Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3230332e31342e302f32342d3234203d3e203432333636.roa
File: 3139332e3230332e31342e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: dQrhyzg1xym1CdPyMBitUAkFNg4Fnn+kv33N0JgBUVc=
Subject key identifier: 2E:A8:4C:65:CF:BF:17:C7:DC:47:27:95:DB:30:43:D4:40:24:0E:89
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 5267BAD5136C8B671A7F2F4231BDA5048BE7D3B8
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3230332e31342e302f32342d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:22:42 +0000
ROA not before: Mon 17 Apr 2023 11:17:42 +0000
ROA not after: Mon 15 Apr 2024 11:22:42 +0000
asID: 42366
IP address blocks: 193.203.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:67:ba:d5:13:6c:8b:67:1a:7f:2f:42:31:bd:a5:04:8b:e7:d3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:17:42 2023 GMT
Not After : Apr 15 11:22:42 2024 GMT
Subject: CN=2EA84C65CFBF17C7DC472795DB3043D440240E89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:1d:25:a9:80:fe:40:5b:fd:b8:51:4e:0d:
13:dc:e0:5b:ed:3d:34:82:da:8f:fd:93:89:34:67:
23:ff:de:85:5a:fe:18:a9:80:19:c7:ae:3a:40:79:
10:04:87:9e:f9:1e:52:e9:6b:11:ca:de:95:e7:00:
2c:c6:b9:c4:cd:d1:16:e4:e0:e7:15:c7:65:30:44:
45:69:81:0d:da:94:f3:90:22:47:4b:34:2c:17:dd:
d9:1e:2e:0b:68:b7:57:7e:66:ff:3c:c2:ec:5d:2f:
3b:34:2e:2a:d2:d7:bc:ad:96:7c:ab:cc:37:a8:2b:
0b:01:fa:86:0a:82:b7:5a:5c:c3:1a:ee:68:fb:ad:
72:77:a4:b2:51:3b:98:2c:28:6b:e9:5c:51:df:1a:
28:49:d3:13:7c:c5:5a:9c:c6:d5:cd:13:6c:ec:d3:
a5:63:f9:31:7f:e8:f1:63:ab:31:f9:e2:47:e8:79:
bb:79:8d:55:75:a3:e9:a6:3e:0d:25:0a:07:e9:57:
c6:1e:f4:e7:84:ea:56:d1:a6:2b:59:29:ea:af:65:
09:00:e6:0e:19:ef:76:cd:bb:fe:cf:4c:66:9a:6f:
c0:50:b5:28:88:2a:12:1c:f5:6c:51:77:5a:64:0e:
a3:2e:91:cf:e0:ae:1c:6a:47:a0:25:3f:12:92:d2:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A8:4C:65:CF:BF:17:C7:DC:47:27:95:DB:30:43:D4:40:24:0E:89
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3230332e31342e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:9b:35:33:f8:6c:99:8d:88:15:87:2d:cb:21:cd:5c:dc:81:
65:fd:4b:8c:90:c0:9a:30:7b:b8:81:d2:d4:ad:46:70:aa:5d:
1d:87:4c:ee:df:a6:6d:f8:04:2b:68:be:a5:c3:9b:45:ed:2f:
8d:dd:e1:9a:4f:19:a8:fb:c4:14:83:c1:64:c2:88:83:be:3b:
bd:41:32:68:50:fc:74:fc:67:11:f6:9a:91:ee:8d:91:23:62:
79:bd:8b:38:77:3b:10:52:c7:b5:44:66:31:b4:63:c0:9e:5b:
52:cc:df:30:37:2c:f1:48:33:bb:26:44:57:04:c4:c5:d9:a7:
b2:c1:17:86:9a:eb:d6:97:d2:c6:f4:f8:fb:29:b5:04:bc:51:
49:41:84:d8:dd:14:80:24:3e:c6:4b:bc:5d:7a:db:9e:2d:9a:
7d:12:8c:d4:6d:4c:66:43:e2:36:e2:86:5b:0f:fe:ed:c2:9e:
eb:e0:69:c2:89:4d:f9:c8:2f:44:be:85:f6:4f:62:f1:07:9f:
28:c5:26:3c:41:68:0c:a0:47:06:4f:78:1a:45:d4:15:13:dd:
2e:3e:89:97:17:da:08:9e:7e:35:97:b4:18:d1:b6:ca:9a:07:
f8:55:49:1a:f9:57:d2:ab:85:71:47:9a:4b:dc:8b:48:b9:e8:
69:10:d8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-fra.rpki-client.org