Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e203235313938.roa
File: 3139332e3230312e37332e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: AzxgalXrIbZU4o1tzzlCoaCpI6vTgXiQenx5J+BTpUs=
Subject key identifier: 04:27:A9:64:98:31:94:F7:C8:ED:3F:49:14:28:76:21:7E:7C:50:5C
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 7D17A14BEE2665BB11169A898FA5F1C01317C38E
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e203235313938.roa
Signing time: Tue 23 Jan 2024 05:38:47 +0000
ROA not before: Tue 23 Jan 2024 05:33:47 +0000
ROA not after: Tue 21 Jan 2025 05:38:47 +0000
asID: 25198
IP address blocks: 193.201.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:17:a1:4b:ee:26:65:bb:11:16:9a:89:8f:a5:f1:c0:13:17:c3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Jan 23 05:33:47 2024 GMT
Not After : Jan 21 05:38:47 2025 GMT
Subject: CN=0427A964983194F7C8ED3F49142876217E7C505C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:28:53:14:4f:98:a3:ef:0b:83:07:3f:ae:
3c:97:d3:e5:4c:02:86:c5:00:a8:48:03:df:54:03:
ee:c5:f6:40:99:8c:23:6e:7a:47:d9:c8:b5:61:38:
d2:0d:88:f3:14:13:9f:f1:4c:4b:e9:83:c8:1f:03:
d5:a2:3b:2f:00:08:06:53:09:e6:16:e4:65:7b:fe:
a7:c4:59:ec:43:de:36:ab:e6:93:bf:93:c3:64:ff:
af:30:f2:05:4a:7e:3b:09:d5:92:d3:07:45:ba:ff:
8b:1e:c6:d1:1c:91:7d:ef:a9:73:11:36:de:67:40:
9d:5e:80:6e:3a:ee:8a:e6:96:9f:ee:73:82:2b:b3:
a1:2c:c2:3b:a3:d2:ca:aa:6a:a0:34:2b:b1:60:2e:
a6:d8:f6:91:34:04:3f:35:79:06:c8:5c:68:d6:c1:
bf:47:f6:9d:fe:89:65:a8:1d:97:8b:c7:5c:26:94:
d6:0b:cc:f9:1f:c3:aa:53:e9:81:a5:fc:30:29:99:
13:e5:33:17:53:01:fe:b7:d1:54:f0:25:56:8d:09:
b0:9f:65:93:54:c2:5c:f6:24:1e:20:97:5f:28:94:
37:ad:ab:3d:ce:5f:42:02:7c:df:b3:fb:dd:e4:8f:
e1:91:f5:f4:b8:c4:90:9d:75:0b:9b:d9:4a:d4:1d:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:27:A9:64:98:31:94:F7:C8:ED:3F:49:14:28:76:21:7E:7C:50:5C
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.73.0/24
Signature Algorithm: sha256WithRSAEncryption
46:08:8b:2e:26:00:25:e0:46:7f:08:fc:c6:d3:5c:56:d8:8f:
cc:1a:b4:c1:bd:dc:22:f5:cd:8f:55:14:e0:3d:2b:1e:e1:e2:
2b:48:e6:92:00:78:13:06:d2:5f:99:39:1b:e7:93:ea:75:ba:
54:2d:ef:32:38:6b:81:da:c8:1e:87:50:f0:66:55:35:45:8d:
f8:b6:8c:5d:1f:2b:3b:1f:82:fe:72:fe:f1:b2:38:c5:b8:ba:
d5:8a:2c:fc:ee:b1:fa:6f:68:ee:32:52:1a:d5:a9:24:17:3a:
03:c1:c4:58:e5:58:2d:13:44:34:19:23:11:b2:be:63:91:67:
f8:44:75:71:83:d0:dc:a6:3c:35:01:7c:e6:a2:7e:ee:da:3c:
bc:f7:ab:fa:19:fc:12:35:07:af:c5:51:f1:b9:7d:05:8a:2e:
ca:10:42:e4:4c:a1:5a:25:06:a7:59:8b:76:da:c3:57:ba:d8:
fc:39:69:6f:f8:fb:84:46:0b:a6:0c:29:b4:6f:71:ed:0c:cf:
15:cb:f2:40:05:e6:95:f0:84:d1:3d:9e:5f:3d:0b:80:d4:06:
04:14:7b:6e:56:55:32:70:17:ba:33:84:82:61:e7:b5:e0:0a:
b1:6c:07:3d:df:25:6b:e3:ae:c3:23:ca:b6:5e:8e:3a:f8:e0:
10:95:de:5b
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 14 05:49:48 2024 by rpki-client on console-ams.rpki-client.org