Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e20323131393336.roa
File: 34362e3235302e3232342e302f32302d3234203d3e20323131393336.roa (raw, json)
Hash identifier: I78HJlD8nwAwFolT0gaUeigVAHtOeJOYzc1H4vg2It0=
Subject key identifier: 2E:6E:B4:14:01:03:02:D4:E2:F3:B3:29:31:A2:7C:00:19:21:C4:43
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 7BAA18F881464D2191B49704EE402B13DD176C12
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e20323131393336.roa
Signing time: Tue 13 Dec 2022 02:29:56 +0000
ROA not before: Tue 13 Dec 2022 02:24:56 +0000
ROA not after: Tue 12 Dec 2023 02:29:56 +0000
asID: 211936
IP address blocks: 46.250.224.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:aa:18:f8:81:46:4d:21:91:b4:97:04:ee:40:2b:13:dd:17:6c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Dec 13 02:24:56 2022 GMT
Not After : Dec 12 02:29:56 2023 GMT
Subject: CN=2E6EB414010302D4E2F3B32931A27C001921C443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:e5:56:f1:5c:79:db:36:b7:86:d5:31:57:
5d:f0:ea:ef:85:27:fb:e0:56:9f:9f:76:35:51:c2:
ef:b1:c4:90:15:36:d9:5b:d4:00:68:ab:6c:c9:ce:
62:39:67:b0:ee:8a:c8:48:4e:47:7b:78:b8:c1:3c:
86:b2:cb:47:7a:52:df:32:f5:01:24:f6:06:e7:18:
5e:6f:65:7e:ea:b4:c4:10:4d:f9:e9:69:57:8a:7a:
64:2d:8c:e1:08:df:07:11:46:17:a6:f8:90:44:85:
a0:83:08:aa:7a:dd:42:69:48:55:e0:8d:f5:5c:ea:
11:e0:a0:50:c4:f5:41:54:7e:06:7f:15:7c:e3:18:
3a:68:0e:dc:f8:cb:60:ce:da:b4:be:f5:a9:3a:43:
76:4f:1b:4a:38:7a:85:2c:f3:5e:73:5e:6a:63:fb:
3b:e6:2e:ce:dc:fd:98:e0:7a:52:e6:52:8a:d7:ab:
79:a5:27:89:37:5d:c9:06:b7:c4:2c:aa:f6:15:c7:
09:e1:20:7f:fa:14:6e:f9:02:0e:5d:e6:b9:05:8d:
ca:53:10:2e:1e:78:cd:be:d9:cc:15:54:77:72:fb:
b6:82:ad:ea:9c:35:74:3b:51:a6:79:9c:da:5f:c7:
37:f3:45:3c:95:6e:3f:7f:ca:23:3d:e6:06:b4:07:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:B4:14:01:03:02:D4:E2:F3:B3:29:31:A2:7C:00:19:21:C4:43
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e20323131393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.224.0/20
Signature Algorithm: sha256WithRSAEncryption
27:9b:44:fe:ad:00:da:58:90:47:1e:09:77:81:ea:0c:2b:ef:
1c:14:70:48:68:70:7c:98:7a:c3:30:d3:19:33:a2:23:5d:de:
f8:ca:d7:c8:95:22:eb:18:6c:c2:c8:e9:7d:93:2c:06:f5:6b:
dd:0e:3e:9d:ab:fd:36:bb:21:00:5c:1f:c0:93:b1:c9:83:e3:
9c:2d:ee:64:be:de:1a:56:ca:0f:ab:3c:c5:67:e3:31:b3:17:
20:4f:b5:f1:66:3e:ab:8c:3c:e2:30:aa:57:13:0d:fa:c5:3a:
27:9a:af:84:8e:03:f1:a2:7a:88:b5:50:cd:3c:e9:9a:1d:86:
5c:24:26:41:5d:56:13:cf:6b:af:35:01:9e:c3:76:6c:89:7f:
f0:40:e7:69:da:1d:2e:11:27:10:b6:69:2b:7c:00:09:74:a8:
51:36:06:86:69:40:08:87:7a:63:93:c0:40:f3:b6:29:9c:ed:
96:7d:8f:16:fb:16:71:23:20:71:f0:57:24:2b:09:88:b9:70:
be:e7:b5:a6:d5:cf:3c:13:e3:63:b6:95:13:e2:c8:a8:7f:27:
f0:91:6e:73:80:d1:6e:8d:1f:5e:03:27:4e:42:be:73:21:61:
04:1d:ac:1b:f0:1f:9c:58:02:e1:bd:6a:de:80:1c:d0:b7:84:
16:92:bc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org