Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323132303237.roa
File: 352e3138322e33342e302f32342d3234203d3e20323132303237.roa (raw, json)
Hash identifier: 9PEaGXDbWtjlqc+RJ0+btiJuQia3dsoSpOklEKpwQKk=
Subject key identifier: DF:8C:C7:86:B6:20:53:8B:DA:4E:C5:F7:37:E9:78:90:45:93:7C:46
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 56B3B3881EA116E05C56B99DC4A680D85270E065
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323132303237.roa
Signing time: Tue 25 Jul 2023 17:37:00 +0000
ROA not before: Tue 25 Jul 2023 17:32:00 +0000
ROA not after: Tue 23 Jul 2024 17:37:00 +0000
asID: 212027
IP address blocks: 5.182.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b3:b3:88:1e:a1:16:e0:5c:56:b9:9d:c4:a6:80:d8:52:70:e0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jul 25 17:32:00 2023 GMT
Not After : Jul 23 17:37:00 2024 GMT
Subject: CN=DF8CC786B620538BDA4EC5F737E9789045937C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:93:46:a9:bb:7e:fd:08:76:c8:fe:a2:26:
4e:c9:59:77:93:0d:ce:70:d4:67:44:55:35:f1:54:
36:93:1e:58:c4:60:09:4e:81:c9:aa:ff:31:02:8d:
bb:e4:18:a8:d7:64:cc:f4:26:06:99:de:75:17:b8:
5e:83:d6:58:aa:4e:68:db:04:65:ce:53:d0:33:32:
72:43:90:25:6e:fc:be:4a:a7:48:f3:3d:48:d7:b3:
01:23:9c:ae:6c:b0:d1:83:35:2a:3a:06:01:03:44:
f9:83:39:ad:22:2d:63:b3:48:cf:ee:02:82:36:12:
55:e4:85:cf:b3:4e:53:6a:13:cb:c3:21:10:d6:3a:
79:50:40:ac:2d:f2:2f:ba:f7:b7:af:a4:4e:88:de:
97:d7:21:65:58:e7:56:63:27:3b:07:a1:84:bf:4f:
2e:76:30:3f:75:97:92:7b:23:93:ce:0e:47:9a:f5:
d1:87:b6:9d:eb:fc:ad:7f:e1:32:7a:34:40:ba:38:
bd:a0:d5:d7:ab:bd:9d:48:d1:8d:c5:11:df:b8:88:
e9:9e:ce:6b:0c:10:63:67:53:12:3c:7a:95:d0:0d:
ba:16:a1:2f:a4:d5:1b:ba:42:a9:5b:bc:47:a3:00:
f6:b8:bd:be:88:54:0b:e9:b4:85:09:d7:c3:69:be:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8C:C7:86:B6:20:53:8B:DA:4E:C5:F7:37:E9:78:90:45:93:7C:46
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323132303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.34.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e4:1f:35:d8:a3:c8:ae:72:28:c7:8a:0d:e8:ce:90:f4:95:
84:0a:1a:bf:82:48:47:52:f9:85:59:9b:5b:33:c6:ce:7d:b9:
c5:a8:6c:26:19:19:75:4e:da:a2:bf:3e:10:7e:f9:ea:79:e3:
3a:27:15:12:36:1d:be:d6:f9:3e:7a:da:15:ff:2b:54:7a:c0:
cb:02:43:68:3d:b2:f2:b0:d2:53:29:f9:97:77:41:13:59:44:
57:d8:f2:5a:b7:d0:80:71:5b:04:80:ff:ac:07:50:49:f3:cf:
52:18:ea:f5:0f:15:e1:15:50:59:da:e7:eb:2f:9d:13:2c:a6:
d5:db:1b:53:d1:bf:98:d0:3c:8b:38:c7:50:bd:fd:13:8f:db:
b9:47:5c:51:42:9a:1d:ce:10:7d:bd:18:2b:50:6f:a6:8a:63:
6a:76:b9:b2:13:f0:40:49:ee:f1:9f:37:f6:66:c9:88:be:ce:
b5:e1:35:cf:f7:56:ad:96:56:08:c3:8e:70:fc:24:6b:33:d3:
62:f9:45:5c:cc:17:fd:4d:fa:18:f2:f6:90:38:50:66:91:a1:
56:58:c1:6f:15:72:13:89:bc:50:67:67:29:e5:31:d6:90:37:
f9:57:e4:10:51:c2:f3:7a:1e:35:2f:4b:2c:82:0f:9e:10:01:
f0:b2:4b:92
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 25 13:32:24 2023 by rpki-client on console-fra.rpki-client.org