Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37372e302f32342d3234203d3e203432333636.roa
File: 352e3130342e37372e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: th6H6DlJyk9SprFG+bSZ/gG9mU1F+gJvkCbyMRWuyso=
Subject key identifier: 8A:61:F2:64:E0:6B:8C:04:71:3B:86:02:92:62:12:12:EB:4A:B4:3A
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 514CD902442A64FCC5936D49BF7E9FF92AF58F77
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37372e302f32342d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:22:21 +0000
ROA not before: Mon 17 Apr 2023 11:17:21 +0000
ROA not after: Mon 15 Apr 2024 11:22:21 +0000
asID: 42366
IP address blocks: 5.104.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4c:d9:02:44:2a:64:fc:c5:93:6d:49:bf:7e:9f:f9:2a:f5:8f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:17:21 2023 GMT
Not After : Apr 15 11:22:21 2024 GMT
Subject: CN=8A61F264E06B8C04713B860292621212EB4AB43A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:c8:ab:38:14:df:e5:df:89:71:78:f9:ec:
8c:53:75:62:10:d8:d1:0b:85:52:78:12:5e:7a:be:
34:19:88:22:0e:7d:d3:ae:60:3c:0c:f4:54:5d:69:
bc:ac:0f:c1:24:4b:55:a1:34:d5:43:11:2f:c7:e9:
f3:27:de:1a:f8:94:13:d8:2a:21:eb:01:1b:5b:52:
f7:a1:68:e0:7e:f7:d9:6d:b5:f8:fc:1a:18:43:2b:
0f:f1:ea:26:ac:c0:2c:30:cd:a5:c6:0b:2e:1d:2d:
9c:16:ec:c8:93:3e:cb:dc:50:70:07:20:92:19:d3:
dc:5a:e1:39:53:d3:52:cd:64:4f:e2:90:7f:d2:a6:
2d:3c:c7:65:60:04:a5:09:e7:8d:c4:6a:e0:19:6a:
9b:74:1a:ee:e3:9f:38:a6:f8:86:d9:35:ff:91:41:
2a:12:f7:45:53:17:a7:1e:9c:3b:cd:e4:57:76:d4:
27:68:f3:41:ad:11:cd:73:96:7a:cf:de:51:47:0d:
ed:cf:d0:a8:e1:5c:1d:4a:c9:f5:72:49:62:cc:19:
b7:a7:72:b6:d0:76:9a:1b:4f:b0:6f:95:58:c6:5f:
25:17:78:7f:fd:05:84:23:ac:f3:27:f5:78:59:86:
ed:46:f5:66:df:a4:5f:73:7d:54:9b:c8:ef:f3:aa:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:61:F2:64:E0:6B:8C:04:71:3B:86:02:92:62:12:12:EB:4A:B4:3A
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37372e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.77.0/24
Signature Algorithm: sha256WithRSAEncryption
32:24:c4:d1:eb:8c:26:77:05:f0:84:d1:b2:f1:63:c1:7b:a6:
8f:3b:e6:50:08:ae:cd:3a:f9:f1:37:05:22:86:40:61:6d:c2:
9c:3e:a7:24:d6:b7:2b:a1:0c:9d:f3:f6:c5:cc:ab:22:ef:3f:
66:56:16:b4:a0:15:e8:35:d8:ab:45:09:67:63:00:02:89:05:
b8:84:83:7d:9b:38:95:3a:3b:be:ea:2b:e5:30:3a:be:c1:af:
3b:e2:3b:52:b3:80:3e:5d:92:a4:7a:64:33:1c:90:35:a1:45:
0e:03:00:e7:f5:df:ba:be:44:a8:b7:96:e0:64:d8:01:fe:27:
55:4c:f7:f6:bd:61:b1:a2:97:3d:dd:15:ae:01:10:7d:41:06:
34:b9:bf:f7:af:e3:0c:61:e3:73:ae:50:ec:99:57:19:ba:a3:
68:4a:e5:13:ae:70:93:4f:ee:dc:4b:cc:e1:47:e7:fb:9e:75:
26:6b:56:e5:ca:af:fb:b6:7d:40:95:90:8d:40:e7:f2:f0:e7:
db:c2:8c:b0:1c:0c:7f:c1:7e:b1:72:45:ea:a5:20:88:dd:20:
ef:94:6f:cc:a6:e9:6c:08:f9:7e:08:6f:70:46:fd:a7:cf:bf:
47:7a:49:74:8e:eb:5d:3e:a9:b1:0e:48:dc:b2:8d:09:06:33:
f2:90:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 17:43:49 2024 by rpki-client on console-fra.rpki-client.org