Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37352e302f32342d3234203d3e20383334.roa
File: 3134312e39382e37352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VMYLecYx5PJnKP2PlHmyIghZf56liRMnQYrKn2nAyd8=
Subject key identifier: 3F:D8:4C:0C:97:02:07:3E:FA:E8:53:F5:98:E0:13:0A:D1:0C:D6:E5
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 502A34093319EF3CD17728783167DBBF7136F429
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37352e302f32342d3234203d3e20383334.roa
Signing time: Fri 26 May 2023 10:30:05 +0000
ROA not before: Fri 26 May 2023 10:25:05 +0000
ROA not after: Fri 24 May 2024 10:30:05 +0000
asID: 834
IP address blocks: 141.98.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:2a:34:09:33:19:ef:3c:d1:77:28:78:31:67:db:bf:71:36:f4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 26 10:25:05 2023 GMT
Not After : May 24 10:30:05 2024 GMT
Subject: CN=3FD84C0C9702073EFAE853F598E0130AD10CD6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:45:62:69:ff:6b:47:d9:ed:07:9d:f8:76:
52:0f:c1:db:77:93:89:78:8f:0b:20:fc:1f:94:2f:
d7:a6:ff:b2:8b:e3:c3:f1:e3:d2:9f:c7:c7:87:19:
8f:4f:a5:86:73:04:3b:3d:fe:96:f3:5c:9e:d6:ab:
36:36:d6:a9:f2:d7:18:05:aa:a8:31:87:60:3b:bd:
68:58:c8:1b:79:1c:04:c8:ea:0e:37:ec:d6:9a:43:
c7:25:9a:95:a8:40:84:fe:ea:ef:21:cc:4c:ed:63:
cc:a3:65:9b:b8:e7:f5:7d:99:0e:2f:45:78:d3:2c:
14:e0:ac:59:04:53:88:5c:b3:d1:f7:de:dc:e8:16:
c4:f1:eb:11:36:50:40:f4:4a:4b:23:05:e1:f5:53:
47:f7:5c:ee:42:a2:ab:07:e1:50:02:e7:6e:a1:32:
9c:87:2c:e7:0e:53:26:b3:29:e7:31:b5:74:51:92:
b6:58:ab:a4:9c:98:73:93:e2:4c:ee:15:02:8d:84:
db:23:c4:f7:1a:eb:2e:1e:cc:3d:b9:4e:37:e5:f8:
d2:eb:c8:1e:8e:5e:55:f3:1a:59:ce:48:98:76:b9:
d6:34:88:40:bc:c5:82:9b:33:f9:1a:50:52:1d:17:
34:63:13:16:86:be:d2:11:02:72:95:17:0d:37:ea:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:4C:0C:97:02:07:3E:FA:E8:53:F5:98:E0:13:0A:D1:0C:D6:E5
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2e:40:02:dc:46:89:2d:e7:51:93:12:fa:eb:1b:f4:4c:d8:
11:4f:d2:a0:c0:f4:54:9b:d6:f6:e3:10:66:61:30:25:ac:eb:
0d:82:09:85:d5:9c:ac:fa:69:45:e3:e4:c7:fb:b2:f2:9f:a2:
75:98:02:3d:74:5b:65:83:f9:be:fd:60:15:5d:0e:33:5e:4f:
80:c8:ef:72:12:5b:0a:27:26:88:dc:2c:ee:df:1d:fa:55:c6:
b2:ed:cd:00:c6:76:64:d2:d1:b3:06:0b:e4:d3:27:f3:1c:da:
0c:94:a0:82:f3:54:c0:5f:46:a8:d1:8f:16:29:7b:38:db:c6:
0f:08:42:55:43:bd:14:5d:9f:36:6e:41:0c:a0:3f:19:a3:ac:
52:54:29:ff:e9:cd:c4:f8:e8:ad:ff:12:6a:0c:09:3e:12:e5:
e2:cc:46:a6:52:1b:98:c1:1f:21:9b:75:b2:cc:ba:95:a9:6e:
7f:ec:7a:2b:48:ce:b2:cf:26:ed:07:9b:1f:e7:ca:cd:d5:7e:
13:e7:f6:bc:30:d7:e6:c5:6e:08:5d:56:70:ff:04:c8:3e:1e:
cf:aa:74:bf:43:d9:4d:c9:80:fa:eb:8b:8e:5d:55:5c:41:74:
7e:43:52:ca:e4:9c:ad:a0:fe:28:e3:bd:a8:da:9f:e9:c7:9d:
ed:6c:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:51 2023 by rpki-client on console-ams.rpki-client.org