Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3233322e302f32322d3234203d3e20323131333936.roa
File: 3139352e3137392e3233322e302f32322d3234203d3e20323131333936.roa (raw, json)
Hash identifier: NcxZ/gaudoBxjBUmE1KkO/VpbO0RlufbmUYdXiHc2Wk=
Subject key identifier: 5C:02:6A:73:8E:E7:E4:0A:97:F9:A2:2E:F9:67:F2:D8:7C:FC:87:32
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0B9CEB6243ECC74C0929D4105530D17647E995A5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3233322e302f32322d3234203d3e20323131333936.roa
Signing time: Wed 31 May 2023 12:37:19 +0000
ROA not before: Wed 31 May 2023 12:32:19 +0000
ROA not after: Wed 29 May 2024 12:37:19 +0000
asID: 211396
IP address blocks: 195.179.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:9c:eb:62:43:ec:c7:4c:09:29:d4:10:55:30:d1:76:47:e9:95:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 31 12:32:19 2023 GMT
Not After : May 29 12:37:19 2024 GMT
Subject: CN=5C026A738EE7E40A97F9A22EF967F2D87CFC8732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:ee:31:fb:19:9b:40:9c:d5:57:c2:1b:0f:
7d:dd:b3:0d:f0:f8:7e:99:97:78:0f:68:15:d6:c9:
3e:aa:9c:4e:10:cb:61:80:0c:24:47:b8:0b:e9:32:
71:0f:0b:15:7c:03:8c:db:e1:da:78:c4:99:9b:24:
d5:a8:c6:f9:b6:59:99:b7:cb:d7:41:3d:cc:47:6c:
13:9a:06:c4:68:37:9a:b2:d7:30:48:75:f7:7b:f0:
b9:08:48:b1:d0:2e:d1:80:0f:80:d8:e4:03:c7:52:
45:64:9f:f3:47:55:86:42:57:48:d2:9b:f9:05:be:
e7:95:07:e5:5b:e2:6a:c7:4c:c3:e8:07:c6:40:e2:
fa:43:94:e4:84:ab:92:d0:17:9b:82:bc:9d:3f:c1:
1f:cb:93:5d:45:2c:fb:dd:be:e9:e2:e4:61:00:73:
2f:0a:77:fe:5b:b3:a0:ac:c3:da:c0:39:de:b3:1b:
9c:d7:65:bf:c9:c6:17:9c:74:1b:c3:6e:a7:76:f6:
51:b1:28:56:b7:94:ac:53:4f:a5:5b:9f:92:68:8f:
0a:84:94:2a:0f:be:66:ec:16:1f:16:a6:ff:eb:ce:
ed:c7:e8:3f:80:17:84:6a:d5:69:2b:bc:dc:ff:fb:
5a:04:de:53:28:26:3b:18:5e:84:36:20:9e:cb:57:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:6A:73:8E:E7:E4:0A:97:F9:A2:2E:F9:67:F2:D8:7C:FC:87:32
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3233322e302f32322d3234203d3e20323131333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:9e:a0:68:e1:e3:7a:16:12:ec:7b:bd:dc:21:94:d7:e0:d9:
39:bd:1d:73:3b:b6:2e:18:c7:4c:1e:9b:d7:9e:57:35:d6:33:
8b:f0:cc:90:85:76:cc:94:35:b0:5e:e0:a1:0b:4c:fc:1d:c1:
de:cb:0e:d8:a9:f2:a2:d2:74:12:65:0b:94:b2:4e:88:ad:0b:
8a:d5:87:1a:a1:fa:ec:cd:83:d4:71:00:6b:3d:57:aa:4b:e0:
23:1b:17:12:02:99:8c:39:4d:d5:fb:6f:81:7f:19:9e:62:9a:
a9:d9:1e:e9:af:d8:f3:b6:b9:fc:98:82:6b:18:cf:a2:da:f4:
bb:18:ac:cd:e8:c2:ab:c3:de:54:65:c9:1d:61:ef:50:c9:a5:
81:2c:9e:5a:d6:dc:cb:be:b2:47:c5:f6:56:a1:88:7c:f6:f0:
f2:e9:66:85:3c:ce:fc:8e:b5:3e:16:86:e7:07:c1:d2:7d:4e:
05:f1:e8:b4:b1:26:fb:2e:ea:37:6a:7c:f1:71:59:b5:19:12:
67:77:ab:3f:dd:a5:60:89:6d:4d:d3:90:e3:ed:90:27:16:c2:
d6:25:de:2c:8c:df:9a:dd:0c:9c:43:a7:66:1b:28:0f:30:00:
5a:b0:8b:8e:79:71:5c:48:be:31:70:4b:a0:51:c4:39:9c:a9:
a6:5f:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org