Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32332d3234203d3e2030.roa
File: 352e3130342e37382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: kCYb/K2h9mP6RR5Tv0+ak1qk92eEy187k2yssZd44f4=
Subject key identifier: 1D:20:84:09:76:51:15:E7:40:4D:AB:9E:26:C5:3B:D4:9A:88:D1:39
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 0691E40EC177F6AB54A7EC54CA69AC8776C7AFC6
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:15 +0000
ROA not before: Mon 27 Mar 2023 08:23:15 +0000
ROA not after: Mon 25 Mar 2024 08:28:15 +0000
asID: 0
IP address blocks: 5.104.78.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:91:e4:0e:c1:77:f6:ab:54:a7:ec:54:ca:69:ac:87:76:c7:af:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:15 2023 GMT
Not After : Mar 25 08:28:15 2024 GMT
Subject: CN=1D208409765115E7404DAB9E26C53BD49A88D139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:a5:d3:24:28:96:f9:16:74:fe:5d:5f:35:
98:fd:84:10:0b:cf:c0:6f:16:4b:b5:30:b7:e3:99:
f3:d0:f2:d8:e5:46:e4:77:9c:e1:49:d7:f4:3b:43:
50:d1:ed:b0:1d:9f:00:cd:70:a9:05:71:80:0c:78:
59:4b:63:5f:97:08:e9:a7:bf:72:df:62:86:63:16:
c3:e1:72:37:c1:34:94:b3:6b:7a:56:a1:ee:90:15:
b6:6e:f4:95:8d:c7:1d:5e:a2:5f:1a:c4:25:2f:0e:
b0:60:ce:24:eb:cd:1a:4b:55:13:95:b0:59:21:e6:
0f:b8:13:19:73:3a:36:ae:2c:7d:40:cb:df:61:36:
43:f2:2b:29:91:01:a1:c8:f6:69:e6:c6:40:eb:02:
4f:c1:7c:55:a5:11:2c:a1:71:b6:40:23:4e:ef:06:
81:d7:71:66:f3:87:22:2a:4f:85:6f:b2:8f:88:9a:
0a:eb:6e:30:c6:5b:8e:70:b0:30:91:9e:c2:48:e1:
61:dd:de:bf:31:82:7a:e5:9b:3e:fd:d6:97:b9:86:
ec:46:cc:9f:49:a1:5b:ae:8c:68:d8:81:1d:0f:4b:
7b:db:04:20:89:00:6d:11:0b:60:27:0f:77:16:5a:
0a:7e:5c:db:14:4e:95:34:4c:f6:16:7b:47:94:6a:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:20:84:09:76:51:15:E7:40:4D:AB:9E:26:C5:3B:D4:9A:88:D1:39
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.78.0/23
Signature Algorithm: sha256WithRSAEncryption
39:f5:78:4a:6f:ee:ef:c2:a9:e7:89:0c:b6:7d:42:e1:81:d5:
a4:54:ab:2c:78:de:42:06:89:20:fb:2d:93:a6:03:93:1b:0d:
ab:7c:b3:ac:34:93:9b:e8:67:df:81:cc:24:0f:6d:68:78:6f:
ff:db:6b:e7:88:1e:57:0e:28:00:62:70:a8:63:1b:89:eb:0b:
54:41:f6:a6:93:eb:d4:e6:fe:84:87:d6:b1:dd:9e:69:02:31:
54:f2:8a:76:10:0f:99:e0:e9:e2:08:ff:91:c9:f5:82:53:27:
6c:2f:cf:1f:95:e4:6f:75:93:43:7c:23:9c:94:fa:9f:6d:09:
98:61:8f:a7:14:96:59:b6:74:ff:0b:e0:dc:f6:00:09:15:22:
4e:c2:d3:27:bf:32:8e:d1:c4:48:fd:da:0a:97:48:9e:0c:94:
1a:9f:e8:20:69:b6:c0:93:56:15:dc:b2:d2:f4:72:4a:19:ed:
5f:00:03:ec:89:91:b7:34:aa:c7:2b:3a:63:64:b3:6f:8f:7f:
f0:1e:56:5b:ac:fa:3d:7e:b2:9c:91:42:53:25:fd:a4:d6:ba:
3c:8e:6a:6f:3b:e1:bd:89:9a:12:f2:9c:60:c5:a0:2b:92:5e:
fd:b9:df:0c:fa:c7:a0:ba:2f:4d:50:d7:08:d2:d9:b7:0b:a3:
48:90:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org