Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32332d3234203d3e203432333636.roa
File: 39312e3230352e3130362e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: b0QOEW2Iec0hmknGPPEhNrWaldP9SIht20TXZzcc99E=
Subject key identifier: 97:F3:86:6C:8E:A1:3A:5B:CE:95:B2:F9:B2:05:8F:0C:BC:20:EA:5E
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4AF85DEAD7D163F19A96F97A3229A1793ED9D2D0
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32332d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:17:45 +0000
ROA not before: Mon 10 Apr 2023 08:12:45 +0000
ROA not after: Mon 08 Apr 2024 08:17:45 +0000
asID: 42366
IP address blocks: 91.205.106.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f8:5d:ea:d7:d1:63:f1:9a:96:f9:7a:32:29:a1:79:3e:d9:d2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Apr 10 08:12:45 2023 GMT
Not After : Apr 8 08:17:45 2024 GMT
Subject: CN=97F3866C8EA13A5BCE95B2F9B2058F0CBC20EA5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:7a:fb:7e:e4:a2:98:69:9f:59:48:86:a7:
3b:d3:b4:15:23:99:2f:6f:99:af:54:9a:2d:dd:a7:
24:cb:83:f9:e1:c0:42:62:f4:95:cb:b2:ea:ba:3b:
26:a3:4a:ee:e1:aa:6c:b4:09:3b:24:1f:de:58:f0:
17:d1:35:a2:83:67:40:d8:27:2b:45:48:ee:d6:ed:
ee:79:5d:cd:32:42:bd:d6:fe:76:fa:b3:63:c4:31:
05:d6:f1:dc:e2:be:4f:85:e6:be:3b:a5:52:7d:84:
21:be:4b:9c:e5:ec:6a:39:c8:bc:27:f9:9d:d4:24:
30:ca:1a:c6:2a:45:2e:6e:ed:93:e8:a1:6b:39:61:
e6:91:f7:1e:85:49:ca:ca:b9:d5:21:a8:53:0f:9c:
05:22:21:9b:ed:50:27:c2:c9:16:08:c0:15:a0:ce:
54:28:24:3b:17:cd:33:b1:bd:d0:57:52:25:db:8b:
5b:c4:ff:b9:0b:8e:af:d7:d6:60:02:9f:28:7d:48:
07:d7:18:11:a4:1d:27:20:f2:cb:54:df:ce:ab:8a:
ca:cd:6c:e5:a9:8a:67:68:50:eb:c0:10:29:46:c0:
00:82:c3:1f:3c:2f:b2:20:34:33:dc:c2:b0:22:d6:
f8:a5:97:32:6e:9b:d3:95:bc:ab:da:4b:0e:14:1c:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F3:86:6C:8E:A1:3A:5B:CE:95:B2:F9:B2:05:8F:0C:BC:20:EA:5E
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.106.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:a7:0c:e1:2e:fc:e0:46:f2:19:32:00:7a:e8:e7:c2:ff:12:
bb:72:38:63:7a:02:f1:d5:f6:03:ba:1c:72:5b:a9:52:b5:b2:
52:e2:65:51:be:ad:64:ef:80:15:83:67:82:a2:70:05:d1:67:
36:be:4e:05:df:59:f8:12:18:1e:cc:74:73:f7:cf:2a:4e:da:
7f:17:d8:46:80:ff:a8:4c:76:9d:05:db:6d:f6:a0:cc:eb:8c:
31:98:4f:e3:2a:03:c8:5d:c4:ce:14:5a:6b:44:40:01:ef:92:
08:33:b1:44:99:49:8f:c2:d1:2a:e9:89:a5:6d:dd:64:6b:e8:
75:27:9b:5c:2f:60:55:99:a9:9b:27:60:6d:74:cd:4b:f9:01:
59:d2:2d:57:bc:b2:cf:e1:e7:1c:28:86:87:b3:cb:52:35:f7:
07:b3:ef:ea:d5:e2:a2:ba:87:4e:8d:5d:82:d9:55:04:89:ac:
f9:dc:d5:9d:15:a3:a6:3e:67:2f:58:29:37:4a:11:ec:c6:35:
73:58:b9:46:dc:d9:61:51:15:61:b3:53:d2:3f:11:7f:d3:28:
13:58:ce:82:51:0a:84:78:85:16:3e:4e:37:de:34:65:f5:81:
e5:51:39:86:42:b4:7f:8e:67:4f:96:44:bc:72:bc:a2:ab:a0:
10:20:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org