Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32332d3234203d3e20323135393338.roa
File: 3139332e3230302e3130322e302f32332d3234203d3e20323135393338.roa (raw, json)
Hash identifier: A6xp1l7eqMSmlOq29BLrIL7cKB/Ha/FgIaMmHou8Pwg=
Subject key identifier: A7:34:42:FD:59:8E:3D:99:23:28:23:39:93:A2:24:B2:45:14:32:3A
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 427FB1A6396D0D17B3AA847DA6964E060E70C1D0
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32332d3234203d3e20323135393338.roa
Signing time: Fri 05 Jan 2024 15:36:32 +0000
ROA not before: Fri 05 Jan 2024 15:31:32 +0000
ROA not after: Fri 03 Jan 2025 15:36:32 +0000
asID: 215938
IP address blocks: 193.200.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 06:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:7f:b1:a6:39:6d:0d:17:b3:aa:84:7d:a6:96:4e:06:0e:70:c1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Jan 5 15:31:32 2024 GMT
Not After : Jan 3 15:36:32 2025 GMT
Subject: CN=A73442FD598E3D992328233993A224B24514323A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:5d:2d:3b:55:62:94:47:69:1d:75:0c:71:
f1:13:84:a3:29:b8:35:5a:e6:bb:84:70:ac:53:26:
94:16:ce:ab:62:7c:3d:f6:74:63:9b:18:d0:d9:de:
f6:b0:e9:6f:93:e4:9a:a4:5a:52:74:c5:6b:9c:0e:
0e:26:13:c9:1d:ad:46:3d:be:5b:6c:69:8e:f5:9f:
c0:b8:50:cd:1e:ae:67:d4:0c:87:a1:a8:fb:59:d2:
fa:f2:97:ff:c6:f0:ab:79:0b:4f:d4:5c:73:d0:50:
77:f4:81:fc:0c:f9:e8:83:16:3d:1d:a8:c7:e2:1d:
7c:ff:3b:5f:b8:e6:48:ee:82:31:da:ec:dc:11:36:
ad:4c:e4:24:2c:47:4e:60:3d:e7:f0:40:76:89:0f:
70:6d:43:80:06:ff:96:7b:c4:c1:20:c3:cd:b1:11:
de:1a:e4:79:a3:4b:94:b5:80:93:54:92:31:0f:e4:
60:74:59:a2:96:5d:50:31:51:6b:32:aa:01:94:71:
00:0c:71:98:6a:c3:19:ad:7b:05:d8:6e:04:64:64:
36:1d:e3:a5:38:39:a3:0b:35:e6:96:03:87:86:b6:
9a:59:df:9a:3f:a1:b5:fb:1e:89:a0:21:64:e4:cd:
66:27:cf:ac:03:30:08:57:2a:64:59:97:fd:6d:51:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:34:42:FD:59:8E:3D:99:23:28:23:39:93:A2:24:B2:45:14:32:3A
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32332d3234203d3e20323135393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.102.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:20:e4:48:af:d0:47:c4:8f:a6:ff:8f:e3:f2:39:c3:08:8d:
49:3f:d2:1e:ac:49:d2:5b:28:73:9a:0d:1b:c7:d4:d5:72:ee:
73:fb:ac:fc:55:39:0b:1a:21:70:8d:ed:aa:cc:06:8a:52:53:
66:4c:5a:57:a2:0a:ba:60:74:3d:59:9b:3d:ca:e0:18:23:02:
42:53:6a:d3:56:12:ba:e2:ac:04:9a:8f:ce:89:49:94:5d:76:
74:a4:cc:9c:bb:0f:f9:a5:83:20:ac:5f:2a:96:2f:68:da:fa:
10:be:9d:97:3d:2d:c1:46:4f:a9:8f:46:10:43:41:e5:33:78:
8e:70:62:3e:22:04:77:ae:e3:14:4b:ad:30:c0:a0:33:e6:3c:
74:7c:56:50:5f:3b:19:c5:50:79:c6:bd:a8:8a:89:35:71:fd:
cb:cf:1f:dc:77:3b:01:25:cf:ab:11:06:64:82:ee:a6:97:c4:
97:34:84:10:bc:6f:d2:7b:40:52:d9:10:eb:6d:7e:5f:49:8c:
0c:30:55:23:c1:26:ff:20:eb:a3:4b:b3:7f:7b:65:a1:f1:c6:
05:cf:d7:fe:9d:e6:ca:a3:cf:e3:80:f7:8e:2b:ed:46:51:ee:
9f:29:45:b7:0a:e6:06:ac:4e:44:40:17:13:70:a8:7b:cd:ea:
96:85:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org