Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38342e302f32322d3234203d3e203432333636.roa
File: 3138352e3136352e38342e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: 8BqSpAr7jeeLqmkiQnmSe7ZkCcakDPuEdnzd9Mu1zsU=
Subject key identifier: C0:2E:8A:F0:A4:77:B5:D0:E8:D3:0D:08:89:63:F3:05:EE:F5:64:A4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 606914CDC2940988955E355B23AC5E5016B21562
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38342e302f32322d3234203d3e203432333636.roa
Signing time: Sun 07 May 2023 15:43:15 +0000
ROA not before: Sun 07 May 2023 15:38:15 +0000
ROA not after: Sun 05 May 2024 15:43:15 +0000
asID: 42366
IP address blocks: 185.165.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:69:14:cd:c2:94:09:88:95:5e:35:5b:23:ac:5e:50:16:b2:15:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 7 15:38:15 2023 GMT
Not After : May 5 15:43:15 2024 GMT
Subject: CN=C02E8AF0A477B5D0E8D30D088963F305EEF564A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bc:c9:db:e3:24:d2:6e:ba:d7:31:9d:f7:cb:
c3:14:36:a1:c3:a1:d4:09:31:68:e3:7c:13:7d:f6:
c0:42:14:86:35:00:33:85:29:b3:3c:53:74:02:7e:
1d:0c:8e:1c:58:de:ab:ad:cf:94:cc:30:b7:31:d6:
36:8d:ec:a6:5f:50:5e:f3:d5:54:ff:e5:04:87:ba:
af:00:c6:cb:09:8a:8d:12:d1:e7:3f:34:7e:c3:10:
a1:72:45:45:60:25:6a:1a:1f:98:1f:ac:ee:83:8a:
95:b4:4e:98:c5:0b:aa:88:a0:0a:c7:e1:fb:9e:7e:
55:9f:62:96:44:cb:1a:00:21:e9:40:6b:81:bb:97:
25:0e:56:9a:a6:08:78:da:97:20:6a:73:be:f9:50:
13:25:45:89:69:f6:a4:56:31:46:f8:6d:12:86:03:
13:3e:91:dd:97:51:59:50:41:b0:91:ee:8d:52:58:
66:db:89:ee:fb:a5:b1:77:ee:a4:f3:08:2c:be:e3:
c7:5f:7d:fa:7f:50:e0:d6:61:df:d3:f3:33:63:4a:
4d:d2:df:f5:de:78:a9:d5:05:6a:6d:5b:36:00:da:
6e:2f:59:d5:93:b8:a4:df:7f:c7:51:3a:30:f8:35:
e5:87:ab:36:e1:a9:4f:00:1f:cb:22:4c:e8:87:31:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2E:8A:F0:A4:77:B5:D0:E8:D3:0D:08:89:63:F3:05:EE:F5:64:A4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38342e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.84.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:09:e0:06:f1:50:39:6d:9f:94:e2:03:6a:74:5a:37:9b:8c:
b2:91:66:7d:e5:0c:75:d3:65:0f:5d:d5:d3:12:2c:42:65:26:
10:65:45:d7:df:9b:51:74:37:48:75:32:e6:ad:b9:68:a4:26:
1a:5b:44:7d:db:ea:79:a1:ef:fb:50:fe:ad:bd:26:fd:97:cc:
3c:56:22:c2:97:2d:c0:0a:e4:a9:ce:92:33:ef:70:65:4f:f6:
00:80:65:f0:cd:00:b9:d4:20:24:7d:19:7a:e4:bf:88:7c:f4:
d4:a5:31:8e:6c:ec:82:7c:6c:5e:38:f0:39:4f:2a:96:4f:bf:
22:4d:70:3d:2a:61:20:30:98:96:1f:31:d1:a3:7d:84:92:9e:
ee:a7:77:82:d3:c5:d0:59:04:87:41:ac:cb:a5:d8:a8:a0:3b:
db:2d:bf:31:36:95:6e:e9:21:33:8c:d6:82:fc:18:5e:3c:32:
cf:72:63:0d:74:90:27:75:45:04:e6:40:38:13:a0:94:0d:6c:
a0:f0:56:4d:f6:86:9e:a5:e9:40:4c:9a:b9:7c:c1:b1:4d:81:
b1:36:1b:92:b4:3c:9a:29:12:6d:df:ff:d9:79:e6:53:71:0f:
d2:e7:e2:22:02:1b:5c:1a:6c:f6:f3:0a:ba:10:65:6f:ce:e8:
4c:2d:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:51 2023 by rpki-client on console-ams.rpki-client.org