Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3136372e302f32342d3234203d3e20323037383431.roa
File: 3139332e35372e3136372e302f32342d3234203d3e20323037383431.roa (raw, json)
Hash identifier: kc8D3jIK0wPvg9DpZo1canZymWugIr9AlcOqNMwiGBA=
Subject key identifier: D1:96:00:5B:3E:03:7F:E3:A4:FB:5D:DD:81:3E:CD:2C:14:CF:9F:24
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 721E2FE809AE935F51A0486CF2C5DDB98FA7A26E
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3136372e302f32342d3234203d3e20323037383431.roa
Signing time: Tue 10 Oct 2023 15:17:00 +0000
ROA not before: Tue 10 Oct 2023 15:12:00 +0000
ROA not after: Tue 08 Oct 2024 15:17:00 +0000
asID: 207841
IP address blocks: 193.57.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1e:2f:e8:09:ae:93:5f:51:a0:48:6c:f2:c5:dd:b9:8f:a7:a2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:12:00 2023 GMT
Not After : Oct 8 15:17:00 2024 GMT
Subject: CN=D196005B3E037FE3A4FB5DDD813ECD2C14CF9F24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:bf:d6:78:de:59:5d:5d:d2:f7:ea:26:1d:
f8:a7:b0:90:e4:1b:ff:26:94:74:a2:0d:28:ec:b1:
58:a2:98:f8:d7:d9:dd:59:4f:31:88:f2:e1:1d:87:
2a:b9:ca:65:b1:89:37:ce:cb:36:15:28:5b:bb:d3:
4c:df:93:a7:33:18:62:3d:f4:f4:ab:12:d5:6a:1f:
e8:4b:6c:0e:96:21:6d:87:04:9c:67:14:79:8d:15:
37:fd:bd:a6:29:b7:4d:85:75:43:c5:ab:0c:63:d0:
55:68:5b:58:3f:95:41:10:fe:ab:88:1f:54:af:8f:
05:52:66:d4:38:9b:7c:a0:01:1f:8a:6e:e0:9b:b1:
bf:bb:8b:11:fc:dc:8b:8b:d1:cc:28:96:09:26:31:
0e:21:c9:ac:fe:ce:9f:5f:7c:b0:ce:6b:81:e2:04:
ee:ca:6c:95:f7:16:5f:ad:e7:23:3c:f2:13:a5:4d:
93:74:3f:aa:47:a7:c3:e9:aa:5b:7a:89:63:d6:13:
0a:a7:8a:09:f2:c7:03:a2:81:07:86:78:92:ef:e5:
5d:c8:f4:8e:ed:86:b3:1c:1f:90:37:cd:aa:76:ca:
95:e5:38:cc:5f:5d:cf:45:97:c5:42:d1:ce:4d:91:
09:9c:76:76:85:2d:d0:ca:35:57:5d:d7:4b:1c:11:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:00:5B:3E:03:7F:E3:A4:FB:5D:DD:81:3E:CD:2C:14:CF:9F:24
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3136372e302f32342d3234203d3e20323037383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.167.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9d:26:fe:fe:e6:f5:50:3c:7b:dc:a0:26:a7:83:98:d5:ee:
a8:4b:ea:42:4b:3d:20:9c:ec:42:0d:3f:bf:b6:de:9e:4e:d1:
fe:bd:d1:32:a1:ec:03:02:b3:37:5a:0a:3a:24:c3:61:ee:18:
be:fa:41:85:cb:e1:10:b8:50:93:ca:a5:46:a5:85:e5:26:0d:
f9:ad:21:86:e9:f5:85:9c:29:b1:1d:e9:77:91:49:5b:b3:ef:
c4:d9:8c:e2:9d:e4:c7:9d:5a:6b:32:12:07:97:d4:57:fa:dd:
a4:1a:b5:66:6c:da:6c:e3:05:b9:ec:49:2c:c6:0c:78:7a:a5:
02:87:79:1f:00:be:63:1f:8c:6e:95:ce:0f:c1:c1:29:60:18:
be:11:0e:7a:40:b2:bf:dd:99:28:f1:be:7c:59:7e:8b:84:e8:
9a:52:20:c1:55:01:87:2f:f9:ec:52:b0:2e:2f:5d:c2:82:16:
75:62:b5:74:c3:b0:b1:d0:cd:d0:71:f1:64:bf:8c:75:d0:c0:
9b:e1:b6:e7:fc:26:39:ca:cb:b0:1d:c6:99:de:19:fd:89:41:
6b:fa:f8:52:92:83:02:b2:ba:7a:92:97:79:30:2b:82:1d:f2:
72:08:d2:d3:72:0a:83:98:61:e9:d9:ab:53:64:88:0c:7d:f6:
87:ea:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org