Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31372e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e31372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: QcOlZEtcBlgxvTIJ+i4DYx2MVEeA3mCU9zEqHG9ovD8=
Subject key identifier: B5:3E:79:11:5B:F5:E7:EE:BC:E7:4E:A0:97:84:60:78:D2:7E:C9:04
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0623F1CCA952F14DC3C7A5833D367C2CB94A81D8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 26 Nov 2023 19:47:41 +0000
ROA not before: Sun 26 Nov 2023 19:42:41 +0000
ROA not after: Sun 24 Nov 2024 19:47:41 +0000
asID: 136787
IP address blocks: 155.133.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:23:f1:cc:a9:52:f1:4d:c3:c7:a5:83:3d:36:7c:2c:b9:4a:81:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 26 19:42:41 2023 GMT
Not After : Nov 24 19:47:41 2024 GMT
Subject: CN=B53E79115BF5E7EEBCE74EA097846078D27EC904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:de:4a:f8:14:22:bc:90:8b:2a:62:f6:cb:
01:00:c1:12:e6:0b:3b:46:ca:b0:b3:91:fa:1b:ae:
ad:23:ec:6c:bc:f1:e8:cb:2a:d1:4b:d8:d1:a5:9a:
5d:2c:41:e9:4c:1b:11:71:d4:44:16:bf:bd:5d:f9:
96:18:e8:95:3c:7e:9d:e0:56:27:dd:9e:73:e5:a3:
22:be:3e:a4:cc:47:a8:70:6f:e4:01:c4:59:b8:0b:
f0:43:f7:10:0d:db:89:ad:92:00:fb:17:e7:00:29:
c3:21:5c:71:6d:4d:97:cf:87:9b:e0:ab:bd:d0:84:
2b:14:a2:fe:83:76:b9:31:57:70:0d:9c:bf:f8:76:
a0:72:34:cd:5b:2a:54:ce:72:d0:65:1f:79:1e:6f:
34:c4:66:a7:68:d3:98:9b:1c:94:a1:4d:f9:98:b7:
e0:f0:52:32:cb:fd:0f:68:29:e9:27:d9:42:eb:40:
77:11:c7:08:1d:cf:a8:82:23:ad:0e:34:65:7e:f5:
52:43:47:e5:37:7d:26:3b:a3:cf:e9:c4:3c:52:e6:
e3:e5:25:95:19:d3:b3:c7:66:ac:3b:9a:b3:d9:1d:
c1:de:2b:4a:15:68:fa:13:2a:87:57:4e:d6:11:b2:
5c:27:15:26:e1:63:2a:4d:a0:80:ac:2a:b5:91:bc:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3E:79:11:5B:F5:E7:EE:BC:E7:4E:A0:97:84:60:78:D2:7E:C9:04
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.17.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b4:78:0b:28:b1:83:a9:86:c5:b1:a4:b5:f2:b5:67:ee:16:
bf:1c:31:a1:d6:2b:e4:f1:8c:fc:f6:a9:6c:ee:41:e2:8a:90:
07:45:21:17:e2:d6:5d:aa:f4:75:55:2c:b6:a4:22:fb:14:c8:
66:db:3f:71:e5:97:35:1d:a2:83:ee:26:ef:fa:b1:44:70:8c:
21:67:59:ba:49:75:6f:f1:02:ed:c4:bc:55:2b:e1:3c:4e:62:
f5:88:b2:fb:73:a6:ae:be:94:9b:9e:c7:fa:13:4d:76:c8:57:
6c:87:d7:91:7d:d3:2f:ec:69:db:81:c7:ea:ef:33:f9:b8:3c:
64:d5:50:b4:d4:df:14:c1:9e:5e:5a:6b:95:41:31:76:e0:21:
b3:0e:69:be:e7:02:9a:ce:41:0a:a9:3c:83:d1:1f:bf:c0:82:
b4:13:ec:cc:d1:39:db:28:49:89:04:8a:a3:dd:d5:f7:64:8e:
02:43:9d:66:57:ff:6d:96:a7:ea:22:5f:0f:df:01:8d:3b:e8:
f8:8e:9a:83:72:fc:dc:f5:92:e7:e0:1f:47:24:3d:d2:4c:4f:
d4:2a:76:cc:6e:f3:09:f6:da:8e:bc:c1:7c:de:08:2d:3c:c7:
f8:38:71:fe:58:96:bb:3e:70:1c:d8:40:bf:87:c8:da:9d:39:
52:94:1e:d7
-----BEGIN CERTIFICATE-----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Generated at Tue Dec 5 09:37:05 2023 by rpki-client on console-fra.rpki-client.org