Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/3231372e3131342e3230382e302f32302d3230203d3e203331313033.roa
File: 3231372e3131342e3230382e302f32302d3230203d3e203331313033.roa (raw, json)
Hash identifier: GRoqQ3Nw4Ts9NElHmlKUrlaB+A4sXue2L6Eut8gbpEw=
Subject key identifier: EF:B4:53:AA:DD:B5:01:16:6F:F5:7A:93:26:16:A8:25:CE:C8:C3:44
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 78D03A9FB008EDA07DF0AA1E69A23283AE55698B
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/3231372e3131342e3230382e302f32302d3230203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:29 +0000
ROA not before: Fri 31 May 2024 09:30:29 +0000
ROA not after: Fri 30 May 2025 09:35:29 +0000
asID: 31103
IP address blocks: 217.114.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 31 May 2024 13:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d0:3a:9f:b0:08:ed:a0:7d:f0:aa:1e:69:a2:32:83:ae:55:69:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:29 2024 GMT
Not After : May 30 09:35:29 2025 GMT
Subject: CN=EFB453AADDB501166FF57A932616A825CEC8C344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:3d:77:5e:ba:65:55:4c:8f:17:a9:8c:ad:
e6:52:a9:ab:9c:f6:21:ff:72:d5:fe:27:18:64:c2:
11:5e:18:ac:7d:16:31:3d:be:72:f0:10:72:3b:42:
d1:d2:e0:16:63:6e:f4:be:ac:c4:e0:96:ce:24:07:
3a:6b:40:ff:81:07:23:32:ff:82:32:fa:30:38:52:
09:de:2b:7f:b4:43:58:45:6d:ee:94:6d:d8:b3:a0:
7a:4f:36:4f:f9:3d:95:6c:5c:0b:93:79:c6:05:65:
6f:ac:74:15:8a:cb:7b:7d:4e:7e:27:e4:3a:7a:e9:
80:dd:89:f4:3b:09:99:74:28:2c:96:f2:09:f9:cc:
ce:fb:fc:b5:a4:a3:3c:a9:74:b5:74:44:67:f5:91:
a0:4a:d9:4d:d4:96:ea:65:57:ec:79:d4:ca:b3:9c:
c8:40:42:15:a4:a7:d1:03:71:72:74:6f:8a:b1:9c:
75:2e:36:97:58:6c:b0:be:87:10:8d:30:53:d5:9a:
d6:77:b3:99:c1:68:23:15:59:88:67:80:81:a5:2f:
a6:78:ec:1d:b0:15:1c:2c:a9:a6:20:1b:dc:57:05:
2a:09:92:9d:e8:ca:91:a5:38:b6:8f:2e:9e:7b:ae:
50:c2:21:5c:0f:5c:4b:09:fd:5f:db:a6:4a:b0:8e:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:53:AA:DD:B5:01:16:6F:F5:7A:93:26:16:A8:25:CE:C8:C3:44
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/3231372e3131342e3230382e302f32302d3230203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.208.0/20
Signature Algorithm: sha256WithRSAEncryption
64:ca:74:b1:27:a2:24:96:26:fa:f0:fd:f5:4e:ee:be:cf:46:
3d:ff:1b:08:5e:3d:fc:95:4e:f4:a1:52:7c:f9:ca:1a:2c:34:
83:f9:5e:58:9e:1d:ea:67:b8:ab:6d:d2:66:93:26:67:2b:c8:
ee:c8:32:ff:04:01:b2:62:9e:96:86:cd:95:3a:03:84:fe:97:
9e:f1:64:93:f1:84:b1:bd:de:5c:c9:f2:f4:97:b9:36:c6:e9:
ff:cf:75:2d:e5:09:f2:4f:29:40:6d:c2:8c:7e:1a:25:9e:b4:
4f:a7:eb:8f:7c:34:29:65:5f:92:4a:ca:55:b6:ea:19:84:96:
3a:8d:e9:15:06:7f:08:12:f0:2b:66:5f:5f:e5:de:75:d7:b3:
0e:c3:72:14:2e:2e:6b:41:51:61:3d:c4:b3:ce:85:77:86:a9:
c4:1c:8a:b6:0b:28:ff:93:55:af:03:ef:cd:ab:5c:0f:ad:81:
01:5b:ea:49:79:ce:79:bf:3b:8d:66:f3:66:26:78:1b:f2:92:
4c:48:ae:d7:62:34:0c:83:00:af:ab:a1:a2:62:94:cf:18:37:
b5:5b:89:24:91:59:17:6f:26:9d:86:2e:71:48:8f:8d:3e:bb:
e1:8e:f9:4b:d7:9f:66:57:12:30:5b:ae:80:d1:88:1f:78:26:
27:6a:37:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org