Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131372e302f32342d3234203d3e203432333636.roa
File: 3135362e36372e3131372e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: 8U9rwDCvkkghvWsyQSgFQLfu/8N/3ah/YgN0iWd5Azo=
Subject key identifier: 4D:07:38:7A:92:A8:91:17:9F:A5:9C:B7:41:89:9F:18:C9:C3:E9:C5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 09375F1BCFAEE5FC14A5BF876088EA935043CD24
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131372e302f32342d3234203d3e203432333636.roa
Signing time: Tue 25 Apr 2023 17:58:45 +0000
ROA not before: Tue 25 Apr 2023 17:53:45 +0000
ROA not after: Tue 23 Apr 2024 17:58:45 +0000
asID: 42366
IP address blocks: 156.67.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:37:5f:1b:cf:ae:e5:fc:14:a5:bf:87:60:88:ea:93:50:43:cd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 25 17:53:45 2023 GMT
Not After : Apr 23 17:58:45 2024 GMT
Subject: CN=4D07387A92A891179FA59CB741899F18C9C3E9C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:36:21:2f:4b:12:e0:b8:50:42:6b:8b:09:
ba:32:3b:9e:a6:fb:47:63:1e:c3:e2:e9:b4:5c:4c:
32:63:cf:d4:2e:df:f9:ce:2e:92:6c:56:ac:e9:fc:
3d:39:79:15:50:a1:b6:31:97:db:8f:bb:fc:3e:e0:
42:3c:94:30:79:83:ec:82:ec:b6:a9:14:a0:af:4b:
d6:ce:80:a6:3b:e4:9e:27:ac:8f:7d:a2:25:91:31:
8d:18:65:9a:04:bd:b7:9d:4d:86:67:03:94:53:be:
31:c7:c5:a8:6c:63:7a:35:af:f3:36:cd:4c:c7:7b:
38:f1:eb:09:52:a1:5e:9d:25:37:da:9a:41:b4:68:
b1:db:38:f6:8a:81:4d:f2:7c:2f:d1:30:f2:36:5c:
8f:a8:f7:f2:b3:ff:0a:2e:47:1f:03:9f:f3:95:96:
a3:f2:1c:d1:b5:44:7e:24:da:c0:32:a8:ea:f4:08:
08:8e:a6:c3:99:0b:5a:8d:0c:96:dc:1b:61:8f:19:
3e:16:96:ce:b6:ee:73:01:76:0d:d1:47:a0:f8:0f:
a8:4e:12:e5:ab:73:b4:a5:4d:8b:18:80:2a:20:10:
ba:45:9e:8f:ee:af:ce:0e:34:75:cb:7f:cf:32:43:
04:83:60:d3:4b:51:25:db:b0:79:23:27:71:ad:c6:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:38:7A:92:A8:91:17:9F:A5:9C:B7:41:89:9F:18:C9:C3:E9:C5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131372e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.117.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d0:9b:bf:6c:c0:8d:cc:3e:21:75:58:bb:71:69:7c:68:8a:
bd:b1:09:2b:6e:82:1c:fc:5d:5a:1f:66:c3:4e:98:82:cf:ac:
f4:f2:4e:21:56:ea:d2:9a:de:0e:1d:dc:bd:a6:cc:f0:32:8a:
ec:d3:28:40:2a:b7:8e:78:a1:aa:98:22:1c:e0:16:2e:f1:83:
45:f9:a4:b9:97:a8:e7:c6:51:4f:29:31:91:3f:65:90:2c:67:
d7:fc:e2:12:ac:a3:5c:4a:b3:ee:17:44:d2:c7:e6:a3:2c:b7:
f6:29:53:0a:ec:99:8e:83:75:1b:c9:a6:bd:13:0f:eb:60:8d:
41:91:9c:79:1c:5d:ca:bd:3e:b5:b7:8e:b8:2e:dd:64:35:96:
d8:78:93:64:54:6c:e6:b2:e1:77:47:ad:a9:4c:51:7f:97:01:
03:12:58:2e:f9:e0:3f:38:03:78:b4:86:16:e5:9b:64:54:6d:
a6:58:40:38:71:d3:ba:0f:cc:62:82:2d:69:47:56:d0:5f:a9:
78:80:51:23:12:80:5f:26:50:27:88:15:98:fe:d3:bd:c2:70:
e1:64:c1:a5:12:01:f7:f3:84:43:37:7e:7e:e9:f6:b6:d3:98:
87:8a:fd:36:17:34:da:b0:02:b2:46:03:28:42:39:1a:78:ad:
cb:a2:c8:db
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUCTdfG8+u5fwUpb+HYIjqk1BDzSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA0MjUxNzUzNDVaFw0yNDA0MjMxNzU4NDVaMDMxMTAvBgNV
BAMTKDREMDczODdBOTJBODkxMTc5RkE1OUNCNzQxODk5RjE4QzlDM0U5QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv8TYhL0sS4LhQQmuLCboyO56m
+0djHsPi6bRcTDJjz9Qu3/nOLpJsVqzp/D05eRVQobYxl9uPu/w+4EI8lDB5g+yC
7LapFKCvS9bOgKY75J4nrI99oiWRMY0YZZoEvbedTYZnA5RTvjHHxahsY3o1r/M2
zUzHezjx6wlSoV6dJTfamkG0aLHbOPaKgU3yfC/RMPI2XI+o9/Kz/wouRx8Dn/OV
lqPyHNG1RH4k2sAyqOr0CAiOpsOZC1qNDJbcG2GPGT4Wls627nMBdg3RR6D4D6hO
EuWrc7SlTYsYgCogELpFno/ur84ONHXLf88yQwSDYNNLUSXbsHkjJ3GtxrmXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUTQc4epKokRefpZy3QYmfGMnD6cUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM2MmUzNjM3MmUzMTMx
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzMzNjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
nEN1MA0GCSqGSIb3DQEBCwUAA4IBAQBG0Ju/bMCNzD4hdVi7cWl8aIq9sQkrboIc
/F1aH2bDTpiCz6z08k4hVurSmt4OHdy9pszwMors0yhAKreOeKGqmCIc4BYu8YNF
+aS5l6jnxlFPKTGRP2WQLGfX/OISrKNcSrPuF0TSx+ajLLf2KVMK7JmOg3Ubyaa9
Ew/rYI1BkZx5HF3KvT61t464Lt1kNZbYeJNkVGzmsuF3R62pTFF/lwEDElgu+eA/
OAN4tIYW5ZtkVG2mWEA4cdO6D8xigi1pR1bQX6l4gFEjEoBfJlAniBWY/tO9wnDh
ZMGlEgH384RDN35+6fa205iHiv02FzTasAKyRgMoQjkaeK3Losjb
-----END CERTIFICATE-----
Generated at Sun Nov 26 20:57:27 2023 by rpki-client on console-fra.rpki-client.org