Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e37302e302f32342d3234203d3e203630303638.roa
File: 3139332e34332e37302e302f32342d3234203d3e203630303638.roa (raw, json)
Hash identifier: 5KuvAhyOpCW7eLM4jLXMFnaOqDSrBAE+jcRHLBgRptA=
Subject key identifier: 44:EE:28:FE:37:B4:D1:16:E5:3C:C7:87:A6:C2:F7:29:DB:87:B2:69
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3901060850F43AED51B642999F187A8D907A8CEB
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e37302e302f32342d3234203d3e203630303638.roa
Signing time: Mon 01 May 2023 13:18:37 +0000
ROA not before: Mon 01 May 2023 13:13:37 +0000
ROA not after: Mon 29 Apr 2024 13:18:37 +0000
asID: 60068
IP address blocks: 193.43.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:01:06:08:50:f4:3a:ed:51:b6:42:99:9f:18:7a:8d:90:7a:8c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 1 13:13:37 2023 GMT
Not After : Apr 29 13:18:37 2024 GMT
Subject: CN=44EE28FE37B4D116E53CC787A6C2F729DB87B269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3b:3e:ab:1c:f7:38:aa:9a:2c:47:fe:3c:ea:
8d:08:8a:4d:6d:0a:02:6d:90:37:95:34:61:c0:81:
f3:1e:3e:50:a4:01:c6:ce:9f:03:2b:2c:d3:91:9b:
bc:dc:75:64:83:8e:96:57:6d:79:76:43:3f:81:4d:
b2:63:28:3b:b0:1c:66:23:08:bf:23:51:31:9c:ef:
d2:15:66:3c:41:20:05:a7:67:cf:4d:c4:ee:73:de:
08:c3:12:ee:f1:62:ac:52:73:1d:a6:30:bc:4d:8a:
17:fc:4d:ff:75:15:9a:eb:96:5a:c6:32:f5:63:a9:
c4:15:ef:97:86:f2:4c:2f:40:0b:58:0e:0f:b6:63:
59:59:ff:50:9c:79:e0:32:e9:d7:e2:ee:33:c9:9c:
fd:5f:da:74:0a:22:10:5d:d9:b6:21:81:68:ec:63:
79:06:c5:b3:10:a0:28:2e:ab:94:e5:0e:70:c1:01:
b6:ae:48:43:a4:33:1a:0f:2c:26:bb:97:f3:77:78:
ca:57:34:33:5c:14:16:30:e0:0f:8b:1f:7b:0b:fd:
18:a8:ec:21:68:13:8b:e9:01:b0:3c:7d:f8:36:46:
26:d0:e2:16:60:30:df:8f:5c:4a:cc:0c:ea:aa:9a:
d8:5d:79:bf:ae:c4:f8:e5:64:92:08:a9:f6:36:d4:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EE:28:FE:37:B4:D1:16:E5:3C:C7:87:A6:C2:F7:29:DB:87:B2:69
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e37302e302f32342d3234203d3e203630303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:4e:45:50:1b:ce:73:bd:a9:3b:ed:ab:72:3d:30:98:4e:68:
e4:be:79:78:36:79:ea:8f:29:a4:6f:53:63:17:cf:30:3a:7e:
97:64:cc:94:f2:fc:3c:34:3d:87:7e:62:48:1f:bd:88:87:b7:
fc:3c:51:36:ea:87:67:38:6f:ab:9c:8e:7c:88:8c:ed:a3:f3:
56:e1:b6:43:69:c8:01:3a:f4:28:0f:80:e2:91:2d:25:03:ab:
53:3f:76:d2:8f:7b:3d:6f:54:4a:a6:01:51:66:fb:2c:25:04:
04:ef:d4:9a:7a:51:21:7e:d2:c7:1f:58:19:8a:d0:15:a8:79:
12:0e:87:8d:43:01:e2:01:9d:99:30:e3:a3:d2:32:d4:93:0e:
be:7a:d3:72:e8:90:dd:f0:f3:dd:1b:af:91:90:ba:b9:cd:87:
7b:2c:55:6d:9d:21:59:07:c8:0c:52:ba:bf:9e:22:cf:bd:5e:
45:54:61:b7:07:d4:c8:04:9e:ac:a7:5f:70:55:fb:da:68:f4:
bd:42:31:26:77:ed:4c:f6:73:4b:1f:63:88:e0:d0:65:b8:ec:
39:26:81:0e:a3:97:04:49:fe:74:00:ee:cb:e5:17:2b:d9:20:
20:a8:bb:aa:c7:db:03:a2:75:de:51:1e:66:4a:f2:7e:2d:3e:
ef:52:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org