Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36372e302f32342d3234203d3e203432333636.roa
File: 3137362e3132362e36372e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: GIhzXfT+5+aQDjrKU0mo9ZOASphHm+U2daEzbajsmUo=
Subject key identifier: 3B:11:E0:83:FA:CB:2D:E6:BB:92:AF:8D:5B:44:37:0E:5D:D4:51:74
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B39571295E646EACFCE655AA675FFA03AFD30A6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36372e302f32342d3234203d3e203432333636.roa
Signing time: Tue 25 Apr 2023 17:57:08 +0000
ROA not before: Tue 25 Apr 2023 17:52:08 +0000
ROA not after: Tue 23 Apr 2024 17:57:08 +0000
asID: 42366
IP address blocks: 176.126.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:39:57:12:95:e6:46:ea:cf:ce:65:5a:a6:75:ff:a0:3a:fd:30:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 25 17:52:08 2023 GMT
Not After : Apr 23 17:57:08 2024 GMT
Subject: CN=3B11E083FACB2DE6BB92AF8D5B44370E5DD45174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:c9:5d:4f:bb:63:d0:9b:88:c6:81:b6:63:
f7:af:ec:7c:0f:96:e9:fc:b2:db:55:7c:1e:f9:87:
fd:36:3a:c5:57:3d:88:ec:af:71:67:ca:cf:e2:da:
f9:a2:fa:c6:55:04:0c:bd:7b:40:7e:39:51:9e:56:
a8:ad:ea:5e:ab:17:6f:bf:c3:60:bb:ed:89:32:46:
55:44:29:b2:d4:78:d8:ba:d7:06:22:81:7f:e9:b3:
66:1c:bf:1f:13:c9:d8:3f:76:f5:ff:86:d1:8e:b4:
6f:9f:f2:44:61:62:5b:3c:93:d6:84:c8:d5:8b:3f:
e4:25:cf:1f:cd:fa:2a:73:cd:77:81:91:60:65:c4:
0c:e3:fe:08:3b:0e:d4:87:99:07:86:d2:58:f2:91:
6c:db:08:be:d7:d0:af:b6:11:79:c5:46:1d:b9:a9:
f9:5f:eb:01:8c:fd:0c:2c:9c:84:df:3c:48:da:18:
4c:0c:5d:b9:f8:58:6c:e9:93:61:04:da:a0:04:e0:
63:da:a3:df:e8:42:30:6e:b6:4c:32:e5:9f:00:68:
17:f2:ea:f3:a0:dc:ab:2f:f9:74:95:aa:31:78:e1:
68:57:82:fe:12:31:3b:59:f2:91:6f:ec:58:3e:ff:
ae:78:c5:09:f5:b3:e0:e5:fd:d7:fd:c6:63:df:7d:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:11:E0:83:FA:CB:2D:E6:BB:92:AF:8D:5B:44:37:0E:5D:D4:51:74
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36372e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f5:99:1a:cc:6e:d5:71:6d:3e:05:ba:4c:bb:7b:60:65:53:
78:d2:6e:2c:1f:28:9e:41:15:44:8b:22:de:71:7f:0c:72:17:
f0:04:3e:07:7c:dc:03:fa:f1:a6:9e:0d:9a:cd:c6:9c:29:43:
fa:1b:8e:5f:40:bf:c6:9f:67:36:97:6a:eb:7c:ca:4f:13:4a:
90:d0:1b:ef:81:69:cd:fb:e2:11:3c:2f:1a:9d:3f:09:91:69:
2b:08:29:6a:64:f9:f7:e9:d1:e4:f6:83:33:b5:77:ea:ab:06:
53:93:70:3a:eb:9e:ad:73:b4:99:78:6c:22:eb:7d:d1:9c:86:
7a:1c:d4:4d:49:69:77:f0:fd:6c:48:dd:a2:37:d8:92:6a:36:
8d:82:3c:d7:dd:0b:6e:63:ab:9d:3f:9f:75:ba:9e:d8:55:74:
13:97:9d:f1:b9:31:e5:31:1b:e2:48:b7:38:b6:0b:8d:bc:42:
a9:3c:6c:8e:67:80:84:5a:62:de:b4:8d:35:9a:54:b9:1a:01:
c0:08:85:85:c5:35:09:5b:ce:59:48:84:52:04:d8:9c:18:31:
cd:56:e8:fe:c9:19:5b:d3:14:c4:17:3f:a9:c5:3e:9f:4b:99:
f6:f7:32:cb:08:6e:3d:f0:6d:9a:c9:ff:ac:fe:8d:17:da:f8:
f3:c7:ae:ad
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSzlXEpXmRurPzmVapnX/oDr9MKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA0MjUxNzUyMDhaFw0yNDA0MjMxNzU3MDhaMDMxMTAvBgNV
BAMTKDNCMTFFMDgzRkFDQjJERTZCQjkyQUY4RDVCNDQzNzBFNURENDUxNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepMldT7tj0JuIxoG2Y/ev7HwP
lun8sttVfB75h/02OsVXPYjsr3Fnys/i2vmi+sZVBAy9e0B+OVGeVqit6l6rF2+/
w2C77YkyRlVEKbLUeNi61wYigX/ps2Ycvx8Tydg/dvX/htGOtG+f8kRhYls8k9aE
yNWLP+Qlzx/N+ipzzXeBkWBlxAzj/gg7DtSHmQeG0ljykWzbCL7X0K+2EXnFRh25
qflf6wGM/QwsnITfPEjaGEwMXbn4WGzpk2EE2qAE4GPao9/oQjButkwy5Z8AaBfy
6vOg3Ksv+XSVqjF44WhXgv4SMTtZ8pFv7Fg+/654xQn1s+Dl/df9xmPffaVxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUOxHgg/rLLea7kq+NW0Q3Dl3UUXQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM2MmUzMTMyMzYyZTM2
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzMzNjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sH5DMA0GCSqGSIb3DQEBCwUAA4IBAQBs9ZkazG7VcW0+BbpMu3tgZVN40m4sHyie
QRVEiyLecX8MchfwBD4HfNwD+vGmng2azcacKUP6G45fQL/Gn2c2l2rrfMpPE0qQ
0BvvgWnN++IRPC8anT8JkWkrCClqZPn36dHk9oMztXfqqwZTk3A6656tc7SZeGwi
633RnIZ6HNRNSWl38P1sSN2iN9iSajaNgjzX3QtuY6udP591up7YVXQTl53xuTHl
MRviSLc4tguNvEKpPGyOZ4CEWmLetI01mlS5GgHACIWFxTUJW85ZSIRSBNicGDHN
Vuj+yRlb0xTEFz+pxT6fS5n29zLLCG498G2ayf+s/o0X2vjzx66t
-----END CERTIFICATE-----
Generated at Sun Nov 26 21:22:28 2023 by rpki-client on console-ams.rpki-client.org