Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e203630303638.roa
File: 39312e3230352e3130372e302f32342d3234203d3e203630303638.roa (raw, json)
Hash identifier: h8z1z/2ClAWDRf49xBBEsK/SmZ/IrPdP9HkZbCvFkhM=
Subject key identifier: 2E:0E:CF:34:2F:FF:D7:68:05:60:F2:1C:19:12:85:DD:A3:1D:1E:C1
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3ADDFDC3E3CA5BC7BAAD52545E96036E991DB644
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e203630303638.roa
Signing time: Mon 01 May 2023 13:18:25 +0000
ROA not before: Mon 01 May 2023 13:13:25 +0000
ROA not after: Mon 29 Apr 2024 13:18:25 +0000
asID: 60068
IP address blocks: 91.205.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:dd:fd:c3:e3:ca:5b:c7:ba:ad:52:54:5e:96:03:6e:99:1d:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 1 13:13:25 2023 GMT
Not After : Apr 29 13:18:25 2024 GMT
Subject: CN=2E0ECF342FFFD7680560F21C191285DDA31D1EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:09:04:bb:70:13:92:b2:4d:15:dd:c7:72:
ff:5d:78:df:fe:c0:ea:e9:61:cd:60:6e:e6:a7:96:
5e:95:8c:72:f6:7b:cd:73:51:cf:0e:1f:cc:37:64:
99:2e:2e:15:aa:c4:65:c3:2f:4e:b4:df:59:b2:03:
6a:61:b7:dc:e1:fc:7e:71:f6:26:c3:6f:85:4b:57:
1e:4a:d9:d4:3b:07:f0:6b:35:2e:cb:98:53:db:fa:
eb:c2:54:31:b0:ee:94:c2:d3:75:8e:a2:6c:8b:1e:
74:c2:54:c8:8b:f5:2b:27:05:e7:d5:8f:3d:a9:e5:
82:32:89:48:ab:db:f6:c3:08:4b:ce:fb:f2:9b:ce:
8a:6d:18:22:45:f3:a5:a9:66:b0:27:ec:3d:60:0d:
45:de:dd:77:31:35:08:93:b8:e6:6a:2d:db:81:b3:
9d:95:3f:51:5b:75:23:bf:8c:7d:10:f1:00:d8:d2:
ca:c1:bf:d1:33:8b:4e:7a:eb:94:cd:7e:45:a7:93:
3a:97:ec:1c:22:d9:59:2c:78:f5:59:c4:ac:d1:3f:
5b:ad:03:11:f7:04:11:32:17:2f:b7:53:bd:1c:ac:
6c:4e:45:0f:f0:8b:eb:58:84:b3:32:0a:67:71:bf:
09:47:94:bf:1a:21:a0:05:e1:3c:64:7b:5e:00:c2:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0E:CF:34:2F:FF:D7:68:05:60:F2:1C:19:12:85:DD:A3:1D:1E:C1
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e203630303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.107.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a5:d8:c2:25:29:0f:ef:7e:47:46:d5:8b:2f:c9:49:7b:31:
17:89:00:f0:07:d7:6f:4f:07:34:f9:06:c2:f3:d8:84:e1:c9:
41:56:f0:5d:19:9b:ae:b6:27:84:c1:be:d9:a0:50:37:45:66:
3b:28:bd:38:1b:73:56:a4:5e:65:68:b7:91:e1:aa:5d:4e:fb:
cd:4c:fb:71:e5:a0:1a:de:f5:6f:2d:fc:59:75:15:1c:c5:41:
2e:9c:11:38:56:ab:54:5a:d6:8a:3e:16:6e:75:e1:9d:bf:fd:
03:ca:58:8b:47:c1:05:a8:87:ea:2a:f0:a3:3b:a6:c2:b9:fe:
be:6f:bf:47:29:25:cd:4e:a5:a9:e1:fb:55:2f:a7:93:ff:a3:
1c:e9:87:bb:b6:98:8a:a5:25:8e:9b:1e:46:ca:99:59:38:7d:
aa:39:26:9d:6e:25:6f:f5:3e:9a:02:6a:f4:a0:63:d6:b1:35:
b7:80:da:9e:85:46:fa:ac:37:43:c6:f1:77:83:9d:68:f5:03:
2b:3c:23:30:07:f2:4f:2c:28:c5:a8:47:84:0a:a4:98:e6:18:
2b:b4:29:d7:21:77:d9:d9:3c:e9:12:e4:a3:86:2b:6b:08:59:
95:60:86:f6:b4:df:5b:09:b7:dc:07:12:8a:05:02:dd:ae:8b:
86:69:a2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org