Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20343030343032.roa
File: 3139332e3230302e3130322e302f32342d3234203d3e20343030343032.roa (raw, json)
Hash identifier: pBGcq6IRsXiOHn/a1zV6E2JYESD5TWgujCzRwfH/Isg=
Subject key identifier: 59:47:5E:FB:3D:92:EC:F2:9F:CF:16:D3:64:B2:EF:B9:B5:12:7F:65
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 121A76C792B2B4F35EF9C28CDD10F370CC00CEE0
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20343030343032.roa
Signing time: Sat 16 Sep 2023 02:04:58 +0000
ROA not before: Sat 16 Sep 2023 01:59:58 +0000
ROA not after: Sat 14 Sep 2024 02:04:58 +0000
asID: 400402
IP address blocks: 193.200.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 09:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:1a:76:c7:92:b2:b4:f3:5e:f9:c2:8c:dd:10:f3:70:cc:00:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Sep 16 01:59:58 2023 GMT
Not After : Sep 14 02:04:58 2024 GMT
Subject: CN=59475EFB3D92ECF29FCF16D364B2EFB9B5127F65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:01:62:5f:a0:f2:a7:da:45:3f:8e:a1:4c:
2b:91:d7:55:89:74:f2:18:e2:72:ee:5f:18:cf:7f:
4d:4e:95:3e:e4:44:4f:46:be:de:7f:b9:b9:5c:a5:
c5:65:92:c8:d9:e0:e7:75:4f:40:87:06:1a:68:09:
78:7c:bd:4d:99:e4:7a:1b:a6:fd:19:d2:bd:75:e9:
09:50:f0:ef:82:29:0e:ff:fc:2d:4f:3b:23:ed:fc:
f8:e5:59:fe:da:22:6b:1a:86:a9:2a:c2:30:57:ce:
7b:77:5c:e9:53:10:48:ff:9f:8d:97:e3:a5:5e:d0:
1a:66:fb:4f:fc:b0:50:1f:af:fa:14:e7:3b:63:23:
72:3a:1f:73:bc:f4:15:2e:f5:ad:cb:27:61:d3:2d:
dc:26:c1:89:7a:42:d1:ed:96:90:33:b6:d4:9d:d6:
e9:da:e5:8e:72:12:ed:93:25:3e:af:3c:1d:37:32:
ba:de:11:26:cc:f2:1f:fa:37:e4:5e:1a:46:fe:54:
8f:47:ae:d1:f1:d5:31:e0:34:2e:2a:d0:fa:12:db:
a9:78:d8:72:22:1f:4c:34:d7:42:1c:48:7a:f6:e8:
ce:9d:71:7f:ad:b6:0b:db:63:2f:3a:a6:1a:e5:d6:
dc:22:25:59:54:fa:aa:e9:3f:b1:67:a9:6a:cc:55:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:47:5E:FB:3D:92:EC:F2:9F:CF:16:D3:64:B2:EF:B9:B5:12:7F:65
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20343030343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:02:ef:87:71:8c:cc:07:43:c2:f7:20:8b:8f:c1:d3:06:b2:
dc:e1:2b:f9:9c:7d:0f:1f:71:2c:01:92:9f:94:03:04:f9:ac:
2d:50:47:f8:23:0c:8a:0d:16:1a:46:cd:80:f7:2d:fe:b4:90:
aa:ab:14:6b:da:77:da:41:4a:52:ed:f3:cd:e0:30:8f:31:13:
f3:d7:f9:cf:4f:5f:43:4b:bc:8c:9e:a4:89:3a:4b:9f:86:9b:
34:46:94:f4:e1:5f:d9:7b:f8:b6:d8:a1:83:95:06:36:5f:84:
1a:ae:6d:28:a6:b0:91:7d:1d:b1:1d:ee:87:5e:29:14:f2:99:
1f:cf:be:4a:2a:9e:0d:ec:56:f2:58:c8:1e:9d:82:26:8f:ad:
7a:16:8e:b9:89:54:a9:57:10:e9:cf:01:f2:bf:13:9c:11:b7:
a5:75:9e:22:47:36:83:51:39:c5:af:ec:da:8c:cd:5f:15:d5:
cf:22:a4:27:a7:df:3b:8a:86:d7:88:8d:d5:9d:c8:f4:64:32:
a3:d6:7e:ae:37:80:6d:dd:86:c3:8a:93:9e:99:a2:be:4c:f3:
d4:27:c5:c5:f8:d0:89:12:d4:81:a4:c0:09:3e:5e:53:d9:dc:
1c:37:bf:10:05:1b:46:57:ff:41:a6:ed:fa:5c:5b:20:72:a5:
ac:6e:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org