Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e203433323630.roa
File: 3139342e3139352e39342e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: SxfjR8Z+6dpO3E726Rq31EHsmM6ngmHZQ7hPgRVhrKE=
Subject key identifier: AA:F7:4C:BC:55:11:FA:90:D2:40:05:48:20:A4:27:11:A8:E3:49:9A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1E1914A66AAA10EECE545F22B97F007B1C2FA8B6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e203433323630.roa
Signing time: Mon 15 May 2023 13:05:14 +0000
ROA not before: Mon 15 May 2023 13:00:14 +0000
ROA not after: Mon 13 May 2024 13:05:14 +0000
asID: 43260
IP address blocks: 194.195.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:19:14:a6:6a:aa:10:ee:ce:54:5f:22:b9:7f:00:7b:1c:2f:a8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 13:00:14 2023 GMT
Not After : May 13 13:05:14 2024 GMT
Subject: CN=AAF74CBC5511FA90D240054820A42711A8E3499A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:b5:4f:e2:28:0f:e3:78:f3:29:5a:81:41:
b1:8e:9e:2a:41:a8:4c:58:be:ae:74:04:04:16:fe:
8b:71:04:bb:35:01:ce:78:78:0c:5d:42:d3:5d:0c:
cf:f1:76:08:b7:c5:11:1a:2d:8d:48:e6:ea:f9:da:
1c:cc:20:3d:6b:6f:69:8e:aa:72:73:66:33:db:4c:
e8:cf:9e:30:f5:fa:16:1f:65:4c:5e:5d:dd:1a:66:
ae:e6:ca:77:e2:45:d9:2b:c4:ed:37:bb:d0:c6:45:
b7:c9:a5:ba:79:6b:0a:7b:22:61:6c:e8:ea:5f:71:
2e:a1:8a:1b:d3:69:74:af:0e:c9:f4:ea:30:ce:9f:
9f:2c:52:ed:c0:63:92:bf:0e:13:88:8f:c6:6e:c3:
fc:a4:34:e7:b9:50:11:50:ec:e0:b2:8d:8d:bc:dc:
6e:76:82:f3:1d:e6:ba:84:c8:c8:cc:f3:8b:97:94:
d7:62:77:b9:c6:e7:aa:1d:5c:3a:29:dd:14:be:88:
45:d0:30:b7:46:29:64:11:89:ec:20:b7:d2:bc:26:
cd:92:ec:5f:c5:61:20:5e:aa:4b:fc:39:d7:e1:c9:
c5:ba:85:d9:97:6e:b6:12:68:66:2f:3b:e7:21:4b:
6a:7e:1a:2b:3e:95:95:9e:c3:ca:a0:27:26:d2:cd:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F7:4C:BC:55:11:FA:90:D2:40:05:48:20:A4:27:11:A8:E3:49:9A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
00:74:ea:78:0b:8c:e9:c6:45:2e:94:3d:0c:3e:5d:52:06:bb:
a5:c1:23:8b:40:af:70:89:bf:39:89:72:f0:ac:30:7e:8a:1a:
1f:4e:39:da:08:aa:33:03:44:a9:f0:6f:cb:16:20:9a:dd:1c:
74:3b:18:37:c0:e2:f5:0a:ce:4f:42:ce:82:69:3f:d7:9c:bb:
64:f3:56:67:7e:f7:54:a0:64:a5:ac:38:cd:9f:35:76:1c:b7:
76:06:f4:2e:ae:be:d0:a9:3f:cb:07:31:30:08:9d:73:0e:7d:
43:5c:76:7f:25:c1:e1:d7:5b:e0:06:3c:de:a1:06:00:bf:21:
35:03:bf:33:df:0c:4b:17:52:e7:1e:4e:ca:c3:bb:b3:8b:13:
8c:8e:9d:3b:12:02:dc:19:40:24:a4:e7:99:3f:4e:45:3f:33:
08:0e:b1:fa:07:23:cb:50:de:4a:11:3d:28:12:ce:88:49:7a:
07:3e:39:2c:20:23:2c:c6:ff:9e:65:ca:26:ef:1d:46:e4:6e:
0f:7a:9e:0f:d8:d0:42:61:6a:bb:16:0d:2b:88:5d:40:28:62:
d2:ee:e6:20:e3:ee:19:9f:77:66:bc:80:5d:b6:de:c7:3b:f1:
06:21:a7:a2:ac:ef:d3:77:03:ec:ee:0c:d6:1c:bb:7c:37:cd:
17:3f:55:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org