Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3134362e31352e302f32342d3234203d3e203630303638.roa
File: 3139342e3134362e31352e302f32342d3234203d3e203630303638.roa (raw, json)
Hash identifier: dYyZXkjtHveUJqbgcSmFL04cpoNHvAAyjSqO5dyziwQ=
Subject key identifier: AF:43:14:39:77:08:45:4B:C8:0E:A7:18:9E:4D:BE:77:8A:FD:7E:80
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3455FC48CF5466D5A4D7E45476766B2BFDF2FF4B
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3134362e31352e302f32342d3234203d3e203630303638.roa
Signing time: Mon 01 May 2023 13:18:43 +0000
ROA not before: Mon 01 May 2023 13:13:43 +0000
ROA not after: Mon 29 Apr 2024 13:18:43 +0000
asID: 60068
IP address blocks: 194.146.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:55:fc:48:cf:54:66:d5:a4:d7:e4:54:76:76:6b:2b:fd:f2:ff:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 1 13:13:43 2023 GMT
Not After : Apr 29 13:18:43 2024 GMT
Subject: CN=AF4314397708454BC80EA7189E4DBE778AFD7E80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:f8:ac:a1:b7:a1:b0:fe:2e:d6:4d:74:7e:
f5:38:1e:ba:cc:b7:05:df:25:57:30:c1:71:c0:60:
07:24:84:dd:6a:e4:9d:33:6d:02:9d:eb:51:ac:99:
df:b5:8c:1c:16:e3:06:39:00:14:e5:41:85:af:e3:
b6:ae:e8:64:74:8e:31:e6:bb:d0:df:5d:99:f5:b1:
bd:ed:f3:38:27:5d:8d:10:5d:cc:b4:a5:42:07:3a:
8e:54:38:6e:9b:a7:c0:c0:dc:7b:f7:52:a0:80:24:
92:c9:dc:f8:ed:ae:d6:70:36:c4:6f:f7:82:73:33:
57:23:98:7f:6a:cb:40:1a:ad:c8:d3:f2:b3:e7:8c:
6b:cc:ee:f1:27:d4:7e:c2:41:a2:cf:99:f8:f2:a6:
a5:bd:ea:ff:79:6d:94:d9:4e:12:57:2c:5b:49:91:
ac:86:56:2a:05:f6:a2:3d:95:c1:9f:cd:e6:f0:0f:
1f:8a:fd:bf:9e:32:34:4d:a1:13:fb:8e:5a:f7:5b:
55:6b:7c:45:e4:87:ab:b6:3f:cc:80:3f:b9:e7:3b:
03:c9:9a:cc:d9:7c:cf:5c:da:49:56:4e:03:9b:72:
e8:ae:ca:f0:30:06:45:10:cf:99:a7:70:a0:b1:2c:
29:18:92:75:fb:62:1b:b1:38:22:6b:90:88:70:3a:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:43:14:39:77:08:45:4B:C8:0E:A7:18:9E:4D:BE:77:8A:FD:7E:80
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3134362e31352e302f32342d3234203d3e203630303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.15.0/24
Signature Algorithm: sha256WithRSAEncryption
16:4d:43:ba:bf:1f:c7:89:14:89:0d:ce:88:13:aa:a4:7a:95:
bb:9c:cd:3b:40:7b:7b:0e:7b:c0:7a:18:57:58:6c:48:91:f0:
54:a8:0f:bf:bd:f6:ab:f6:96:82:e4:6f:7a:b4:13:89:1a:06:
bb:c2:d7:67:e5:b0:66:70:d3:ce:aa:3b:a3:75:10:5c:29:d1:
f1:46:1c:cf:b9:b9:c9:41:da:9b:a0:e0:cd:66:7d:55:54:39:
c4:a8:85:f7:53:1d:92:c7:cc:e2:a1:29:f0:a3:07:e2:8c:35:
22:ed:07:1d:53:f5:a1:63:47:7e:da:8a:d0:4c:63:92:00:a3:
f5:4a:a5:90:0b:26:92:f1:31:be:88:d6:db:ac:dd:ab:a8:b4:
bf:3b:2e:68:f3:df:8c:59:56:10:d4:b8:bb:7f:f9:93:38:8d:
bb:4a:c5:31:ea:73:0c:89:9c:c1:87:07:0d:a1:44:42:d6:80:
f1:51:36:2d:05:a0:ae:4f:90:d5:a6:c5:6f:16:1b:e4:93:d8:
96:91:ca:ad:6e:72:7d:08:6f:93:ee:02:4f:43:f6:f4:23:12:
20:e2:37:44:e5:55:a4:20:df:29:a6:1e:a1:9b:30:c2:5d:42:
57:83:19:cf:27:b1:b1:b7:96:46:ba:92:9a:9a:b4:b0:7b:fa:
e5:2f:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org