Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134372e37382e3132382e302f32322d3234203d3e20313336373837.roa
File: 3134372e37382e3132382e302f32322d3234203d3e20313336373837.roa (raw, json)
Hash identifier: iXV51e5VOVutVdI8PjjRJJ6F27kRuNGpU3VzxfpyOfE=
Subject key identifier: 67:1F:43:4C:0D:1D:4A:7E:19:ED:DA:B6:AA:4F:A4:EB:89:BB:D2:C5
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 026E1A05E275DD8EE6125E36ABFC513DA703D73D
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134372e37382e3132382e302f32322d3234203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:28:07 +0000
ROA not before: Mon 27 Mar 2023 08:23:07 +0000
ROA not after: Mon 25 Mar 2024 08:28:07 +0000
asID: 136787
IP address blocks: 147.78.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6e:1a:05:e2:75:dd:8e:e6:12:5e:36:ab:fc:51:3d:a7:03:d7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:07 2023 GMT
Not After : Mar 25 08:28:07 2024 GMT
Subject: CN=671F434C0D1D4A7E19EDDAB6AA4FA4EB89BBD2C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:39:58:49:49:9a:4e:55:56:7e:39:b7:6a:
23:bd:16:1a:5f:eb:bc:b7:f6:e6:52:2b:11:65:18:
12:46:b6:3d:f8:ea:88:0c:b1:25:83:e9:f5:33:c3:
a6:73:b2:5e:16:af:74:27:1f:fc:2b:a4:fd:3f:4a:
db:07:c4:7a:b3:a1:49:de:45:e2:c8:2b:5b:2d:0d:
ef:68:f7:b9:29:eb:c1:06:79:1f:ca:9c:45:c3:0a:
32:2f:dc:b3:01:9f:e7:e3:1a:7e:03:0b:59:c6:af:
df:df:8c:4d:5a:b4:b9:70:03:e3:43:8a:e1:d9:c9:
9a:36:0f:f8:1b:39:39:5d:48:a3:2f:c3:87:fd:37:
c7:ff:e3:2c:d4:dd:5f:04:0a:26:e0:84:09:05:5c:
38:af:ad:3f:a1:b4:66:00:2e:a9:01:c6:c3:0b:94:
fa:ac:4f:2b:6a:d6:ef:56:fd:31:98:7d:16:42:85:
2f:bf:94:35:1c:be:2a:3b:53:a0:90:b3:a5:88:7c:
ce:ac:7e:62:6f:46:12:80:4a:63:0f:35:0b:fd:67:
35:4e:b1:50:01:91:5d:53:d6:17:b9:81:1d:81:66:
5d:c8:e1:06:9f:aa:35:4b:52:50:22:3f:da:52:ea:
9a:49:8d:e0:fc:fe:ce:38:19:dd:42:32:c0:25:bd:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1F:43:4C:0D:1D:4A:7E:19:ED:DA:B6:AA:4F:A4:EB:89:BB:D2:C5
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134372e37382e3132382e302f32322d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.128.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:59:d4:1e:8d:5e:3d:fe:3d:74:72:cb:88:c8:95:42:51:30:
b6:33:a1:fc:a7:33:c6:a0:50:78:3e:b5:c2:32:01:d1:e0:c4:
32:75:3e:fa:c6:bf:14:1c:47:19:b5:6e:7c:56:b2:6d:25:9c:
8a:7c:e4:2b:35:1c:6f:4b:d1:47:27:19:ed:81:ca:4e:88:3b:
fb:80:71:c5:67:a0:9d:f2:e3:cf:06:09:5a:d8:0a:5e:ff:50:
f5:60:a1:7b:e1:e8:42:69:b5:68:99:2f:05:3c:95:ab:fe:3d:
20:a1:85:6a:de:0f:d1:61:1a:1f:db:e7:e9:87:cb:8a:71:bf:
fa:a6:4b:69:43:0c:77:15:a2:6c:40:52:23:b1:03:be:c9:18:
a8:9f:74:fc:b4:5d:b8:54:47:4a:b0:db:8a:20:6e:f5:cd:b4:
e6:5a:c4:b8:7b:f0:e6:22:4a:15:67:c8:2f:a9:0f:18:c9:2a:
91:10:4d:76:c5:15:11:96:e0:b2:7d:cb:0b:bb:0e:11:80:f5:
d6:6a:93:aa:22:81:5b:65:07:a0:51:34:66:bf:44:4f:d1:d9:
08:e1:88:c6:da:ac:19:c4:c8:f8:2f:a0:39:96:77:9e:b6:38:
f6:02:05:54:38:48:cd:a5:fc:5c:57:04:a1:55:b3:28:76:45:
80:c0:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 14:29:18 2023 by rpki-client on console-fra.rpki-client.org