Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130332e302f32342d3234203d3e20333939303435.roa
File: 3139332e3230302e3130332e302f32342d3234203d3e20333939303435.roa (raw, json)
Hash identifier: l/azSwcGEXOzLO1sy830CITEDiRQgn2YTmD07q++fqI=
Subject key identifier: 88:D9:5A:31:85:07:21:7B:4A:83:FB:B8:6E:FC:F0:5D:C6:DA:10:72
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 562A5E31E08DD0BD39E92C6ECE395EC8AA546A0D
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130332e302f32342d3234203d3e20333939303435.roa
Signing time: Tue 14 Nov 2023 09:14:52 +0000
ROA not before: Tue 14 Nov 2023 09:09:52 +0000
ROA not after: Tue 12 Nov 2024 09:14:52 +0000
asID: 399045
IP address blocks: 193.200.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:2a:5e:31:e0:8d:d0:bd:39:e9:2c:6e:ce:39:5e:c8:aa:54:6a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Nov 14 09:09:52 2023 GMT
Not After : Nov 12 09:14:52 2024 GMT
Subject: CN=88D95A318507217B4A83FBB86EFCF05DC6DA1072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3c:03:51:93:9f:4b:52:ca:1d:ac:b8:0d:5d:
12:bf:30:be:12:21:f7:dc:61:7e:58:e4:c4:9f:6a:
18:5c:4d:28:3a:c5:f6:02:9d:30:02:12:dc:46:02:
ab:a0:e5:eb:b3:da:be:a2:de:0b:97:bd:69:19:f8:
6c:bf:0c:19:ae:ba:53:88:9b:d0:7d:13:17:cc:42:
66:47:b1:34:4f:7d:0f:3a:fa:e5:b6:1d:b3:2d:92:
ad:94:8a:d2:98:52:47:3c:8d:0b:de:c9:6b:61:c2:
cf:56:c4:f5:08:0a:3d:c7:b2:c4:cd:21:1b:55:1e:
cc:27:85:3b:c0:91:bb:7a:45:0e:6f:81:38:00:d9:
42:2b:fd:b6:1a:35:37:00:6c:0b:77:80:6c:b7:fd:
0d:c3:6b:f8:e4:7f:06:9f:83:84:1d:77:9b:ef:9f:
58:5d:87:6c:bc:3d:da:43:89:af:7e:b5:bf:7f:15:
de:2f:ff:d9:88:da:37:dc:58:aa:47:4b:c1:c5:34:
78:ca:df:06:a0:c1:ed:e3:85:c6:ed:59:2b:2d:05:
2d:a9:75:fe:d6:6d:49:ef:a5:4a:2b:eb:f2:88:0a:
5e:5b:42:88:1c:e8:4d:f1:2b:94:42:85:95:5b:35:
71:b6:7c:a4:1c:14:20:63:42:f5:bb:35:db:ac:da:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:5A:31:85:07:21:7B:4A:83:FB:B8:6E:FC:F0:5D:C6:DA:10:72
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130332e302f32342d3234203d3e20333939303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:5d:d8:8a:d1:23:9b:c5:01:3e:c5:f2:b0:b6:49:c2:54:85:
c4:44:d8:d0:6e:23:1d:16:06:c7:01:0c:47:80:5d:dc:b8:91:
6c:ae:ea:05:5c:8a:7e:30:db:aa:c7:15:a7:b4:97:11:cd:53:
d8:ed:93:82:a3:98:03:aa:18:6b:87:e3:a0:60:ba:f5:1f:16:
de:c3:46:d0:4b:84:05:01:7f:fa:70:cb:b4:16:fb:db:b2:5a:
5a:33:f1:40:7c:4b:dd:c0:5f:a8:6e:2d:d6:69:5d:c2:0a:03:
e6:f8:4f:22:3b:54:ea:ec:51:e4:b1:4c:5d:67:3e:1f:a5:e6:
59:15:e8:28:9c:4a:58:ec:67:30:c7:6b:9e:b7:98:5d:d0:f8:
4e:42:e3:14:ea:81:c4:67:62:6e:e2:97:a2:5a:c2:2b:e3:43:
c9:45:f3:ad:31:30:06:c7:ba:46:21:a3:dd:76:ce:4e:2d:f6:
b3:37:da:1d:2e:bb:62:cd:d7:80:73:c4:30:62:df:d3:fe:c1:
f6:6c:30:cd:67:32:73:55:98:e1:3d:f7:d0:3c:8e:1e:6e:c3:
a5:8f:54:4c:4d:54:5f:21:ba:ee:93:91:d9:80:15:49:d5:c1:
5a:24:88:22:a6:76:f2:7a:7a:39:57:95:55:0f:a7:ac:58:5e:
f3:57:14:af
-----BEGIN CERTIFICATE-----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Generated at Wed Dec 20 07:43:26 2023 by rpki-client on console-ams.rpki-client.org