Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32342d3234203d3e203630303638.roa
File: 39312e3230352e3130362e302f32342d3234203d3e203630303638.roa (raw, json)
Hash identifier: JiRVIXwEDmFiyHpJ2ovIE+GXLk0qBV8amr0R/3bXflI=
Subject key identifier: B3:41:DD:98:0C:A8:FE:3D:8B:E2:D3:65:C6:68:24:07:A3:ED:0E:00
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 227C3507C8BEFA1B8188D0C2752ADB0EE17176A4
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32342d3234203d3e203630303638.roa
Signing time: Mon 01 May 2023 13:18:19 +0000
ROA not before: Mon 01 May 2023 13:13:19 +0000
ROA not after: Mon 29 Apr 2024 13:18:19 +0000
asID: 60068
IP address blocks: 91.205.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7c:35:07:c8:be:fa:1b:81:88:d0:c2:75:2a:db:0e:e1:71:76:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 1 13:13:19 2023 GMT
Not After : Apr 29 13:18:19 2024 GMT
Subject: CN=B341DD980CA8FE3D8BE2D365C6682407A3ED0E00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:2d:58:10:1d:f6:a5:df:0d:da:2a:e6:81:
f1:7f:3a:a4:cb:c3:1b:ab:2c:c4:91:a0:e2:f7:0a:
bc:8d:58:75:b7:88:91:3a:9d:64:45:71:02:dd:e8:
37:12:05:96:42:ec:3a:10:5a:88:50:a8:59:ca:fa:
dd:5b:0e:f6:ea:58:ae:f8:61:04:2e:ca:b3:02:29:
59:d6:fb:c9:9a:ce:bc:3c:29:a6:e2:6f:66:7b:5d:
c8:bb:22:5e:70:eb:73:da:37:eb:f4:14:cf:bd:5f:
f8:83:09:44:c5:1c:d4:70:c4:d3:84:73:0f:91:37:
7b:37:0b:83:d0:4a:83:fe:24:58:3e:50:2f:7a:00:
69:0d:ee:c7:03:29:83:8e:fa:29:54:7a:1a:22:21:
47:ce:9f:04:3b:82:67:9e:81:10:a1:c2:63:83:7d:
8b:da:77:92:c9:86:fb:fb:48:47:ff:99:10:97:80:
ea:5f:73:16:a7:59:e0:2b:0d:00:ac:1f:4d:06:ca:
ee:4e:1e:0c:fb:a5:54:60:12:79:a6:0c:78:8b:25:
a1:aa:c5:86:00:ba:10:90:42:8b:e1:44:e2:96:88:
88:59:c3:0a:76:fb:94:1f:82:62:7a:47:d9:03:ea:
03:13:96:c9:05:d2:02:31:77:43:46:fa:28:5e:bd:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:DD:98:0C:A8:FE:3D:8B:E2:D3:65:C6:68:24:07:A3:ED:0E:00
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32342d3234203d3e203630303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a4:e1:22:bc:bd:b3:c8:58:ad:fc:4f:61:52:d4:f7:d8:66:
23:29:00:98:66:c2:8c:f8:43:00:6d:47:22:33:2f:56:4e:b2:
78:e6:5d:c1:3a:1f:63:f8:94:4b:47:93:03:70:38:11:b6:84:
aa:05:d4:ad:97:25:fa:13:e9:69:fe:ec:6f:2c:50:7a:81:14:
96:0c:82:68:25:31:0e:49:6d:67:90:2c:5c:08:85:52:85:33:
6b:18:d5:1e:f2:85:4a:73:86:c3:31:e6:2b:c5:3f:7a:44:3b:
5b:21:96:86:30:48:12:28:17:b0:7a:61:79:77:8d:7f:42:b5:
83:30:2d:92:07:0c:df:4e:95:c9:e2:59:c0:21:1e:90:1a:d7:
ca:18:67:fe:f5:af:07:8e:c0:11:c6:87:4e:9f:47:0a:9f:b4:
e0:69:52:3e:2e:08:30:b1:83:ab:cf:52:f6:70:8e:b5:29:ea:
34:c2:da:6d:b0:50:03:a8:e0:a2:b8:23:65:46:9d:eb:92:af:
9f:37:17:c7:7c:e5:fc:fd:d3:f5:8c:b0:03:ad:df:af:fa:f2:
f1:db:c2:08:73:9c:da:cd:c4:69:c7:c9:2f:c3:f8:62:59:14:
9d:d8:b4:92:43:50:fb:32:d2:a7:f2:78:22:2f:0f:a0:89:f3:
45:f4:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org