Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230332e302f32342d3234203d3e203432333636.roa
File: 3139332e3134322e3230332e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: 4dwtoKqwgEwsrgrtAmnRtQk2d2tdk0UTf8xr+U5Db2c=
Subject key identifier: 70:7E:E1:52:74:61:6E:EC:EC:E7:8B:0B:A3:2E:7E:0C:0B:1C:54:93
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 44F877161438C66389DBAFE5BE6078F072376332
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230332e302f32342d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:22:07 +0000
ROA not before: Mon 17 Apr 2023 11:17:07 +0000
ROA not after: Mon 15 Apr 2024 11:22:07 +0000
asID: 42366
IP address blocks: 193.142.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f8:77:16:14:38:c6:63:89:db:af:e5:be:60:78:f0:72:37:63:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:17:07 2023 GMT
Not After : Apr 15 11:22:07 2024 GMT
Subject: CN=707EE15274616EECECE78B0BA32E7E0C0B1C5493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:49:f5:84:bd:34:70:8a:13:20:4a:96:7d:
60:e9:5c:f4:aa:40:a7:45:c8:0b:db:67:cf:0f:6a:
d9:70:ae:8d:12:46:3a:f3:ce:0b:01:c3:fb:53:9d:
f1:b4:8d:e9:b9:95:37:81:7e:93:87:28:9d:c7:07:
5f:24:ae:34:f8:fb:29:cf:0c:57:f8:71:5f:4e:46:
22:b2:2e:d5:4e:88:8b:33:66:1c:db:cd:5b:84:f3:
bf:a4:52:80:36:76:8f:d9:37:b0:5b:a9:bf:7e:61:
6b:e4:cb:5b:7e:f7:62:6d:ce:a1:c2:7f:92:09:7a:
1e:ff:a1:19:5c:41:93:2c:60:65:49:9b:67:c9:2f:
6b:c6:63:81:9b:34:c6:07:5b:7f:47:55:02:21:f6:
ac:43:2a:76:44:4d:7a:35:9c:d3:a9:c0:28:b6:f8:
e6:2f:2e:26:55:b6:b1:ca:38:03:ab:6b:be:d5:03:
28:c0:fa:71:20:1c:55:23:47:e2:95:7d:e6:32:5e:
fd:34:8d:c4:60:df:06:ce:bd:d3:21:4b:51:0e:e9:
d4:54:5b:5f:be:c5:85:af:de:61:03:9c:40:1b:40:
6d:d1:22:6d:b1:23:b3:f7:3c:dd:39:2f:1d:67:f2:
63:d7:5f:dc:30:12:f9:f9:ae:02:61:07:b6:28:3e:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7E:E1:52:74:61:6E:EC:EC:E7:8B:0B:A3:2E:7E:0C:0B:1C:54:93
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230332e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4a:0d:73:f4:e2:df:fb:1a:80:62:f3:a8:ca:87:9a:23:99:
a9:b1:c0:5f:63:e3:e0:27:60:5d:65:b6:96:5f:c0:92:35:d8:
91:78:b2:72:f7:ba:c6:24:61:f7:63:b5:e2:0a:71:86:50:d9:
51:39:dd:18:74:10:8c:bd:41:65:ce:12:28:d9:60:ba:98:30:
e9:49:80:3a:2c:1c:99:d7:8d:df:b4:f8:80:c9:e8:c5:e4:a6:
d6:ca:e6:a0:76:d8:3b:e2:df:c9:93:83:ac:1b:d4:7d:16:81:
00:35:b9:f2:02:ca:4f:03:86:22:e4:80:08:3f:80:72:d0:a3:
9e:49:dd:b6:cd:8c:18:50:cd:2e:01:58:08:e3:c7:55:3c:fa:
b4:eb:cc:ba:bd:0b:74:88:ae:8d:ed:16:28:bc:aa:69:0b:f7:
84:39:c5:07:c7:cd:02:38:6e:3d:b3:97:1d:3a:1c:ba:1b:71:
07:38:de:6b:04:e6:6b:17:48:22:a0:a8:bc:23:29:e5:33:a5:
24:c6:95:9f:e4:fe:ce:04:fd:21:e6:2e:ec:89:2b:b2:9b:d7:
51:50:c3:20:82:0a:49:50:7e:a1:78:b5:45:b0:f2:71:c7:93:
88:1d:15:8a:d7:d6:a7:ef:75:f6:b6:60:4c:12:e0:42:9c:09:
42:7c:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-fra.rpki-client.org