Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37322e302f32342d3234203d3e20333939303435.roa
File: 3139332e3230312e37322e302f32342d3234203d3e20333939303435.roa (raw, json)
Hash identifier: waxneC0VXF6XYmrCw3V68A1Pa43RNhlGNlr/o9Igqf4=
Subject key identifier: 0C:51:61:69:BF:DD:F7:E8:E0:DD:D0:1C:5B:0C:42:53:19:B0:57:91
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 0B387F92EA50AC579AEF54A959B8470B7508874F
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37322e302f32342d3234203d3e20333939303435.roa
Signing time: Tue 14 Nov 2023 09:15:24 +0000
ROA not before: Tue 14 Nov 2023 09:10:24 +0000
ROA not after: Tue 12 Nov 2024 09:15:24 +0000
asID: 399045
IP address blocks: 193.201.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 07:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:38:7f:92:ea:50:ac:57:9a:ef:54:a9:59:b8:47:0b:75:08:87:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Nov 14 09:10:24 2023 GMT
Not After : Nov 12 09:15:24 2024 GMT
Subject: CN=0C516169BFDDF7E8E0DDD01C5B0C425319B05791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:98:64:47:aa:ef:db:b5:62:24:28:f9:79:17:
3e:95:c1:e9:53:fe:14:99:e2:82:35:25:2e:c5:3c:
5a:ba:34:36:76:4d:89:21:39:b3:bf:3d:c3:5f:fb:
73:5b:98:65:71:2e:cd:8b:d3:4f:8d:57:e4:2d:96:
22:df:31:86:74:09:21:b6:8f:17:8d:c8:1b:1d:3e:
98:a2:cd:b2:ff:51:6a:ad:0d:56:f2:46:c2:b1:5b:
e1:6e:49:28:8a:37:27:41:15:12:54:62:3a:04:79:
e6:f0:1a:41:d2:8c:33:71:22:40:87:2b:2f:f9:c8:
9c:59:27:c7:f3:bb:fa:99:66:44:2d:c4:d4:cf:83:
7c:d7:2f:b2:b6:ec:5f:61:97:7b:49:71:d5:6f:d5:
02:e3:65:50:84:f1:bd:ba:68:22:70:a4:ca:67:1c:
ba:a2:37:86:73:74:04:f0:43:65:af:cf:c9:be:6e:
76:c7:63:31:ad:af:2b:5a:b4:e7:3d:b1:d1:83:34:
91:de:76:4f:52:a3:43:87:a0:f7:23:87:f6:9c:70:
9b:b4:d8:f0:ac:37:db:fb:da:b5:ba:05:cd:fa:89:
2b:e2:ce:08:93:2b:c6:1b:05:f1:5c:a6:24:16:fb:
67:d3:64:da:25:2b:ff:93:ca:07:27:dc:9a:de:36:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:51:61:69:BF:DD:F7:E8:E0:DD:D0:1C:5B:0C:42:53:19:B0:57:91
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37322e302f32342d3234203d3e20333939303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.72.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e7:88:5e:c4:f0:5f:ad:c8:08:07:96:41:e0:3f:f6:c0:f9:
d1:92:7e:c0:9b:16:96:d1:1d:16:22:b2:23:99:e9:59:8f:dc:
d7:df:18:2a:0a:30:23:cb:b8:12:fc:a8:ff:63:36:ff:96:70:
07:5b:36:23:75:77:37:b8:ab:2a:77:21:e2:93:65:4a:c5:66:
6b:b8:6c:32:f9:0b:bc:ff:e7:dd:61:3f:22:68:9b:c8:29:a6:
20:eb:64:ef:f4:31:a2:60:d7:92:73:84:5c:6c:57:3d:7a:ec:
9a:96:a1:c6:59:0c:ad:44:04:b8:f9:90:b8:3a:f4:18:cc:09:
86:52:5b:d8:c0:3c:20:58:4b:9e:9d:95:55:69:00:d1:4a:68:
1a:87:b6:e6:c0:8e:95:21:98:9b:9c:49:da:53:f0:cc:cf:75:
62:93:a6:8d:45:eb:38:cb:33:6f:eb:49:25:61:31:f1:cc:93:
7d:7e:db:a8:9c:13:82:96:03:8d:89:a2:60:72:9d:d9:df:91:
1a:67:34:6e:27:92:83:91:46:92:c0:b6:a0:5d:68:fd:5c:13:
fb:64:97:bc:61:8f:eb:8e:6a:af:de:e5:6c:8d:4f:c7:31:7f:
a0:99:07:c4:ad:67:2b:80:a5:fe:de:12:a4:1c:d2:76:d5:b7:
64:a9:1f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org