Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37392e302f32342d3234203d3e20313331313939.roa
File: 352e3130342e37392e302f32342d3234203d3e20313331313939.roa (raw, json)
Hash identifier: 4uupAzecUE+9KSogSZW/j3PPoKm1Q4N+naxYRSEkDOI=
Subject key identifier: D8:C8:B4:B8:35:38:2E:F9:D8:29:6E:E0:D9:B6:91:C6:D4:26:EF:E4
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 069842029D078DFB039D776D092D5F91131227BD
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37392e302f32342d3234203d3e20313331313939.roa
Signing time: Wed 07 Feb 2024 12:34:18 +0000
ROA not before: Wed 07 Feb 2024 12:29:18 +0000
ROA not after: Wed 05 Feb 2025 12:34:18 +0000
asID: 131199
IP address blocks: 5.104.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 19:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:98:42:02:9d:07:8d:fb:03:9d:77:6d:09:2d:5f:91:13:12:27:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 7 12:29:18 2024 GMT
Not After : Feb 5 12:34:18 2025 GMT
Subject: CN=D8C8B4B835382EF9D8296EE0D9B691C6D426EFE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:5b:55:62:88:3e:1d:82:69:bf:d9:89:c8:
53:6c:76:2e:e2:15:f9:99:cb:52:78:0b:d5:7f:18:
26:2c:c0:a2:66:6c:e7:5c:d6:0e:a9:72:4a:22:0f:
6a:b6:a1:0b:41:ed:47:b4:1e:98:0e:ec:dd:59:fc:
34:c8:04:01:24:29:80:46:50:38:29:a0:5f:f3:a8:
c6:49:5f:1f:62:37:a3:fe:1f:e0:0d:ca:17:5c:0d:
1c:29:45:74:6f:79:f7:c9:e7:3f:52:96:73:2f:e7:
33:34:46:00:c1:46:5a:4b:4c:fc:ed:62:fe:5c:1c:
fa:54:e9:ba:a5:13:aa:80:03:9e:06:35:91:82:42:
91:cb:2b:cc:2a:67:7c:3e:27:42:77:8f:6f:d8:ad:
de:68:0c:d9:91:5a:20:80:d9:63:6f:f5:7a:b1:b4:
b0:62:25:26:53:0f:0e:88:99:81:39:49:86:24:a6:
dd:f5:94:d8:a2:2e:56:79:b2:5e:c2:24:a9:2c:e9:
9e:6c:bf:fc:a9:32:b2:08:b6:d3:a6:5d:b5:b1:74:
fa:e4:b3:3b:f0:5b:01:53:1a:c1:51:fb:81:d6:dd:
b7:13:1c:34:6f:e8:4b:e1:d5:0c:e0:c4:0c:23:a0:
f9:5f:ea:13:c7:ad:96:e1:3e:ae:25:f1:6e:d5:ec:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:B4:B8:35:38:2E:F9:D8:29:6E:E0:D9:B6:91:C6:D4:26:EF:E4
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37392e302f32342d3234203d3e20313331313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ef:a6:7f:ec:b8:b2:be:84:69:51:a7:ac:01:de:8e:00:1c:
47:ad:a1:cd:fb:27:c6:3b:ee:ae:71:70:86:27:52:0d:66:00:
95:2f:a3:3f:e8:4c:d5:c0:ee:f4:6d:90:05:08:6b:f5:5f:d7:
6d:4a:9a:79:03:36:91:5f:fe:5b:fb:c7:62:65:f6:ab:25:3f:
d0:f0:35:08:17:34:80:80:77:68:36:b5:ad:b4:37:dc:af:93:
4c:63:0d:9c:f6:f6:3f:25:a4:6d:a3:40:c6:27:87:d1:bf:95:
8a:8a:6c:f2:df:d0:c5:64:3e:3f:c6:22:74:01:87:50:c6:3b:
f5:38:8a:65:ef:92:ea:64:ec:d4:39:13:dd:19:ad:34:70:23:
28:15:2c:c2:6a:70:ee:17:df:40:7f:21:59:7b:7f:07:2f:4a:
a5:75:9d:94:fc:35:63:fd:a9:2e:5d:87:c8:5c:09:c0:92:c4:
bb:26:4f:30:05:c0:fd:a6:09:90:1e:71:4c:67:57:eb:de:52:
c9:98:f9:95:d3:ea:5e:97:92:1b:88:3f:b0:b8:5f:1e:5f:b5:
ee:46:2c:bb:9e:e6:c0:fc:99:27:16:b8:4d:bd:ba:a4:bf:23:
b9:61:c1:69:ed:25:2e:5e:a5:5c:66:9c:9a:be:52:d4:a9:23:
83:d7:41:56
-----BEGIN CERTIFICATE-----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Generated at Mon Mar 4 20:51:08 2024 by rpki-client on console-fra.rpki-client.org