Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20323134373630.roa
File: 3139332e3230312e37332e302f32342d3234203d3e20323134373630.roa (raw, json)
Hash identifier: MoCY0kO+vd5gvI65ymeyNXWD9gvHlJkai8rNRRkQxJw=
Subject key identifier: 34:DF:72:AF:75:22:15:8A:D5:90:87:70:6F:79:80:59:B4:CD:EC:14
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 67C949EE67EBB3B3A5F90B521AF7BA2FCA284085
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20323134373630.roa
Signing time: Mon 23 Dec 2024 03:43:09 +0000
ROA not before: Mon 23 Dec 2024 03:38:09 +0000
ROA not after: Mon 22 Dec 2025 03:43:09 +0000
asID: 214760
IP address blocks: 193.201.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 07:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c9:49:ee:67:eb:b3:b3:a5:f9:0b:52:1a:f7:ba:2f:ca:28:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Dec 23 03:38:09 2024 GMT
Not After : Dec 22 03:43:09 2025 GMT
Subject: CN=34DF72AF7522158AD59087706F798059B4CDEC14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:4e:e3:aa:8f:64:38:91:3d:f8:13:94:ab:
b3:f6:5c:f0:ac:19:c3:e2:2a:82:0d:0c:e3:40:92:
e9:c0:cf:69:a9:b3:e1:fb:73:3a:92:d3:eb:09:37:
74:4d:5c:9d:45:00:29:f3:e7:41:a8:ba:99:c4:7f:
77:f9:42:a5:2d:bb:a6:23:b8:88:eb:ae:a9:fd:0e:
d9:d8:42:0b:52:bf:e0:21:e5:dc:3d:d2:27:80:ab:
32:bc:a1:ad:7c:5c:26:24:ef:02:ff:46:f6:c0:38:
ab:67:44:70:ee:4a:28:7e:38:6c:84:ae:bd:2d:8d:
8f:97:64:ee:b0:99:d9:40:e1:bd:f1:d7:e2:cc:2f:
f2:ec:e4:43:5c:a1:8c:03:2c:d2:9f:46:53:8c:67:
33:0b:de:74:9a:2b:66:55:2e:b4:40:c9:3e:df:26:
76:9b:af:38:1e:70:97:60:cd:df:44:9d:44:4a:2f:
d1:61:33:9a:f3:e5:de:af:50:fd:0c:2d:10:c1:3d:
4c:a0:ee:19:27:96:bf:78:c3:f9:da:a9:7e:5c:9a:
6e:bd:17:c8:f5:62:d1:60:00:2d:cb:28:bd:a6:59:
08:c5:b4:7f:b4:a4:76:37:74:66:61:50:08:d0:57:
6d:9f:81:57:7b:61:2e:cc:e5:4b:58:34:71:5d:ed:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:72:AF:75:22:15:8A:D5:90:87:70:6F:79:80:59:B4:CD:EC:14
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20323134373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.73.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0e:cd:07:66:95:e4:65:7e:f7:2d:c4:8f:0c:76:df:cd:f8:
17:fd:64:10:f4:eb:c3:2d:6a:ea:77:9a:10:e3:e5:95:ca:5e:
b8:e5:0c:b2:93:3f:fe:bc:44:ae:07:9a:3f:25:90:d2:54:57:
a9:03:62:58:05:70:8d:e6:92:f5:75:b3:dd:25:b5:18:53:69:
35:b0:aa:aa:5f:a7:4a:aa:8d:dc:fd:b4:a0:23:bf:58:c2:21:
42:cd:47:d2:af:95:db:cd:9b:d5:a6:61:fe:00:20:3f:36:db:
27:c9:32:14:7c:11:48:41:e3:9a:20:3c:18:f7:ed:a0:e6:c5:
78:ce:ac:14:f6:d7:f3:59:75:ed:2d:34:58:bb:13:71:8d:0e:
0c:78:be:bb:c6:ed:66:14:94:cb:bf:31:f6:07:9c:dc:0c:5f:
2e:e6:7a:fe:f8:0a:2c:ad:2d:d8:44:d6:aa:bc:50:2d:fb:22:
91:16:df:09:43:29:72:2c:b0:d4:91:d5:be:fa:bd:3e:28:5c:
17:13:77:4c:8e:d0:72:70:51:7f:8c:60:4d:96:c1:13:21:b1:
73:82:79:9a:80:a0:30:28:8a:22:02:e4:9c:61:20:b8:92:b0:
f6:bb:b0:b4:38:f6:72:73:1c:de:a9:d7:8c:de:5c:28:a1:9e:
ae:17:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:29 2025 by rpki-client