Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135322e302f32342d3234203d3e20383334.roa
File: 3139332e39332e3135322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VYAS6ClZAQ8QSdQ4Akrij1ZbslDAjIF8vfet4p+XU1Q=
Subject key identifier: 2B:62:AF:58:29:0A:28:61:71:44:F2:91:9C:6E:D7:B4:27:17:71:27
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 15223DD5446FC41AB237255BE7EBC79219AA1B94
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135322e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Nov 2023 00:00:04 +0000
ROA not before: Mon 20 Nov 2023 23:55:04 +0000
ROA not after: Tue 19 Nov 2024 00:00:04 +0000
asID: 834
IP address blocks: 193.93.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:22:3d:d5:44:6f:c4:1a:b2:37:25:5b:e7:eb:c7:92:19:aa:1b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Nov 20 23:55:04 2023 GMT
Not After : Nov 19 00:00:04 2024 GMT
Subject: CN=2B62AF58290A28617144F2919C6ED7B427177127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:ad:bd:3d:ae:eb:68:2b:76:09:c8:8b:0b:
66:7a:f8:73:89:cc:5f:24:b5:cc:66:3d:d0:15:14:
2d:ec:0d:53:8b:88:95:e7:40:5b:de:68:21:ac:6b:
e8:16:94:1b:65:09:c4:6e:a5:5e:69:b9:64:a7:98:
dc:c3:1c:62:6e:07:b6:da:17:45:3b:c0:b6:d1:11:
48:46:ba:a9:21:8d:60:a4:2a:63:81:ae:50:12:0f:
74:7c:0f:40:95:9e:90:d9:00:25:2f:4e:b7:0e:1f:
00:10:c7:4c:fe:3e:27:15:e4:78:56:bb:ad:1a:ec:
bf:89:87:8c:8a:10:21:7a:5c:c3:06:fd:eb:f8:12:
e0:20:1b:3a:bb:64:e6:b9:de:0c:39:86:54:45:fd:
22:a2:aa:f1:fb:3d:10:fd:de:00:dc:23:22:82:d3:
e0:58:83:fd:63:80:3e:ab:bc:eb:84:fb:5c:e8:67:
7e:74:cb:f5:31:96:fc:e4:15:5b:ce:44:bf:c5:37:
e3:45:95:e5:19:b4:98:e0:a8:a4:d5:4e:40:da:48:
6c:60:ca:27:0f:d6:0d:6e:1e:5e:06:c9:79:62:78:
ef:fa:42:8f:81:c7:b9:b2:3a:6d:b9:08:83:00:11:
e4:18:32:6e:75:2e:93:f4:08:17:1b:b3:1f:b9:d4:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:AF:58:29:0A:28:61:71:44:F2:91:9C:6E:D7:B4:27:17:71:27
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3b:21:4c:d0:57:e5:9b:89:5c:f0:56:c4:e8:38:28:12:c0:
1d:69:a5:99:d3:3f:0d:e0:ce:86:2b:81:25:28:cd:c8:c0:7d:
e4:db:1b:c1:50:ba:9b:19:c3:bf:58:94:b7:2a:67:01:8d:a3:
ad:03:95:0f:fa:6c:6c:04:45:78:a4:73:e5:de:9f:e0:3b:da:
19:f3:f6:09:33:ce:4a:2a:53:ca:6c:03:f3:36:67:8a:e7:3b:
c0:52:48:75:9b:76:19:70:6d:df:bd:68:c9:97:f5:75:23:7b:
41:f8:fe:75:92:d0:0e:cf:11:ee:c6:20:f3:46:72:27:aa:cc:
4f:90:c0:97:5f:d7:62:9d:7d:91:da:8b:f7:50:93:79:19:bd:
90:52:a2:17:50:c3:4b:d9:6e:1a:8b:60:4a:16:9e:e6:54:3f:
e2:2c:0d:8f:79:ed:25:0c:2e:b8:2b:c1:b0:93:82:f8:db:83:
a7:02:cd:ab:c4:76:a5:70:a5:7d:fb:98:ae:7a:d7:f1:f6:66:
3b:88:18:f1:06:5e:06:f2:c9:6d:2e:e6:38:c9:d9:76:76:9c:
f6:e0:a2:f3:a0:3c:8f:22:b7:6b:97:be:14:9b:c3:2d:89:af:
1b:44:1e:be:ee:b6:dd:78:af:98:f6:96:91:54:1d:38:66:40:
45:de:1a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 00:23:16 2023 by rpki-client on console-fra.rpki-client.org