Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323132363639.roa
File: 352e3138322e33342e302f32342d3234203d3e20323132363639.roa (raw, json)
Hash identifier: csygPVDzmBkP43VpqdaENEUwQnILXgAHN4+liuKqSAI=
Subject key identifier: F4:4A:D6:90:3C:98:53:3B:7A:B5:77:D3:70:04:38:13:53:16:FF:BA
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2E292A2D913908A0E52FA627E6F69F857AA89C3E
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323132363639.roa
Signing time: Mon 27 Mar 2023 08:27:06 +0000
ROA not before: Mon 27 Mar 2023 08:22:06 +0000
ROA not after: Mon 25 Mar 2024 08:27:06 +0000
asID: 212669
IP address blocks: 5.182.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:29:2a:2d:91:39:08:a0:e5:2f:a6:27:e6:f6:9f:85:7a:a8:9c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 27 08:22:06 2023 GMT
Not After : Mar 25 08:27:06 2024 GMT
Subject: CN=F44AD6903C98533B7AB577D3700438135316FFBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:af:cb:b9:4e:90:90:ac:d8:d8:5b:dc:a0:
18:83:93:68:8b:c6:11:67:30:eb:73:d4:ed:30:09:
5e:6f:ca:70:dc:b9:94:55:0a:73:40:da:a8:51:d0:
d8:08:0c:c2:ac:a1:68:76:a4:06:a5:f6:fc:ba:f0:
26:e8:72:27:f0:a8:63:a1:ab:cb:08:50:a9:f0:1f:
2e:9e:84:ff:17:40:1c:ca:6c:0c:f2:f8:bf:d5:93:
e0:77:45:e9:db:c1:43:16:05:bb:2b:13:49:8f:b4:
19:9e:73:6e:57:ca:97:48:26:33:6d:15:3a:04:dc:
80:a0:29:59:d3:6b:ce:56:2b:a7:55:15:6f:0c:1d:
dc:53:66:82:3e:d2:cc:f0:5e:07:b1:ca:e5:9e:16:
73:1f:da:3f:2e:a9:27:aa:c1:1c:e7:31:05:c4:9f:
c5:48:5a:8d:59:be:6e:a0:aa:c3:fe:3b:c5:43:74:
f8:1c:e3:c8:28:72:af:b8:69:3d:b5:0c:19:95:bc:
10:0d:0c:94:ad:12:6b:32:72:74:85:f3:53:14:52:
7e:3e:65:3b:ca:42:bc:d2:cb:3f:f7:ca:15:b7:dc:
c1:89:f8:e3:22:5e:08:0e:3f:43:12:ce:d0:68:4b:
99:71:6d:bc:61:95:a9:d1:50:f3:03:db:4a:51:41:
d0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4A:D6:90:3C:98:53:3B:7A:B5:77:D3:70:04:38:13:53:16:FF:BA
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323132363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.34.0/24
Signature Algorithm: sha256WithRSAEncryption
89:29:6c:fc:10:90:b1:e4:4b:1a:1d:94:11:6e:f0:9a:15:4c:
db:81:a6:d5:08:31:2b:38:0e:65:6c:7e:82:65:0a:9e:c9:b7:
75:6a:bc:5b:17:ee:02:c4:69:af:29:5b:47:7b:0f:70:db:c3:
86:a9:c7:d7:70:ea:49:de:93:45:f2:dd:49:ff:c6:42:71:a8:
1c:77:cf:ee:a0:73:f8:d5:5e:c1:96:6d:a2:f8:6a:b7:1d:fd:
16:04:5d:80:dd:45:a3:ad:78:eb:f0:90:08:79:d3:aa:9b:f0:
6e:52:88:f3:7b:1a:b0:4e:c0:d5:2a:41:85:1c:df:27:08:20:
11:4c:21:22:6b:90:66:4b:47:8f:8a:60:ae:37:3e:97:b8:fe:
f6:34:b5:63:8c:4f:61:e6:d6:ad:91:4d:0d:f1:f1:47:10:ab:
1f:89:6c:91:84:44:c1:08:8f:ef:54:f7:92:75:d0:27:ed:09:
63:43:60:0c:61:46:e0:09:bf:c1:70:21:1d:6c:1e:01:b7:4f:
21:fd:17:b5:ed:38:e0:13:34:5d:40:57:2b:9d:46:7b:7c:17:
9a:33:55:9b:76:d2:20:a7:9c:9c:00:1e:1f:09:7c:4d:ad:19:
da:d1:82:a3:57:73:81:4f:03:6c:7e:0a:d0:4f:d9:d5:41:8a:
29:cc:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org