Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33342e3233332e302f32342d3234203d3e2030.roa
File: 3139342e33342e3233332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: MhZVZD0Jw+A/2UnAQL4Mwb6oVvACz/EN3obDG5SafnA=
Subject key identifier: F4:46:4B:DC:92:C9:7B:7A:65:87:AE:C9:7D:46:41:5B:D1:79:5B:0B
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 2971E608047AC5012095A34C013BEC1B94D3BA93
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33342e3233332e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:58 +0000
ROA not before: Mon 27 Mar 2023 08:22:58 +0000
ROA not after: Mon 25 Mar 2024 08:27:58 +0000
asID: 0
IP address blocks: 194.34.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:71:e6:08:04:7a:c5:01:20:95:a3:4c:01:3b:ec:1b:94:d3:ba:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:22:58 2023 GMT
Not After : Mar 25 08:27:58 2024 GMT
Subject: CN=F4464BDC92C97B7A6587AEC97D46415BD1795B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:be:2d:e9:b8:a0:64:13:16:af:7a:b8:ed:
5e:16:bc:ac:23:ca:d5:a8:ab:70:d8:39:a5:1d:79:
a3:1b:97:11:cc:8e:a8:aa:8c:ca:d8:54:7a:50:51:
2b:c1:0f:b6:be:fe:c4:44:52:b9:13:27:4f:f2:f4:
49:28:42:02:be:94:f8:88:54:dc:32:fc:fc:12:20:
7b:07:2b:6e:c7:28:23:82:5c:0b:b6:89:52:f8:78:
1f:fa:c1:2b:0d:1c:65:a9:63:28:5d:95:a9:d3:25:
b5:81:db:f3:40:a2:06:b8:d2:93:b4:70:18:ab:6e:
42:eb:58:8b:02:6d:fd:ee:12:32:af:80:bf:02:57:
cd:fe:8d:d7:e4:d7:e5:69:9f:21:a1:81:d9:65:38:
46:9e:d7:58:ed:cd:9d:83:80:a4:b7:7c:f5:2e:96:
ef:2f:00:fd:f3:be:0d:a4:dd:27:2a:e6:fe:0d:3d:
bf:e7:43:16:d3:b0:3f:73:5d:08:50:12:a9:cf:cf:
e0:08:90:1e:97:cd:40:a4:d5:20:bc:b6:b3:13:cf:
71:a1:cb:db:0a:04:37:c1:59:55:85:a7:54:a6:5d:
1c:6c:b0:8b:76:de:f3:7f:73:c3:5d:95:1e:b9:94:
f4:3c:84:c3:eb:62:06:fa:3b:71:b6:a8:4f:f9:33:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:46:4B:DC:92:C9:7B:7A:65:87:AE:C9:7D:46:41:5B:D1:79:5B:0B
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33342e3233332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.233.0/24
Signature Algorithm: sha256WithRSAEncryption
30:6f:d9:d8:f2:d6:ba:1f:bc:dd:bf:25:43:65:19:31:56:93:
10:0f:18:b5:78:39:b4:1f:18:86:52:a8:20:7a:4a:15:27:37:
ea:c3:e3:42:ff:a4:bb:17:0d:f6:c2:2c:8f:0f:c1:05:b0:e0:
b0:b2:87:74:23:e4:eb:dd:3a:01:97:32:87:95:9e:62:aa:05:
98:af:7d:a8:83:6c:1d:a0:6b:95:06:a9:f6:b4:96:55:2e:11:
9f:7b:2f:5f:7c:22:e9:b4:89:95:cf:10:00:f7:54:a1:5a:ce:
28:b6:54:76:e3:92:f4:e0:26:f8:24:1b:3c:f6:5e:3d:9f:41:
9a:f4:98:8e:cd:1e:1b:d2:20:3a:d8:a6:06:f0:3f:03:36:8c:
ba:74:6c:6b:8a:dc:f4:aa:da:91:79:35:f0:6c:ea:36:30:fb:
dd:7a:9e:80:6a:09:55:4d:09:d5:dc:ce:ea:83:a1:14:11:df:
72:e9:e1:11:c8:16:1e:95:20:20:13:f8:56:ac:ae:43:3d:03:
99:89:fa:8e:a9:33:bf:86:e2:24:fa:39:67:13:25:58:05:fa:
09:ef:15:ee:8a:c6:bd:b7:85:57:ea:00:49:b1:af:ff:5c:60:
4c:c1:0b:56:99:d2:d9:d8:7f:61:dd:33:7a:be:3d:a5:42:da:
ad:5c:a0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-fra.rpki-client.org