Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20383334.roa
File: 352e3138322e33342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ocdeM3Oo/09TrCNu3XKS9+51Xyc2MIbnPFe54ofv7+A=
Subject key identifier: BC:62:4B:79:85:BF:EA:B0:39:4C:84:E4:44:FE:D3:9A:F1:F5:A4:78
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 498DF26D24B7957A0E79D9A19DBEA25B23689019
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20383334.roa
Signing time: Mon 25 Sep 2023 12:48:11 +0000
ROA not before: Mon 25 Sep 2023 12:43:11 +0000
ROA not after: Mon 23 Sep 2024 12:48:11 +0000
asID: 834
IP address blocks: 5.182.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8d:f2:6d:24:b7:95:7a:0e:79:d9:a1:9d:be:a2:5b:23:68:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 25 12:43:11 2023 GMT
Not After : Sep 23 12:48:11 2024 GMT
Subject: CN=BC624B7985BFEAB0394C84E444FED39AF1F5A478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:a9:58:94:4d:13:db:07:dd:91:35:ae:4a:
47:6d:7b:4d:e6:49:aa:74:c4:88:63:30:c1:e7:69:
02:46:70:ac:b3:24:a5:30:ab:f7:5a:23:eb:10:09:
9a:91:3a:fc:cf:46:9a:46:51:80:bd:5a:df:ea:0e:
4a:ac:2d:e4:05:ca:79:c4:a9:b0:df:18:c1:70:c3:
14:bc:98:3a:a6:11:ad:16:91:17:52:2f:78:33:d0:
30:2d:45:66:50:bf:91:ef:72:96:82:23:3e:ed:d2:
0f:31:c1:39:99:44:58:ca:e0:ef:80:8c:55:e9:fd:
29:00:db:d0:f0:46:30:99:41:b4:a1:a4:1a:d3:dc:
a9:42:65:6a:09:03:93:ab:c3:15:31:01:44:e2:19:
c8:b8:f2:7b:1e:c1:0b:9b:88:ff:4b:ac:bf:27:d8:
38:73:47:38:36:2c:cd:25:b6:6f:4d:26:d4:44:af:
ab:33:4d:1d:3b:03:dd:42:da:56:06:40:9e:b7:e8:
d5:00:87:ee:9a:42:4d:31:87:cd:0b:81:ce:df:1c:
36:fc:d5:c0:54:11:23:62:4b:ab:2f:d6:b7:28:04:
7c:78:4e:b2:41:54:45:f0:d1:d6:da:47:a9:80:f2:
64:8f:3a:fc:b2:de:d0:84:66:10:5a:af:80:1f:2c:
41:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:4B:79:85:BF:EA:B0:39:4C:84:E4:44:FE:D3:9A:F1:F5:A4:78
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:75:ff:dd:ec:9d:cc:cc:af:da:d2:18:bb:cf:96:36:ba:fb:
a0:c8:d0:4d:2c:9b:75:ad:94:f7:60:de:63:d9:50:5e:12:e4:
3c:fb:a6:f3:97:78:bd:c8:18:23:2d:a2:02:6d:c0:d6:44:dd:
93:88:af:42:e1:c9:40:3c:74:bc:97:c3:31:ea:db:5a:21:5c:
f4:fa:68:15:1b:49:e4:b1:82:3a:28:1a:f7:1d:be:09:6a:89:
8b:ab:15:39:f4:97:0d:d3:c5:3c:6b:56:ed:5b:4c:11:a1:3b:
45:5f:4c:9d:b9:a9:c7:37:1a:17:fb:e6:37:d6:3e:07:49:d4:
d8:b9:6b:c0:b9:7d:b0:c2:d0:1c:2f:be:c7:ea:da:a1:64:3c:
0e:65:97:23:66:9d:42:36:ce:3f:b4:3f:8c:0e:df:20:f1:47:
27:f8:59:57:0f:d2:f6:9f:0c:3a:76:4e:f6:17:2d:93:97:01:
ad:cb:0c:12:13:6e:b8:a3:a6:25:c3:0c:d8:76:29:7c:27:32:
e6:68:41:76:d8:f8:c7:0b:04:79:cc:1a:84:e4:31:ff:d4:cf:
70:51:b8:ef:67:52:1d:43:90:7b:44:f9:ba:56:e3:40:23:c5:
e6:34:e5:b9:af:fa:6d:20:68:01:d5:cc:cd:f2:c1:05:6c:ba:
c4:fb:06:eb
-----BEGIN CERTIFICATE-----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Generated at Thu Dec 7 20:49:03 2023 by rpki-client on console-ams.rpki-client.org