Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35362e302f32332d3234203d3e203432333636.roa
File: 3138352e3232392e35362e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: 8lwP9fGEUMeJK6KWd6WkndIkyJ5e/EJOVZOnt+1uNho=
Subject key identifier: 27:64:96:48:6F:98:14:64:50:5A:54:99:73:67:4E:06:29:41:38:1B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 09272970ED7B3365BDB8967CF2BEC07CC3D9AA1E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35362e302f32332d3234203d3e203432333636.roa
Signing time: Sun 07 May 2023 15:44:31 +0000
ROA not before: Sun 07 May 2023 15:39:31 +0000
ROA not after: Sun 05 May 2024 15:44:31 +0000
asID: 42366
IP address blocks: 185.229.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:27:29:70:ed:7b:33:65:bd:b8:96:7c:f2:be:c0:7c:c3:d9:aa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 7 15:39:31 2023 GMT
Not After : May 5 15:44:31 2024 GMT
Subject: CN=276496486F981464505A549973674E062941381B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:13:35:0b:7d:3d:6c:31:ce:c2:30:25:01:
d4:c6:09:e3:e7:07:35:f1:3f:77:28:d4:86:42:08:
62:68:9a:c6:f6:51:4e:67:33:8a:37:f3:7c:7c:47:
16:1b:15:08:63:e5:35:74:23:56:d5:c5:55:c1:cd:
5b:cf:1a:ab:f7:d9:37:fe:03:c9:66:b8:ba:7b:37:
4f:4a:36:9d:23:86:0f:7b:b6:19:5a:27:12:5b:14:
55:2b:90:0a:3e:6f:57:a6:49:16:e7:b3:28:b9:95:
e8:0f:a1:af:56:46:97:45:d8:03:90:d6:f0:a5:1c:
8b:71:fb:e0:cc:20:ee:28:98:84:12:c6:2d:71:5e:
09:29:73:99:e6:6c:bb:5f:c3:53:49:c7:ae:c0:67:
a8:ce:c4:23:42:30:70:71:41:e4:9a:b4:66:d7:56:
95:82:46:f3:71:36:f3:a7:73:e0:ab:8d:4d:b9:81:
d0:41:64:a6:a0:f4:c0:38:b8:fd:f2:fe:f0:d1:04:
9d:8d:e9:05:ef:b8:ee:82:1f:ce:01:74:92:d7:96:
6e:c4:d5:8e:68:62:ef:e2:48:9e:b1:7b:52:b4:d0:
2a:18:36:82:6f:a1:94:43:78:58:3d:d7:ce:82:ea:
67:68:66:28:e7:97:5c:bc:e0:1b:7f:c4:41:b8:9f:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:64:96:48:6F:98:14:64:50:5A:54:99:73:67:4E:06:29:41:38:1B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35362e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.56.0/23
Signature Algorithm: sha256WithRSAEncryption
14:57:eb:1c:0c:01:c5:46:2f:b8:09:2e:db:d4:60:4a:a1:2c:
21:ca:c0:67:7f:3e:98:83:7c:cf:44:9f:9c:3e:3d:00:aa:86:
ab:ac:ae:61:5d:14:02:0a:a7:d7:32:9f:5a:92:0b:1b:24:6d:
ce:a1:a0:23:82:f1:42:bd:3c:04:5e:67:d5:2d:09:63:a7:c3:
8c:3f:0f:63:b7:86:41:59:ef:b9:39:e3:cd:f1:1a:f7:14:18:
7c:3e:bf:3e:01:fa:2a:05:d5:59:8e:c6:fa:3b:a9:d3:09:bf:
dd:2c:7b:4c:b6:35:de:47:0b:55:63:ac:2a:0a:f8:3c:d1:a7:
15:53:6c:f0:31:5c:01:8d:12:1f:47:89:88:93:c9:58:2d:4b:
d9:19:8e:a9:43:73:4b:0e:45:e2:c5:10:11:33:19:fe:d3:ed:
3e:03:d2:63:8b:d4:0b:fd:70:1d:7f:44:63:a2:df:a8:e7:26:
8f:5c:d9:ef:32:4d:1e:b8:f9:cd:1f:1f:37:98:b0:9b:bd:51:
56:fa:ae:75:19:69:c9:5d:fa:52:0a:2d:ec:57:a7:9f:82:90:
0a:15:d1:1d:dd:0f:a7:33:84:18:13:3a:77:df:86:07:36:94:
de:7f:cc:7a:1e:32:ae:8c:12:06:87:01:fd:6f:47:ed:7e:5e:
84:c6:26:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 21:22:28 2023 by rpki-client on console-ams.rpki-client.org