa
File: 3139332e39332e3135322e302f32342d3234203d3e20323037323739.roa (raw, json)
Hash identifier: wWia8tDb2trsDYJgpotRRIxWMCA9XEGCizM/+XepgDg=
Subject key identifier: 15:54:B9:32:82:15:D6:EB:DB:B5:55:EF:DD:96:DB:A4:11:02:2B:DA
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 7A893CEB03817440DABFC9B0658E4EA719C1BCDA
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135322e302f32342d3234203d3e20323037323739.roa
Signing time: Sat 10 Dec 2022 17:48:15 +0000
ROA not before: Sat 10 Dec 2022 17:43:15 +0000
ROA not after: Sat 09 Dec 2023 17:48:15 +0000
asID: 207279
IP address blocks: 193.93.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:89:3c:eb:03:81:74:40:da:bf:c9:b0:65:8e:4e:a7:19:c1:bc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Dec 10 17:43:15 2022 GMT
Not After : Dec 9 17:48:15 2023 GMT
Subject: CN=1554B9328215D6EBDBB555EFDD96DBA411022BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:5e:67:63:d9:ff:99:90:67:8f:3b:32:3a:
2c:a0:37:97:68:db:4b:55:be:3b:44:bb:42:bd:a5:
53:fb:85:12:79:2c:97:b4:c3:9f:ab:ce:7b:b2:79:
af:ee:4b:aa:5b:b7:2c:20:3d:a0:90:fa:5e:fe:0c:
b1:e6:1d:5f:1d:6b:2a:a2:51:e8:59:e1:a3:48:fa:
90:e3:c4:f3:6c:81:67:6f:7d:db:41:9c:b6:06:94:
8d:40:9d:a7:12:33:67:40:0a:93:83:ea:b4:a1:49:
8a:a4:4d:37:19:c5:16:91:34:f5:da:ed:af:57:59:
cc:0a:4b:72:47:49:01:6f:3f:6d:67:62:fa:a2:3e:
71:00:c3:c4:36:87:1f:4d:99:de:31:a5:c0:d3:39:
f4:c5:89:11:1f:ea:9c:ca:2e:76:00:11:08:4f:cc:
ad:24:21:a9:d8:45:dc:fe:0c:bc:18:02:66:85:ff:
6f:d6:fb:89:69:b7:66:37:7c:28:7d:23:5e:c6:db:
d6:7b:c0:47:1c:0f:e5:56:6d:8e:ef:66:0e:ee:a9:
aa:53:30:66:9d:98:31:2c:0b:71:c9:d3:97:41:e9:
fe:15:81:87:55:d8:cd:5a:08:5e:b8:8e:de:a2:57:
66:fd:f5:6e:44:1e:4c:94:84:53:04:17:cc:0b:2d:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:54:B9:32:82:15:D6:EB:DB:B5:55:EF:DD:96:DB:A4:11:02:2B:DA
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135322e302f32342d3234203d3e20323037323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.152.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:24:5b:11:ee:72:98:6a:7d:bb:d0:3e:c3:48:a1:55:2f:73:
b6:47:de:6c:c5:fd:34:b2:4f:58:fe:fa:34:9e:ab:69:5d:12:
be:3e:54:3f:3f:b6:92:9e:f6:80:7e:1c:71:58:f0:67:a6:b5:
76:f1:33:ba:40:20:0e:f8:50:3c:a2:c7:c8:e0:1f:28:83:69:
62:86:d6:62:78:32:2a:90:ca:6b:b9:28:dd:3c:a5:78:05:b3:
e2:57:08:50:49:c6:fb:3e:f7:e4:ce:00:1e:3c:03:89:9b:39:
02:f2:10:a6:ac:d0:cf:65:72:78:de:64:9d:64:1d:6c:86:7e:
fc:2c:8b:3a:ea:d0:db:f7:6b:40:ca:e5:f4:18:7c:76:1f:e9:
08:50:b3:85:34:fa:2c:b8:b6:5d:8b:03:a1:ab:d7:32:1c:33:
dc:e0:df:55:c5:86:7c:9e:b8:90:66:f1:d0:2d:39:0b:98:87:
80:f4:4e:d9:f2:d2:26:a6:fa:de:55:b9:03:ac:7c:04:9e:ea:
c6:ce:ce:28:a6:c4:8a:63:3c:c5:30:9e:98:f3:b8:73:88:09:
9c:c9:25:2e:fd:c9:bb:f3:bb:71:de:0f:fc:e5:d0:de:92:99:
0b:b3:bf:a7:76:14:b8:16:f4:3a:8b:11:79:c0:39:2d:7d:88:
b3:3e:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org