Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137322e35322e302f32322d3234203d3e203432333636.roa
File: 3138352e3137322e35322e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: jEXXAiXeDH7bJiXlR3RljxLMc6VxSmhbU2+jvOn+afQ=
Subject key identifier: 2C:4F:B4:21:CD:4C:1C:05:70:29:EC:FE:6E:B7:C9:73:85:34:44:A5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3581534D823DEB04B34B7D216F2C103C85E41107
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137322e35322e302f32322d3234203d3e203432333636.roa
Signing time: Sun 07 May 2023 15:43:36 +0000
ROA not before: Sun 07 May 2023 15:38:36 +0000
ROA not after: Sun 05 May 2024 15:43:36 +0000
asID: 42366
IP address blocks: 185.172.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:81:53:4d:82:3d:eb:04:b3:4b:7d:21:6f:2c:10:3c:85:e4:11:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 7 15:38:36 2023 GMT
Not After : May 5 15:43:36 2024 GMT
Subject: CN=2C4FB421CD4C1C057029ECFE6EB7C973853444A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:ce:f6:39:44:9d:e2:96:17:a0:a4:b8:26:
c6:a7:90:68:d3:82:af:ff:2d:0f:04:41:ec:f7:89:
8c:3b:a7:db:f1:26:f2:12:91:91:0d:fc:9f:63:95:
43:9b:f4:71:2e:b9:26:51:37:fb:0a:e0:27:11:59:
34:63:54:3c:72:3c:3a:00:17:22:e8:0a:bd:93:47:
ad:09:08:41:0a:fb:2a:6b:57:e7:bc:89:7f:b7:8f:
56:b0:d0:5c:95:46:4a:69:e7:04:03:08:24:cc:2c:
40:04:7e:8a:80:e3:31:1e:d4:06:fb:18:cb:e6:a5:
80:c0:0b:ac:1d:66:45:25:07:1d:3c:b3:93:6a:45:
b3:66:f3:29:0e:b4:23:f3:f3:33:c1:11:08:9f:8f:
61:a3:67:48:63:48:e4:e8:34:f1:6f:08:fa:b4:a4:
04:53:96:90:88:cd:92:37:d1:d7:d7:56:49:c6:03:
66:4c:a0:87:b5:19:7e:7d:5d:a0:37:8b:d9:b0:16:
9e:b2:1a:be:af:aa:f6:4d:42:25:be:54:9a:99:ec:
eb:1b:80:87:f3:83:e8:07:9b:0a:de:d5:09:d5:75:
3d:3a:b5:c3:00:a2:c3:d9:74:03:2e:b6:bd:f4:b7:
dd:5f:c1:c8:b0:0e:f9:92:49:fb:e3:64:a7:dc:c9:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4F:B4:21:CD:4C:1C:05:70:29:EC:FE:6E:B7:C9:73:85:34:44:A5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137322e35322e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.52.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:f7:39:db:dd:0f:bb:aa:97:6b:39:fd:05:37:15:d4:cf:f6:
6d:e1:34:33:a0:1d:75:82:41:59:d0:41:83:6b:a5:e6:36:cb:
fe:82:60:78:ba:b1:9b:01:4f:75:dc:a3:88:73:25:1d:ab:48:
be:c4:1f:19:93:b1:cd:31:5d:ef:e0:4f:41:31:6e:88:34:ea:
0e:e7:a1:f0:c4:25:85:d4:ff:cb:57:39:35:05:37:09:92:e0:
7f:38:dd:d2:26:0e:a3:9e:63:04:31:97:80:33:6a:8a:db:3b:
36:a4:83:40:8b:d6:be:8b:95:00:93:c0:8a:84:95:d1:35:ed:
02:35:e0:1a:54:0d:3a:4c:45:fa:ba:0b:bb:d9:55:60:e6:3e:
55:76:b2:3c:21:08:02:2a:b5:ff:e3:51:9c:6a:ab:48:29:74:
cc:0b:73:bd:66:0b:49:3d:57:1b:35:19:3e:c0:06:d2:81:71:
04:63:0b:bd:f8:c4:8a:62:26:a4:95:8b:96:78:b6:93:3c:0c:
e4:e6:88:81:96:74:3c:f7:38:4d:b1:e8:1f:5c:83:d1:71:d0:
7e:44:c7:20:3f:b2:f9:f5:bf:85:c2:b0:ce:6e:50:bf:9b:aa:
ba:63:c4:b8:f9:12:44:d3:5c:10:b7:61:8c:3a:4c:68:00:09:
f9:ea:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-fra.rpki-client.org