Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20323034383433.roa
File: 3139342e3139352e39342e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: y0ARhkn/ZqEHeDGJ3eLyRQN1xD1vfVG1xJ1eFU0iqxw=
Subject key identifier: 55:F1:83:9E:67:4F:99:34:21:6F:07:C8:EC:76:C4:06:76:FE:A7:C0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62270991C08D8B9287DCE945C16F9E63F818A06A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20323034383433.roa
Signing time: Sun 02 Jul 2023 06:44:54 +0000
ROA not before: Sun 02 Jul 2023 06:39:54 +0000
ROA not after: Sun 30 Jun 2024 06:44:54 +0000
asID: 204843
IP address blocks: 194.195.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:27:09:91:c0:8d:8b:92:87:dc:e9:45:c1:6f:9e:63:f8:18:a0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 2 06:39:54 2023 GMT
Not After : Jun 30 06:44:54 2024 GMT
Subject: CN=55F1839E674F9934216F07C8EC76C40676FEA7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:52:46:ba:40:a1:d1:a7:80:98:93:1c:dd:
83:ce:2e:f3:56:e6:0f:8f:2d:5a:9e:f2:4b:35:ab:
d2:0c:5f:35:c8:51:19:c4:54:6d:99:76:a3:4b:4f:
49:4e:85:f3:4d:bb:d2:f3:85:7d:88:bc:9b:5f:cd:
3e:1a:92:8d:7d:40:a0:8e:06:ea:19:f8:1f:db:34:
05:a9:75:ac:74:13:7d:d3:e4:a7:9a:d3:f1:56:4c:
e0:e0:cd:97:e4:88:2d:60:e0:e6:5d:6e:92:da:26:
4e:9e:fc:14:8c:01:0c:0c:99:5c:a4:63:20:38:c5:
a5:74:99:e5:84:95:59:22:17:5f:02:9d:fc:ed:09:
c6:da:da:53:3e:ab:f8:57:4f:93:7d:db:29:72:33:
a3:13:c2:75:03:bc:71:84:7d:d3:65:7e:ff:cd:1e:
8e:9c:77:71:94:7e:d2:f1:29:b9:38:9f:df:54:5e:
d6:ae:c5:77:c0:ea:d9:35:fb:10:ae:fb:a4:db:cd:
d2:64:51:94:ab:e1:5e:7c:8b:f3:08:fe:df:c7:fb:
a0:a7:4e:f1:5b:52:ac:12:e2:e0:16:1d:8e:9e:73:
03:8f:37:1d:19:31:05:ca:3a:2f:e8:3c:8b:85:1c:
fd:9f:fe:7a:d7:05:a7:1a:3f:4e:77:63:52:fd:09:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:83:9E:67:4F:99:34:21:6F:07:C8:EC:76:C4:06:76:FE:A7:C0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f8:9a:f5:78:02:d1:80:ee:39:cd:43:bd:5c:98:30:a2:86:
c8:cf:f2:19:bd:27:b1:db:99:e2:39:09:a5:74:7e:d1:66:21:
0d:f0:fb:22:ea:23:c6:9c:33:b5:64:3b:5f:d1:d4:d6:98:04:
94:3e:a3:db:da:da:f2:ba:d7:f6:17:8f:49:fe:0f:27:c7:b7:
c3:03:79:81:4d:d2:19:e3:a1:c9:43:04:6f:c8:9f:39:8b:fe:
52:82:cd:96:e9:c1:6f:31:45:11:6f:a0:0d:74:d4:3f:49:36:
53:5a:6a:90:ae:71:41:61:9a:89:1c:1e:47:cd:c4:b8:a4:9a:
a8:73:fd:bb:99:0d:fb:e8:99:5f:6f:c9:62:a7:a2:76:67:bf:
25:e8:4f:19:7e:5e:92:63:b5:ac:89:e8:b7:e1:ca:35:9e:30:
fe:15:c8:7d:d4:a4:cf:5e:53:5a:b3:54:9e:22:a4:f5:2c:b2:
21:14:55:90:e2:b6:6e:10:dc:09:d3:84:2c:ab:90:bb:d8:7c:
7a:d4:f4:cb:ff:42:1e:18:15:34:f2:3b:85:b7:d2:24:f6:61:
ff:bb:28:b4:01:9d:18:8c:8e:d9:72:b3:de:74:e2:48:e5:0b:
2f:43:b8:62:d7:83:e1:8d:82:9c:39:7a:1f:93:20:99:77:81:
23:87:e5:15
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 2 06:56:02 2023 by rpki-client on console-fra.rpki-client.org