Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131392e302f32342d3234203d3e2030.roa
File: 3138352e3137372e3131392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 5vpj+KY5pjV+Yo7gecqThpB3JmGdJJJwxa3Evk7Ri3M=
Subject key identifier: 52:98:19:BF:1E:64:EC:4D:6C:6F:9E:0C:C2:2E:59:D6:FD:1A:45:1D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1B2CF33BC402B99079E7592EDC641CF72D6A32E2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131392e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:49 +0000
ROA not before: Mon 27 Mar 2023 08:23:49 +0000
ROA not after: Mon 25 Mar 2024 08:28:49 +0000
asID: 0
IP address blocks: 185.177.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2c:f3:3b:c4:02:b9:90:79:e7:59:2e:dc:64:1c:f7:2d:6a:32:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:49 2023 GMT
Not After : Mar 25 08:28:49 2024 GMT
Subject: CN=529819BF1E64EC4D6C6F9E0CC22E59D6FD1A451D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:31:85:cc:86:cf:d5:60:aa:a0:54:b8:28:
05:ff:86:08:66:cd:69:53:8f:0a:52:0f:26:f2:b5:
d1:2f:03:0e:fb:88:e1:bf:a6:9b:a6:ae:77:8a:12:
84:d9:c5:42:80:a3:a2:04:03:4e:55:27:d5:68:f2:
a4:b3:9c:e7:12:16:da:29:87:70:86:d4:36:73:d0:
a9:98:58:75:7f:55:b7:77:21:2b:bd:a0:6e:89:d2:
9c:d8:b1:15:45:ce:ad:4c:3c:8b:0d:ee:8f:be:69:
ce:c2:3a:f9:0e:0c:6b:a4:1f:2e:cb:34:2f:24:f5:
1e:dc:34:f6:81:bc:59:a7:5b:de:21:31:89:2d:7d:
ae:97:70:30:af:89:f6:a8:1f:e8:36:cc:0d:e2:08:
29:ee:e2:d9:97:91:09:71:ac:53:28:f7:0c:a3:01:
63:51:d0:2e:c2:e4:bd:74:0f:7d:ca:5e:74:55:33:
1c:b3:79:34:c1:f5:5e:43:df:67:58:4c:d7:b2:35:
6b:ca:93:38:5f:66:2c:a6:0e:61:ef:c9:5a:65:5d:
40:cf:e5:9f:6f:66:4e:e9:f9:58:a7:33:0a:72:01:
6e:78:aa:de:94:78:a1:19:9c:1f:48:1c:b5:99:db:
89:e5:e8:fc:5f:e1:d0:69:e3:50:40:c4:f1:c4:4a:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:19:BF:1E:64:EC:4D:6C:6F:9E:0C:C2:2E:59:D6:FD:1A:45:1D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131392e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c6:52:60:ab:61:68:12:cd:a4:ba:ce:13:8c:fa:5c:e5:94:
37:89:0c:ca:7e:53:fb:ab:3f:d9:05:47:6d:8e:79:93:58:f9:
f4:c0:41:a7:f8:85:ad:07:8d:9f:83:14:e4:8c:49:50:09:f9:
2a:6d:fa:ab:f2:fa:2c:e6:d1:f0:74:53:30:be:27:d4:98:c0:
27:35:ca:5f:8e:65:dd:c9:70:cc:f7:41:03:b7:9f:38:f5:0a:
34:9c:c6:99:af:74:5e:d1:3c:fb:5b:31:4b:e3:c2:38:67:ed:
93:26:2d:fc:d3:b3:8e:ae:fd:b4:43:a0:14:db:16:b1:4b:df:
74:20:b6:59:8c:78:e8:40:0e:2e:8a:fb:77:1b:fb:8f:4e:cf:
c0:5f:99:4b:bd:b3:4c:b9:23:42:ea:53:9d:d5:ff:74:84:9b:
5f:51:0b:ca:18:09:f7:4f:2e:b4:24:04:d0:bb:98:d5:32:7b:
88:be:0c:3f:aa:e3:36:75:d3:ad:ce:fa:cc:f0:75:f4:74:3c:
cd:e6:6d:15:30:ed:29:6c:ab:1d:51:4e:51:2f:91:20:8d:88:
39:30:16:99:93:0a:a6:d7:26:53:f7:83:26:45:4a:e1:81:01:
65:03:57:79:33:c6:ab:08:51:00:32:16:ea:4d:a4:0d:d8:25:
d6:2e:01:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org