Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3134362e31352e302f32342d3234203d3e2030.roa
File: 3139342e3134362e31352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: Rw8o3DNyUiYhmMLIPjjXEBbCZUHMxrZU7UvIsSgna0s=
Subject key identifier: E7:5A:31:31:F4:C9:39:CB:04:E0:1E:71:99:15:AF:E1:1E:1B:35:EB
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 76A3B54C700A278C3AD1FBF110379565EA189D11
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3134362e31352e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:05 +0000
ROA not before: Mon 27 Mar 2023 08:22:05 +0000
ROA not after: Mon 25 Mar 2024 08:27:05 +0000
asID: 0
IP address blocks: 194.146.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a3:b5:4c:70:0a:27:8c:3a:d1:fb:f1:10:37:95:65:ea:18:9d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 27 08:22:05 2023 GMT
Not After : Mar 25 08:27:05 2024 GMT
Subject: CN=E75A3131F4C939CB04E01E719915AFE11E1B35EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:0a:9e:b1:45:3f:e1:38:d7:b3:5b:d1:09:
c2:bb:0f:00:20:95:08:19:33:ca:6e:a5:d8:07:02:
22:6d:ad:2f:63:cf:22:67:54:b5:79:f1:82:7a:8c:
01:85:0e:d9:f3:35:c0:d6:2c:ce:be:08:f5:5f:15:
88:2d:c3:07:21:86:09:74:0c:56:05:7a:36:a0:ca:
c7:be:15:6d:66:b6:fb:e9:1f:22:e3:f8:e8:65:17:
11:a5:c2:10:7c:82:c1:4e:6f:12:b0:46:91:c6:f5:
b6:23:4e:6a:b0:24:3f:04:79:47:be:d2:76:78:65:
10:6d:b4:ee:50:35:f1:4b:f5:01:09:b2:0b:fe:0a:
d6:ad:bc:88:77:fc:8a:b0:fe:2a:a2:be:2e:3a:53:
c6:2f:dc:7b:33:18:2f:01:88:e6:18:43:66:f5:12:
b3:68:1f:cb:16:91:a2:56:f0:e1:c2:cc:61:58:d5:
d1:47:69:ab:2e:c6:8e:fc:41:73:c5:7b:fd:76:f4:
76:d4:38:b3:c8:e3:d8:e1:04:83:4a:9e:e9:89:a7:
ab:92:dd:fe:7c:00:ea:ea:6f:62:d4:8a:b3:f8:9f:
74:ed:d5:c4:e8:06:81:50:5f:f1:a7:d8:fa:5c:cd:
63:c7:70:a1:9f:c8:8a:af:b7:07:41:6e:3e:15:02:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5A:31:31:F4:C9:39:CB:04:E0:1E:71:99:15:AF:E1:1E:1B:35:EB
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3134362e31352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.15.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fd:5c:a5:9d:b4:f2:93:7a:b2:ea:fd:bf:69:d1:37:27:eb:
0b:20:c0:b7:45:02:1d:cc:bf:50:7c:c4:60:09:fb:2e:ee:43:
68:e5:47:5a:0a:2d:b3:ce:1a:9b:b9:69:e0:8a:db:63:c4:2a:
df:24:bd:70:97:52:b1:ed:51:f2:a0:2d:c1:f8:44:2f:6f:5f:
4e:58:c9:94:e1:33:1c:97:4c:27:52:a1:c1:11:3b:1b:a6:f3:
36:9f:fa:ba:71:f4:d6:3d:e0:d5:37:f8:38:3d:cc:c5:9f:6e:
ec:00:82:3f:be:bb:d7:91:cf:9c:6e:f1:f9:74:0f:85:be:fd:
e2:0e:64:10:3b:f8:8d:d6:2a:3e:61:76:30:b3:20:19:5d:67:
76:9c:f1:e8:5f:3c:55:d1:46:2f:6d:c9:7b:0a:5a:c1:3e:cd:
00:55:8e:94:f0:60:9b:03:f5:ab:1a:3e:b6:a4:f0:1b:60:52:
a2:03:7d:b9:4b:a7:c3:28:e2:b0:d2:b6:ca:bd:b6:08:49:d8:
0a:2f:f0:b6:26:10:32:89:85:6d:8d:dd:12:6c:64:87:d4:2d:
5c:b0:a6:f3:19:56:f9:df:f4:a9:95:68:26:6d:4e:16:56:9e:
f8:f5:95:af:96:75:d0:61:3a:57:7b:0f:69:6a:40:23:38:18:
fc:a3:67:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org