Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36372e302f32342d3234203d3e203432333636.roa
File: 39312e3231342e36372e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: 82n4hG1/I1RZzdzjd/SkmvF0jHXT8gFGuLRTAIZ29Dc=
Subject key identifier: 2B:A6:A6:3D:21:E4:55:14:5B:34:23:38:31:43:99:80:76:68:5C:1D
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 4939A5CA9BAB4F5B9D1A572659EB3AC27BC562F9
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36372e302f32342d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:21:54 +0000
ROA not before: Mon 17 Apr 2023 11:16:54 +0000
ROA not after: Mon 15 Apr 2024 11:21:54 +0000
asID: 42366
IP address blocks: 91.214.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:39:a5:ca:9b:ab:4f:5b:9d:1a:57:26:59:eb:3a:c2:7b:c5:62:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:16:54 2023 GMT
Not After : Apr 15 11:21:54 2024 GMT
Subject: CN=2BA6A63D21E455145B3423383143998076685C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:a8:b5:ef:67:1c:1c:1f:ef:bf:1b:d8:49:
32:32:b7:63:b0:e4:e7:6f:88:78:22:1b:42:f9:58:
ad:13:41:d7:5d:ad:de:41:37:4f:96:bf:ee:de:2b:
c6:5e:b4:ca:f8:80:ba:11:ae:fb:3f:c8:7d:38:81:
5d:12:3a:92:ab:ad:ec:20:55:65:66:57:22:74:44:
46:79:13:d7:3c:31:42:30:be:01:37:55:bb:b7:c4:
72:c7:20:b4:bb:a3:f8:ec:83:8d:4a:3c:2b:ff:4e:
e7:22:9a:54:f4:2c:3d:d1:31:34:51:79:00:5a:88:
d7:b8:35:74:47:e2:93:66:e7:e9:a0:71:48:3f:7d:
2f:f3:e8:dc:e0:56:8d:7e:f6:f6:b0:52:9f:7f:13:
d5:af:c2:fc:8f:e3:b6:15:3f:6f:5c:ae:15:0a:24:
50:54:18:ce:6f:e5:d8:29:8b:69:ef:37:7e:51:6c:
88:21:c8:cf:51:dd:2c:95:0b:ef:f6:b7:10:cc:90:
3b:28:b1:2d:8e:54:b8:c5:05:e2:7e:90:46:b3:60:
5a:6f:86:61:9d:0b:9e:33:aa:39:27:13:4d:12:df:
57:29:cf:40:dd:64:9b:a1:30:36:24:c8:d0:43:05:
14:2b:65:18:f0:bb:35:d3:9e:28:19:47:8a:71:cf:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:A6:3D:21:E4:55:14:5B:34:23:38:31:43:99:80:76:68:5C:1D
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36372e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.67.0/24
Signature Algorithm: sha256WithRSAEncryption
19:81:49:90:ac:d8:a4:f7:a3:f3:01:9a:5e:9e:e4:d7:d2:a1:
1b:1c:16:37:d1:00:9b:e3:ac:7a:1d:7d:e3:e0:ad:49:60:1a:
05:87:f0:80:09:8d:5f:ff:a1:a1:c5:7d:a0:4c:fb:31:b7:d3:
54:ac:50:ba:63:7f:a7:6c:7c:e1:3d:b2:bd:04:12:39:62:48:
8b:72:52:fe:4f:14:48:43:c8:5f:f5:03:c2:c5:52:ab:da:55:
98:27:d3:92:a3:94:da:1b:e7:b3:08:08:6c:bc:0a:1e:1a:d3:
82:48:08:fd:e2:9b:cf:f8:24:6d:52:dc:20:9c:ae:78:3c:48:
d0:3d:48:6b:b4:05:df:a8:98:46:a0:c1:27:35:37:e5:6c:f6:
fe:ab:d1:e1:a7:93:ab:77:91:3b:ed:a0:ab:c9:93:ca:2f:b6:
c5:a6:2c:a2:4a:aa:d2:59:48:10:7d:a3:38:53:50:4e:92:4b:
4c:31:6b:7a:d6:5f:ea:7c:57:e3:49:ad:3c:4c:68:d2:b0:bc:
43:e0:f9:90:01:f0:54:8a:70:9b:84:5a:8c:b8:ae:47:f6:4e:
ef:cf:2e:b0:72:03:32:29:1f:e1:bd:20:5c:f5:5b:06:e7:74:
96:15:a7:9e:f0:3e:50:b0:3a:02:c8:46:60:33:6e:b9:54:f4:
0a:fc:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org