Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38372e302f32342d3234203d3e203432333636.roa
File: 3135352e3133332e38372e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: vXJrfrXsLeA6PycflyAdHYKdXkfxaJxQ6b2l7rX4UMc=
Subject key identifier: C2:EC:4B:FF:4A:DB:CF:9E:D2:33:45:17:1B:32:AB:42:54:00:E1:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63322257D97FDBC5993F3DAC8C0DB3FE67267A27
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38372e302f32342d3234203d3e203432333636.roa
Signing time: Tue 25 Apr 2023 17:56:54 +0000
ROA not before: Tue 25 Apr 2023 17:51:54 +0000
ROA not after: Tue 23 Apr 2024 17:56:54 +0000
asID: 42366
IP address blocks: 155.133.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:32:22:57:d9:7f:db:c5:99:3f:3d:ac:8c:0d:b3:fe:67:26:7a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 25 17:51:54 2023 GMT
Not After : Apr 23 17:56:54 2024 GMT
Subject: CN=C2EC4BFF4ADBCF9ED23345171B32AB425400E140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:f5:e0:ca:cc:11:cb:4b:c8:25:ce:5d:41:
f5:ad:bc:21:97:e2:13:aa:0d:d9:99:96:83:c2:ec:
6d:fa:9d:04:3a:84:17:86:70:7a:f1:92:d1:f1:cc:
12:46:75:08:26:7e:0c:43:6d:11:46:08:ca:de:d4:
48:6f:80:61:0a:be:69:27:a2:79:29:d5:62:5a:f1:
0a:e9:14:1d:a4:eb:3e:41:33:a4:13:79:92:dc:f2:
12:08:35:9c:78:60:8f:9d:f7:d2:5f:46:85:a1:d0:
8e:01:49:37:e4:52:2f:5e:0d:78:6a:3e:9f:78:5c:
72:b9:51:44:ee:76:20:6a:c9:4c:a0:b7:ce:6f:ae:
03:5f:51:29:1e:42:1a:b6:82:a4:ca:b4:e7:e1:3c:
d4:83:8e:97:0f:80:70:20:a4:7b:73:ca:0b:55:5b:
1d:0d:f8:ba:c2:6b:62:b9:1b:62:9a:c2:bd:f3:ab:
4c:0d:37:10:80:f1:6f:63:b1:64:1e:96:b0:33:33:
f8:b7:03:16:85:45:a4:c5:19:a7:73:5d:bb:64:f6:
fb:2a:87:b8:92:71:44:ed:87:62:39:d0:aa:f0:50:
dc:81:f4:89:62:48:70:99:55:fb:ef:50:6f:89:63:
43:4c:c3:5d:fe:14:d7:e3:86:24:fd:ad:30:df:6c:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EC:4B:FF:4A:DB:CF:9E:D2:33:45:17:1B:32:AB:42:54:00:E1:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38372e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.87.0/24
Signature Algorithm: sha256WithRSAEncryption
18:47:0a:b9:cf:80:02:62:16:ee:07:b2:66:c4:4f:2e:a2:e4:
5f:4a:56:30:85:1a:04:79:2b:05:a9:94:8f:81:53:c9:ad:51:
37:39:09:93:74:86:9e:1c:06:cf:64:bf:20:c8:14:33:23:4d:
74:1c:f3:4a:8f:6b:40:c7:27:54:a1:9d:a6:4a:7b:e1:67:ed:
97:6a:bf:2b:13:39:69:ed:8a:6d:3d:8b:3d:e5:a2:6e:4d:1e:
52:8d:48:91:50:52:a1:c4:a5:36:8f:a2:53:6f:ca:14:6a:e2:
23:e9:0a:04:5c:93:5b:46:c3:6f:14:3a:30:63:32:19:3a:d5:
8d:d8:2c:80:d2:23:ca:ae:24:04:ab:72:56:62:04:40:60:05:
4c:64:d8:ee:66:99:8a:ba:35:1c:dd:fa:67:c6:b2:9f:f4:ff:
ff:6e:bd:ba:c0:a7:1d:3c:c2:bc:9d:b8:43:f0:25:aa:53:9f:
a1:f0:99:cf:78:b7:37:ca:15:3e:62:e7:a8:65:60:f5:50:86:
4e:84:57:c6:0c:94:1c:01:56:51:5f:09:45:a6:3a:99:eb:7e:
ce:88:ed:32:d4:02:81:a5:a9:7f:10:13:d9:f8:88:05:b6:4b:
ec:84:8e:28:ff:ee:64:ec:9e:73:56:e8:f1:5a:1d:9a:ee:02:
0e:ca:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 20:57:27 2023 by rpki-client on console-fra.rpki-client.org