Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36382e302f32342d3234203d3e2030.roa
File: 3135352e3133332e36382e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: mOLOowIYJjTsQ4KDr/kaNcW28gSrXWpFRXuXO0/7q/k=
Subject key identifier: 94:FE:F7:47:45:6E:8C:8A:F2:A3:A6:F6:97:DB:45:D5:C4:C2:24:20
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D1F962B72F06D7261E94E9CDCC4ED869E466679
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36382e302f32342d3234203d3e2030.roa
Signing time: Sun 11 Jun 2023 10:16:11 +0000
ROA not before: Sun 11 Jun 2023 10:11:11 +0000
ROA not after: Sun 09 Jun 2024 10:16:11 +0000
asID: 0
IP address blocks: 155.133.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1f:96:2b:72:f0:6d:72:61:e9:4e:9c:dc:c4:ed:86:9e:46:66:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 11 10:11:11 2023 GMT
Not After : Jun 9 10:16:11 2024 GMT
Subject: CN=94FEF747456E8C8AF2A3A6F697DB45D5C4C22420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:d5:81:5b:a3:a9:6f:d0:d6:b6:9f:68:54:
f6:04:6e:52:d5:e0:b1:db:08:d3:85:fb:05:6f:80:
df:35:d6:00:59:3c:3e:0d:2e:cf:9b:10:59:d0:50:
50:02:c3:d1:e5:98:81:2f:6e:df:53:f8:a9:c6:43:
74:0f:61:da:27:1d:ea:37:94:ab:20:de:c2:a8:e2:
ba:1f:24:b7:9c:ad:c1:d8:10:df:89:a2:e3:f6:ad:
46:86:f7:2b:be:04:bf:68:89:a8:9a:d7:c8:04:3d:
36:50:c9:f2:cc:05:ca:54:0a:00:94:05:47:80:62:
5f:a8:3c:0f:30:f9:0e:9b:e8:c2:e0:09:a9:76:c7:
e7:8e:b5:db:24:05:97:03:d8:37:de:6d:eb:68:d5:
98:f9:1d:ac:80:1a:58:2e:00:8f:6d:2a:3f:3c:d6:
df:6c:50:40:29:67:56:72:b9:c4:58:23:90:ce:ac:
c0:97:0e:5d:47:bd:b9:92:18:8e:b5:98:af:ea:73:
81:8a:3d:4e:6a:aa:88:ec:7d:1b:4d:ca:b9:19:99:
61:8a:be:41:30:8a:23:55:2c:ee:8a:1c:01:7b:85:
e1:eb:33:36:8d:ed:46:a5:5e:c5:7d:08:63:df:4a:
10:00:9d:45:0e:ba:49:70:8c:bd:c9:d5:6f:b2:42:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:F7:47:45:6E:8C:8A:F2:A3:A6:F6:97:DB:45:D5:C4:C2:24:20
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36382e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.68.0/24
Signature Algorithm: sha256WithRSAEncryption
73:35:d6:fd:0f:60:e7:89:8e:5c:1a:aa:e2:b5:be:c2:28:f6:
4d:36:8b:fe:c3:f0:2e:77:9d:6c:0b:5a:54:9e:fb:23:a9:19:
d1:98:cf:14:11:56:4e:78:6b:16:d5:69:57:22:d5:6e:2e:db:
ac:35:22:16:12:d4:d1:6b:e5:08:3a:ff:12:84:9f:ce:e4:21:
a5:a7:4b:ee:1b:77:b4:d0:1c:01:aa:97:fd:16:ab:c1:1a:af:
05:84:b5:81:93:e5:b3:0f:a9:1a:15:94:dd:51:82:d9:38:f4:
11:ac:61:5d:c4:52:3c:67:76:c7:51:9e:23:f7:4f:60:68:20:
d5:22:d5:96:34:05:98:97:08:1f:e5:4c:58:dc:ad:73:97:8a:
cc:a1:9f:16:90:7f:0d:b2:54:8f:25:51:da:e2:18:6c:be:1e:
41:e8:a7:4b:27:f4:76:2e:23:b6:17:03:d1:58:22:ec:ee:80:
36:f0:b6:ef:ee:2c:18:6e:c9:3c:91:a7:1b:9e:a4:ff:7b:d5:
72:b7:92:0f:7a:ad:61:3a:42:7a:0f:ac:40:c0:19:33:41:d8:
f2:46:d8:fa:43:fd:38:27:cd:f4:da:59:e3:09:46:92:ea:91:
d5:6d:e9:d4:0d:df:e5:8f:bd:40:b2:23:48:55:83:a7:8f:53:
9a:78:07:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 21:22:28 2023 by rpki-client on console-ams.rpki-client.org