Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36342e302f32332d3234203d3e203432333636.roa
File: 39312e3231342e36342e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: rxElcDqEIleTrB5sc2FE8UiNyVViObdk+GEKpLuyEaw=
Subject key identifier: 66:92:32:3C:4D:D0:13:3F:E6:7A:D3:A3:2F:07:1D:2B:C3:14:34:C0
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 25EA727C5B2ABA36238D1FA2E3F91E53693C95AE
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36342e302f32332d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:21:48 +0000
ROA not before: Mon 17 Apr 2023 11:16:48 +0000
ROA not after: Mon 15 Apr 2024 11:21:48 +0000
asID: 42366
IP address blocks: 91.214.64.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ea:72:7c:5b:2a:ba:36:23:8d:1f:a2:e3:f9:1e:53:69:3c:95:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:16:48 2023 GMT
Not After : Apr 15 11:21:48 2024 GMT
Subject: CN=6692323C4DD0133FE67AD3A32F071D2BC31434C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:90:68:de:44:af:01:c7:b6:78:3d:69:e8:
e8:7d:06:7c:db:0d:80:04:c7:3d:08:c2:f3:81:f4:
25:7a:57:17:4f:47:91:4a:85:1d:a8:1b:36:22:82:
13:16:b3:d0:f0:b6:c5:67:c5:14:f7:ba:fc:44:e4:
0d:6a:80:eb:4d:d0:d3:bf:2c:09:60:5b:0f:44:ab:
96:67:73:63:84:db:73:1d:80:4c:45:b4:98:42:f6:
2c:56:4c:20:b6:71:8e:fa:60:a0:b1:01:f3:c5:db:
f7:c5:40:ab:b2:fc:7b:14:a7:bc:6a:53:58:ba:47:
c4:50:ef:e8:72:56:c9:51:0b:d4:d2:07:85:c1:91:
c6:39:9b:91:99:77:e1:5a:21:9a:8e:a4:32:d9:44:
4a:27:cb:67:87:47:af:9b:21:66:88:b6:83:83:9c:
fc:17:62:e9:e1:70:da:a7:80:52:75:91:75:94:9a:
cc:de:0c:56:cd:7e:bb:96:b8:2b:89:2c:3b:b6:a5:
70:3d:a3:68:d1:4e:95:19:ea:5c:c0:68:9a:a6:ac:
99:2c:08:f2:c8:d0:02:cb:35:b9:6e:6a:c1:36:8a:
98:fc:6a:56:29:07:60:49:3b:f3:cb:3e:8c:2a:79:
05:1f:8b:e6:f5:60:2d:4c:c3:e5:c7:ac:e3:20:cf:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:32:3C:4D:D0:13:3F:E6:7A:D3:A3:2F:07:1D:2B:C3:14:34:C0
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36342e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.64.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:e1:25:b3:5d:bb:95:33:8a:22:6a:35:43:ae:f2:cb:e1:f5:
58:37:10:61:83:1c:08:e7:b8:53:ee:2c:3f:96:e7:98:8b:70:
60:27:b6:a0:1c:85:46:d8:13:53:ab:b6:32:87:0b:c2:14:3c:
1d:c8:d5:47:1f:31:97:13:87:6e:ea:23:bc:16:bc:a6:fc:9f:
e3:0d:fe:6f:b2:80:92:e1:61:f4:16:b7:26:00:1e:4c:ca:9c:
9f:55:92:28:b6:6a:5f:d9:6f:2f:83:e0:22:11:84:fc:cf:87:
8b:64:8a:2b:16:94:f6:04:02:1b:a4:04:0f:11:22:bb:90:e2:
9f:af:44:04:69:19:c6:30:56:e1:b0:81:c4:c2:b8:ed:b5:ff:
64:f1:73:23:7a:60:c4:ff:35:f5:33:8a:7e:2f:97:4a:28:82:
df:9b:46:29:5b:a2:d9:3b:e7:63:07:69:bb:19:28:65:ee:e7:
78:d6:5a:58:8c:f6:b8:2f:46:18:b7:45:df:d4:9d:cb:7b:49:
36:62:5d:2d:71:45:4d:98:b6:f2:2d:7e:2a:1b:85:1e:a0:e2:
1d:a7:6a:1d:b6:1f:96:7a:c5:2a:a4:85:90:7a:4d:a0:12:af:
26:ea:ef:08:3b:6d:d3:c0:a4:e9:f2:53:84:23:27:de:35:e3:
0e:8b:1f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org