Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130332e302f32342d3234203d3e20343030343032.roa
File: 3139332e3230302e3130332e302f32342d3234203d3e20343030343032.roa (raw, json)
Hash identifier: mTJi2zYsLQYA3llAe5QT0dFtT2ieb4MVVs/oP9C1tvk=
Subject key identifier: D2:B5:8A:BF:1A:BD:7D:C7:4E:FC:91:6C:C6:ED:35:41:17:4C:7A:4F
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 0B16442792CDD77DFB77CA22392AEE6AE2C2DA74
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130332e302f32342d3234203d3e20343030343032.roa
Signing time: Sat 16 Sep 2023 02:06:00 +0000
ROA not before: Sat 16 Sep 2023 02:01:00 +0000
ROA not after: Sat 14 Sep 2024 02:06:00 +0000
asID: 400402
IP address blocks: 193.200.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 09:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:16:44:27:92:cd:d7:7d:fb:77:ca:22:39:2a:ee:6a:e2:c2:da:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Sep 16 02:01:00 2023 GMT
Not After : Sep 14 02:06:00 2024 GMT
Subject: CN=D2B58ABF1ABD7DC74EFC916CC6ED3541174C7A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:49:8a:62:f1:74:84:b5:59:fd:76:2a:23:
92:9c:aa:8e:05:e3:44:31:38:03:dc:e0:92:bc:11:
c8:7a:49:b9:ac:84:2e:12:25:8e:c8:97:f0:25:e4:
5e:d0:71:2a:87:15:f3:a5:be:62:81:f3:ef:ab:ad:
30:45:e6:bb:31:9c:8d:fe:fa:22:f4:c8:7f:6d:19:
63:58:31:7e:ec:28:47:2c:8c:58:39:86:32:f8:b2:
17:32:9f:ce:76:9c:fb:f4:c9:d1:dd:eb:a6:2b:de:
2b:e3:21:aa:02:bd:2b:85:22:1c:9e:c4:ec:e5:6e:
f8:66:f8:ac:05:95:93:c9:7b:00:de:8d:71:c0:44:
61:7c:95:1c:87:a1:ea:a2:29:9f:44:af:9c:4f:4c:
70:d1:ff:69:da:4d:4e:78:28:3a:16:94:9d:a5:51:
81:20:a9:a1:15:bd:07:9b:ae:3d:4b:87:eb:d6:8d:
42:2d:80:6f:e0:a2:c6:b8:db:b3:a8:d0:75:6e:c7:
a2:68:65:87:e7:b3:58:9a:a8:79:e1:bd:56:0b:c6:
33:b3:fc:08:f1:1e:61:12:42:89:e3:4f:3c:8e:f1:
3e:57:6c:c3:b4:66:38:9c:65:53:84:58:7b:c6:ac:
d0:f6:3b:70:2b:91:66:86:3b:69:dd:ae:eb:44:e1:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:8A:BF:1A:BD:7D:C7:4E:FC:91:6C:C6:ED:35:41:17:4C:7A:4F
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130332e302f32342d3234203d3e20343030343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.103.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e6:65:e1:83:fe:9b:2d:c5:c7:09:2b:50:20:b1:e5:bf:67:
eb:0f:10:49:29:5c:8f:68:45:60:a0:0f:5b:8e:06:22:bb:cb:
1e:c3:aa:f8:22:e6:73:c5:22:d0:c3:8e:76:16:8c:d6:11:c9:
80:00:16:be:6b:d4:83:0e:c5:f6:23:90:78:30:41:29:50:90:
1a:cd:aa:f2:f2:3f:38:61:56:2c:c2:0f:6f:1d:cd:b8:86:2c:
1a:ce:d4:03:ad:72:8c:e2:c0:45:a1:6d:4a:9c:29:4e:b7:41:
e9:7a:a5:34:21:e1:95:47:05:fe:e3:a8:93:84:08:ab:5e:6d:
2f:ad:2c:ed:e9:f2:a9:8a:a9:39:39:a6:a0:57:19:87:05:c0:
70:df:1e:4e:a4:61:87:07:44:c5:8c:be:95:02:48:4c:b5:4f:
4a:f9:5b:23:42:14:34:17:db:02:e3:b5:74:58:85:a7:5a:1e:
fa:72:e6:cb:72:3c:34:1e:f3:2c:8e:e0:0c:b2:8e:e1:a2:93:
40:1e:d0:af:f8:5b:40:52:01:71:e7:57:68:24:1c:02:28:a3:
4a:69:53:54:cd:30:10:fe:7b:75:a7:e9:67:dd:7b:50:cf:3b:
3d:64:29:b1:b3:ab:05:b4:2f:c6:93:5c:d7:58:a6:bf:97:a4:
46:e6:f3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org