Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32342d3234203d3e20313331313939.roa
File: 352e3130342e37382e302f32342d3234203d3e20313331313939.roa (raw, json)
Hash identifier: LbtZCR4xSSCIeLldtVgRDDlsEVb+ZtN3n/DyivMz83I=
Subject key identifier: 7A:EF:C0:12:5E:F1:61:35:9D:3B:8A:25:CB:4F:74:1E:89:C2:4A:31
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 02DC678DAF0EA1BD0A8E110DB66E13A0AE59435C
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32342d3234203d3e20313331313939.roa
Signing time: Wed 07 Feb 2024 12:34:16 +0000
ROA not before: Wed 07 Feb 2024 12:29:16 +0000
ROA not after: Wed 05 Feb 2025 12:34:16 +0000
asID: 131199
IP address blocks: 5.104.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 19:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:dc:67:8d:af:0e:a1:bd:0a:8e:11:0d:b6:6e:13:a0:ae:59:43:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 7 12:29:16 2024 GMT
Not After : Feb 5 12:34:16 2025 GMT
Subject: CN=7AEFC0125EF161359D3B8A25CB4F741E89C24A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:01:da:22:fb:ab:f2:e8:ed:23:a0:74:2a:
27:8c:97:ed:87:cb:55:24:03:f5:8f:e9:64:cd:04:
1f:39:85:30:f3:1d:1f:2f:66:60:83:dd:28:cb:c7:
35:f0:35:e2:ae:c4:1b:59:54:50:6f:20:cd:d4:3e:
5a:f9:20:b6:ab:c0:63:48:d6:b1:73:3b:fe:d0:49:
05:8a:a1:4e:6c:2a:ca:fb:3e:cf:aa:e7:0b:de:f6:
10:4e:36:51:8b:20:27:98:cd:0f:86:af:49:7c:31:
e2:8f:3c:31:a0:6f:69:89:ec:74:bb:1d:fe:5e:8a:
fd:1e:4d:0b:96:a9:2c:39:24:11:a2:87:72:df:68:
93:6a:9a:6a:a8:f2:e2:78:7e:3d:cf:d9:7b:26:b2:
37:36:b7:c0:18:e8:19:54:cf:45:5b:54:3d:8b:2c:
03:1f:6a:07:63:0d:7a:62:2b:48:1b:0a:94:51:71:
18:01:e7:79:3a:f1:fb:18:9d:61:9a:ca:5e:a1:64:
9e:62:3d:49:d9:52:32:b8:94:67:60:31:0f:fa:50:
bb:7b:ca:ab:a6:cb:1c:cd:74:ab:25:2c:b2:54:7b:
c6:25:a4:f9:e2:85:8a:ad:60:d7:b6:3e:58:77:57:
d1:32:c3:82:55:92:7f:90:41:01:c9:77:24:73:92:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:C0:12:5E:F1:61:35:9D:3B:8A:25:CB:4F:74:1E:89:C2:4A:31
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32342d3234203d3e20313331313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.78.0/24
Signature Algorithm: sha256WithRSAEncryption
18:15:5d:60:75:a7:a4:53:10:d0:64:10:af:88:0c:a4:05:0e:
9c:99:22:72:fe:25:ee:20:b7:2e:d7:66:5f:c6:90:c5:bb:d2:
ff:84:18:fc:2e:b2:40:d8:85:15:9a:97:fe:cb:8f:5b:93:e9:
9c:37:2e:cc:03:df:de:e8:94:b6:83:81:5e:56:32:a2:39:2e:
c2:78:9c:f2:70:0b:34:a8:94:cb:00:37:62:fe:75:33:4a:30:
a7:d8:e6:86:f4:4c:dd:be:a3:44:35:fb:a8:1a:05:0c:5e:6a:
09:50:50:ad:ff:9a:83:ed:6f:21:d2:95:25:be:2e:ce:5c:78:
c7:33:68:cb:a3:ea:ae:36:8e:45:64:02:f0:df:28:bd:9e:eb:
b1:eb:bd:29:35:d3:85:d7:e7:7e:a1:b4:54:38:44:68:ee:d4:
20:4d:19:f6:1f:d4:89:7a:a8:c8:d5:73:06:0c:f1:c3:17:2e:
89:ba:1d:e3:a9:81:6f:46:a6:63:e2:41:5a:f2:14:60:35:56:
fc:07:18:49:3d:fe:20:1d:a1:5c:42:7e:c3:01:ef:4a:38:3d:
c8:6f:1b:58:22:b9:db:03:ee:d9:4a:b3:29:64:7e:3b:1e:8e:
50:c2:2c:25:f4:f4:d4:c3:7f:d8:e8:11:ba:6a:a2:8c:4b:b6:
dd:30:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 20:51:08 2024 by rpki-client on console-fra.rpki-client.org