Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3230332e31322e302f32332d3234203d3e2030.roa
File: 3139332e3230332e31322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: MAkPPQEveJfOTQQjifq2EuBW5u1L5uZqsKRZlwiOmBk=
Subject key identifier: 16:3A:28:30:70:58:77:D2:6B:1D:9C:BF:3E:36:4E:F2:73:0E:18:2F
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 4ADC20FCC08B4931A6AD3505E3AAEF7D1814A7E4
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3230332e31322e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:00 +0000
ROA not before: Mon 27 Mar 2023 08:23:00 +0000
ROA not after: Mon 25 Mar 2024 08:28:00 +0000
asID: 0
IP address blocks: 193.203.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:dc:20:fc:c0:8b:49:31:a6:ad:35:05:e3:aa:ef:7d:18:14:a7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:00 2023 GMT
Not After : Mar 25 08:28:00 2024 GMT
Subject: CN=163A2830705877D26B1D9CBF3E364EF2730E182F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:47:80:06:7c:47:18:b3:98:ea:da:09:f9:
4c:3f:ee:5f:a7:4a:9a:b3:e5:73:35:b7:b3:b6:8f:
3c:d6:15:f0:ec:6c:21:3d:ff:e7:b1:25:47:29:27:
70:e9:e6:7a:a1:80:d4:48:14:45:7c:0c:06:92:88:
3e:b5:67:2c:34:d7:6e:44:d1:aa:d0:45:32:e9:e3:
d1:cd:b9:c0:bf:13:be:11:62:95:64:87:f7:bd:89:
00:35:77:70:69:af:12:9b:ff:9b:56:79:8a:d3:7a:
f8:78:be:1f:49:fc:71:31:dc:55:47:cf:56:53:56:
27:e1:7e:60:55:04:18:57:d4:58:6e:ce:8f:8d:45:
a7:b8:fe:9f:70:00:f4:09:ac:2d:94:65:fe:5c:8c:
b3:25:a9:62:bf:fc:64:42:b6:20:d3:93:88:fa:89:
85:52:fc:96:c3:f8:1c:fc:9a:25:46:ec:6b:56:f3:
7e:68:0e:1d:f2:e3:58:f3:00:40:30:be:10:b2:ae:
6f:a6:ff:89:79:e7:b8:5f:7f:33:2c:32:d6:f5:e3:
18:e3:47:da:9b:1b:52:30:21:13:ef:b1:fd:1e:49:
50:fc:27:bb:79:13:bc:94:ab:71:13:87:79:32:b7:
20:06:92:47:0a:23:b4:da:25:54:6c:6d:8f:7f:ee:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3A:28:30:70:58:77:D2:6B:1D:9C:BF:3E:36:4E:F2:73:0E:18:2F
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3230332e31322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.12.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:7f:ed:89:e2:61:f7:53:80:03:1c:3e:40:47:4b:22:41:04:
11:ac:41:2c:75:d9:84:50:05:ef:92:1c:b1:3a:d6:0b:f8:d7:
c2:33:08:29:00:1b:75:22:4e:ee:ea:31:fc:cb:75:b8:63:28:
a0:d5:c7:64:a3:8c:c3:b5:e6:9c:c4:32:15:ec:bc:99:63:6d:
b2:0f:b5:87:6f:59:c8:43:ad:f3:5d:e3:af:71:f7:7e:cd:8a:
b6:c7:cf:fa:54:30:cd:60:f0:34:16:ee:60:41:bf:dc:b1:28:
9e:50:5b:1e:48:a8:6f:e7:7d:85:69:4b:5b:4e:05:66:53:12:
bb:42:e6:24:b7:4b:ab:47:63:51:2d:01:00:61:c3:c9:50:04:
f2:07:93:27:78:7f:98:19:6a:72:8e:24:be:e0:17:85:81:f4:
89:19:47:4e:83:18:15:02:0d:09:52:5f:98:78:f1:c0:e7:9a:
1d:8e:52:d7:d9:9a:3a:d8:da:b5:40:28:85:07:b2:ee:84:38:
04:54:91:eb:70:23:69:5c:30:69:9c:8c:bf:e4:ba:3c:77:c2:
94:54:e9:eb:b3:0e:4c:68:09:c4:2b:2a:2e:fb:cc:04:24:2c:
a6:a3:12:cd:f5:50:7c:6d:ed:08:a2:a7:3c:64:76:e5:a2:be:
ca:e4:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-fra.rpki-client.org