Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e20383334.roa
File: 3139342e35392e3232332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: RaruZc80tzHYisNPqmvWL4VrNTGBHMGbcfFOmNFyeLU=
Subject key identifier: D8:A5:E5:08:57:9D:07:E2:2E:90:B4:B5:F5:E2:74:74:36:3E:8F:0A
Certificate issuer: /CN=fd1dcaa8fb487991afbb8f182f73e457ccb1f884
Certificate serial: 66E28CE9B4C01D0E87B2321843A528C1F7ED7697
Authority key identifier: FD:1D:CA:A8:FB:48:79:91:AF:BB:8F:18:2F:73:E4:57:CC:B1:F8:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_R3KqPtIeZGvu48YL3PkV8yx-IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e20383334.roa
Signing time: Tue 31 Oct 2023 00:00:10 +0000
ROA not before: Mon 30 Oct 2023 23:55:10 +0000
ROA not after: Tue 29 Oct 2024 00:00:10 +0000
asID: 834
IP address blocks: 194.59.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e2:8c:e9:b4:c0:1d:0e:87:b2:32:18:43:a5:28:c1:f7:ed:76:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1dcaa8fb487991afbb8f182f73e457ccb1f884
Validity
Not Before: Oct 30 23:55:10 2023 GMT
Not After : Oct 29 00:00:10 2024 GMT
Subject: CN=D8A5E508579D07E22E90B4B5F5E27474363E8F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:e4:52:fb:76:b3:e0:3c:22:2b:f5:80:5d:
63:29:91:3a:cf:69:7c:65:5f:31:15:f8:3d:76:57:
1b:97:da:83:0e:c6:01:1b:f7:a4:4f:dc:e8:3f:19:
ec:0a:53:2a:08:47:27:22:6b:61:f3:08:7b:95:d3:
0e:08:ec:83:f9:14:b6:17:22:73:39:6b:f0:93:a9:
c6:47:bf:17:1c:7c:18:68:b3:9b:a4:01:04:e2:58:
72:14:f8:89:20:a7:63:b2:71:e9:05:05:96:2b:15:
08:48:a8:8d:18:59:d7:01:c8:0c:19:01:07:cf:20:
2d:14:02:ab:f6:1f:f5:83:50:97:f3:04:4b:17:86:
9a:98:0a:dc:41:d6:66:f6:cb:44:99:08:9c:ab:21:
2b:b4:c8:5c:48:13:e3:f4:7a:f6:ba:91:a3:94:92:
bc:c3:68:08:f7:a6:a4:f6:22:69:da:fc:54:d5:06:
23:6e:33:0f:0e:ff:e3:eb:dd:a7:13:20:4b:8a:10:
b6:d0:cd:28:15:ec:00:0e:73:32:3f:f0:06:8b:28:
e1:d8:ae:39:33:3f:f1:9b:03:fa:e0:c6:d6:81:9e:
b1:6a:a2:3c:2d:c3:19:3d:f7:09:9c:6b:ca:c4:81:
39:92:8d:53:8c:71:4a:52:98:56:52:2b:d5:82:0b:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A5:E5:08:57:9D:07:E2:2E:90:B4:B5:F5:E2:74:74:36:3E:8F:0A
X509v3 Authority Key Identifier:
keyid:FD:1D:CA:A8:FB:48:79:91:AF:BB:8F:18:2F:73:E4:57:CC:B1:F8:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/FD1DCAA8FB487991AFBB8F182F73E457CCB1F884.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_R3KqPtIeZGvu48YL3PkV8yx-IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:71:87:52:fd:eb:6b:24:c0:07:54:b4:cc:1b:36:41:da:4d:
a9:ae:86:7b:bc:6f:35:2e:f7:a4:d1:0b:a0:36:69:20:df:67:
b1:9d:08:34:6f:f4:32:be:95:ec:d9:5b:a0:11:94:52:7f:9f:
93:b1:12:47:d3:f3:ae:f0:01:7b:7b:4d:7f:a1:28:2b:fc:c0:
8e:9e:ef:f6:f6:e4:34:8d:ab:f6:0e:50:f7:e5:b1:6c:d8:73:
8c:92:6d:a6:10:71:4e:b2:fc:f2:67:e0:1b:a3:ee:cc:4e:76:
ef:56:13:60:42:92:1b:99:f1:83:20:cf:df:6d:4e:74:a5:81:
89:11:90:20:4c:e0:5f:41:ff:08:8c:97:c2:8b:30:ae:0b:55:
1a:cb:b7:4e:69:a4:53:51:d0:02:95:29:e0:2a:7d:55:1b:7a:
15:3e:d5:36:c9:3f:a0:b7:05:2c:b5:60:af:e1:35:f3:24:00:
8d:7a:fb:16:f5:94:f5:d0:36:db:8e:ec:b9:61:9a:62:cb:18:
b9:23:6a:ce:52:93:54:d3:49:20:5d:5d:a1:b9:bc:d7:93:68:
37:fe:1b:ff:20:d9:0b:bc:1f:e1:3b:68:7b:66:a3:0b:e8:c1:
63:dc:d7:29:bb:f8:26:96:40:27:c6:32:e5:12:97:8a:45:50:
d5:6a:d6:ad
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 30 00:32:55 2023 by rpki-client on console-ams.rpki-client.org