Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230332e302f32342d3234203d3e2030.roa
File: 3139332e3134322e3230332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: y0VAgeCTSN+Qhs+ZIJgFVuV2R4bMxJhhaqvxusi5kfo=
Subject key identifier: 57:70:47:D3:BC:A0:37:DD:58:63:30:EF:31:53:32:F3:8B:CE:E1:F4
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 786C655472E8A84EB5E2FBA7D34A36BAA3959F8D
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230332e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:10 +0000
ROA not before: Mon 27 Mar 2023 08:23:10 +0000
ROA not after: Mon 25 Mar 2024 08:28:10 +0000
asID: 0
IP address blocks: 193.142.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6c:65:54:72:e8:a8:4e:b5:e2:fb:a7:d3:4a:36:ba:a3:95:9f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:10 2023 GMT
Not After : Mar 25 08:28:10 2024 GMT
Subject: CN=577047D3BCA037DD586330EF315332F38BCEE1F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:85:2e:e7:ca:48:e8:f3:f0:ed:bd:4b:0c:
04:19:46:67:e5:ca:af:79:07:d5:b9:35:3b:a0:37:
bf:d5:7c:24:a5:14:00:ae:f3:48:83:f5:4c:e5:52:
3d:c4:2d:b2:79:b2:18:cf:65:43:b1:bf:bb:a1:ea:
46:95:28:0f:8c:46:07:ff:93:c7:f8:88:00:ce:1f:
5d:68:25:82:b2:28:4b:98:6f:54:51:53:1c:76:27:
54:ea:8d:0f:58:61:42:0a:50:5d:d9:1b:bf:a6:21:
ee:01:90:95:b3:17:e3:56:45:e8:d3:5e:19:75:d4:
8b:75:19:f1:81:2e:bd:49:59:f4:b5:f3:97:cf:28:
4f:1b:1a:01:75:7e:87:7c:57:13:36:ba:0f:c8:81:
20:cc:13:34:d7:f6:89:aa:2f:ff:94:9a:27:49:27:
3c:77:e9:57:2d:f8:65:82:6a:0e:87:dd:a3:bf:65:
48:e3:4b:8d:31:3e:c8:aa:4a:a3:ad:8d:5a:50:80:
57:fd:42:a7:22:6f:d0:2f:f8:14:7c:87:da:d6:12:
4e:ed:b1:96:e4:24:87:dd:55:c6:ec:d5:c0:7e:fb:
87:18:3e:10:7e:c6:c6:b9:05:fa:28:93:63:b5:93:
48:e3:06:04:8f:57:85:3f:37:a3:af:a7:97:e4:2b:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:70:47:D3:BC:A0:37:DD:58:63:30:EF:31:53:32:F3:8B:CE:E1:F4
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:70:54:34:17:e8:3f:41:c0:fe:d0:c8:4d:19:e9:0f:f0:bd:
95:e1:99:09:e2:0e:57:ef:7b:24:5a:54:e0:bc:e6:80:d1:09:
ab:32:a9:db:31:5b:cd:37:8e:14:62:3b:86:14:c8:fa:1e:38:
c7:29:7a:56:e9:52:bf:96:cc:cd:6c:5f:08:02:a8:23:4b:ab:
77:4d:f3:4b:f3:b1:2e:26:ca:85:66:b3:35:ff:47:ad:30:10:
31:72:ae:e8:89:12:0c:f3:e5:56:68:00:49:87:b0:5a:f0:4a:
a8:d0:56:8a:0d:4e:5b:3a:d8:2c:1d:8e:d1:66:27:18:8d:2b:
94:38:da:a4:61:d5:2a:90:d7:8f:e9:59:15:79:05:e9:e5:b2:
46:0c:b5:ab:6e:7f:6b:4e:a7:6a:d4:29:40:2f:ea:33:50:f2:
42:d1:ed:bc:aa:2f:1c:ce:8d:12:07:f5:24:ec:31:44:cc:50:
af:bf:75:b9:d1:33:4d:c6:4d:41:49:3d:d3:f4:06:2d:2b:b3:
63:b3:d7:08:c9:3f:1d:f1:47:c7:40:c4:0e:9b:5e:fc:1f:76:
27:43:bc:fb:48:fc:08:47:91:04:74:70:26:f8:a7:de:89:64:
b3:07:b3:30:39:94:49:cc:e5:8f:06:55:b9:6e:00:75:2b:4b:
ba:90:a2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:51 2023 by rpki-client on console-ams.rpki-client.org