Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20333939303435.roa
File: 3139332e3230312e37332e302f32342d3234203d3e20333939303435.roa (raw, json)
Hash identifier: 4jsopsqK8r7K7vwE/Shj5ZFsYYknpRSRH2wI0YKRG7s=
Subject key identifier: C2:AE:DC:BD:E1:62:8B:88:38:C2:60:3B:F2:97:16:0D:11:E2:30:22
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 7837235841C7CE57670250921C72FAA6C8FA8414
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20333939303435.roa
Signing time: Tue 14 Nov 2023 09:15:38 +0000
ROA not before: Tue 14 Nov 2023 09:10:38 +0000
ROA not after: Tue 12 Nov 2024 09:15:38 +0000
asID: 399045
IP address blocks: 193.201.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:37:23:58:41:c7:ce:57:67:02:50:92:1c:72:fa:a6:c8:fa:84:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Nov 14 09:10:38 2023 GMT
Not After : Nov 12 09:15:38 2024 GMT
Subject: CN=C2AEDCBDE1628B8838C2603BF297160D11E23022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:5b:92:d4:26:86:15:2d:87:39:d9:e1:7e:
01:28:89:29:47:ae:1e:94:8f:10:54:0a:0b:69:5f:
31:99:0b:96:28:46:1b:be:ed:26:49:2e:87:32:fc:
b2:6f:d7:87:80:40:32:9b:b9:67:7c:34:ae:c3:e8:
83:31:0f:92:b2:f2:64:40:27:02:6d:6d:85:ea:c0:
f5:01:68:b7:6a:be:5f:41:eb:b9:7f:4d:8d:c5:51:
a0:87:46:c9:ff:69:88:97:dc:3c:e4:23:a4:13:96:
27:64:d9:ea:c4:50:2c:4e:7f:37:3d:7d:2e:c5:88:
53:24:3d:0a:55:3a:e8:ff:d4:55:d3:5b:93:e8:4f:
7e:c0:34:11:9a:ea:e8:7c:cb:e4:8f:a8:cd:fb:d4:
ad:99:7d:6c:ef:b1:69:ac:88:eb:6f:99:56:91:c5:
78:59:02:01:11:5b:8b:69:35:f9:6d:09:8a:71:ad:
cf:c9:fe:5d:e7:21:ef:dd:05:51:a1:98:91:de:4c:
5e:f3:43:64:22:2a:fb:09:ad:0c:8d:0c:7b:53:03:
5b:3f:bf:12:48:1c:03:50:9c:ff:98:30:9b:bd:94:
32:70:e7:ac:e9:bb:d8:11:06:ec:c6:81:bf:dc:4a:
cc:4f:52:56:f7:4a:69:d2:e1:0a:55:51:d0:10:64:
69:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AE:DC:BD:E1:62:8B:88:38:C2:60:3B:F2:97:16:0D:11:E2:30:22
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20333939303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.73.0/24
Signature Algorithm: sha256WithRSAEncryption
34:20:1e:11:e2:15:d0:72:da:e4:51:36:c0:3b:7b:b1:5f:16:
f8:bf:45:7d:a8:ad:38:85:7e:2d:1a:21:9d:5c:89:32:ab:b3:
d6:69:5e:9a:8b:d3:33:37:73:a9:27:49:ac:6d:09:16:40:b0:
99:ac:26:6f:6a:78:14:e3:4a:d7:ce:4d:ab:3d:05:59:8a:a9:
e4:3a:bc:e1:ea:e0:33:da:ef:f6:58:df:38:c4:b0:0e:13:37:
f8:24:b0:c7:0d:46:66:31:47:31:32:69:2d:60:80:17:4f:28:
de:08:86:28:a7:2b:db:bd:65:5e:48:82:71:56:21:dc:33:ee:
2a:fc:fb:05:05:8b:c3:bb:31:d1:91:1a:c8:a1:a2:85:b8:3b:
89:14:0b:0e:55:40:73:07:0b:3d:0d:63:85:86:41:e9:a5:54:
36:a3:e3:b0:ce:f8:9a:e8:44:61:8c:fe:ca:e1:1f:4c:e0:48:
82:f6:bc:6a:61:92:5e:87:74:fb:93:db:09:1a:1f:6a:0c:26:
63:5f:74:3d:3b:56:04:ff:47:f7:4a:37:34:27:13:3a:fa:8e:
a8:61:af:81:81:f5:77:67:3a:aa:d6:93:77:1e:12:4c:86:d3:
f1:bd:c3:f9:48:3e:36:32:e6:d8:9e:03:54:73:7e:09:60:c6:
9f:b4:28:9b
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 28 04:39:27 2023 by rpki-client on console-ams.rpki-client.org