Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3133302e3138352e3131362e302f32332d3234203d3e2030.roa
File: 3133302e3138352e3131362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: qhp3Xv/AkEywjWVyI5V6Qwckxsx0c3QZgzlKc1HPzyI=
Subject key identifier: 50:81:11:25:CE:65:5A:60:9C:34:59:35:D2:3C:EE:5C:AA:63:74:4F
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 0A4DA082F598A198932D3F3E20E6B8CF3E809C0F
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3133302e3138352e3131362e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:29 +0000
ROA not before: Mon 27 Mar 2023 08:22:29 +0000
ROA not after: Mon 25 Mar 2024 08:27:29 +0000
asID: 0
IP address blocks: 130.185.116.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4d:a0:82:f5:98:a1:98:93:2d:3f:3e:20:e6:b8:cf:3e:80:9c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:29 2023 GMT
Not After : Mar 25 08:27:29 2024 GMT
Subject: CN=50811125CE655A609C345935D23CEE5CAA63744F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:cf:af:5d:a6:13:e7:7d:4c:7c:97:45:eb:
03:2f:45:2f:f2:c0:75:43:32:e0:d8:ff:e2:26:b9:
b9:58:c8:af:7b:2c:7f:79:1e:3c:cb:97:70:f6:ff:
0f:0f:ee:3d:6c:3f:af:64:d2:06:9a:e0:34:75:80:
bb:f6:cd:ca:96:af:0f:ea:fe:4a:46:9e:d7:01:ff:
19:7b:3b:d5:fd:bd:20:bd:be:c4:71:37:23:d8:b9:
8c:d7:f9:73:a7:73:c3:02:01:b1:0a:2d:1c:25:06:
c6:bd:da:07:85:29:bf:c3:7c:9f:c3:30:99:e9:de:
c8:1a:8e:ba:e0:27:c7:8a:e4:88:5f:22:45:12:34:
9a:f6:8f:95:9c:1d:81:2b:0d:da:90:30:d5:b9:f3:
26:70:29:d9:92:85:8a:13:51:f8:67:b1:71:05:3d:
9b:ab:61:8a:ab:7a:f3:68:73:7a:51:b7:5f:3a:f7:
36:25:87:d4:f9:2b:83:5e:d4:0d:37:db:6a:1f:83:
c1:d9:29:41:ed:b9:ea:5a:af:d1:74:59:79:63:2d:
5b:58:bb:3a:a2:b8:a8:20:6c:12:0e:35:1d:9c:f8:
19:e4:88:c9:de:5a:a8:4a:88:89:31:38:05:0c:c6:
01:bb:5a:70:c9:1a:5b:d2:c2:e8:34:68:c7:a6:22:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:81:11:25:CE:65:5A:60:9C:34:59:35:D2:3C:EE:5C:AA:63:74:4F
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3133302e3138352e3131362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.116.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:ad:d7:0d:20:5a:5a:54:58:bd:c5:ed:3a:61:68:d5:80:10:
4a:33:ba:6e:78:40:30:92:da:00:84:34:21:41:24:4c:1a:e0:
cd:56:cf:38:1b:3f:47:0a:31:66:87:cb:f0:fd:46:b7:c9:da:
fe:45:5d:20:3b:a3:41:7c:4d:7c:17:c5:0e:b3:cd:a1:e5:76:
d7:e7:7f:5a:1b:a6:9c:ee:87:4c:56:5f:fb:06:b8:65:92:a3:
95:ce:c3:e2:c4:f4:3f:49:40:27:ae:8f:71:e9:fe:80:b5:8d:
14:58:f9:92:73:35:e7:23:8c:84:6a:35:8f:74:c7:09:7b:8a:
f2:33:92:df:2c:7d:de:13:37:95:ad:28:55:94:db:7f:dc:66:
88:bb:e8:87:05:3f:40:72:db:b1:ec:29:34:a9:1c:b1:f1:ea:
39:56:e4:16:6e:39:41:f1:de:73:ba:ad:56:94:b1:ac:f6:7b:
a9:5f:89:69:58:9d:c5:ca:83:96:3c:9f:c3:d9:6f:42:95:3b:
03:39:86:11:0c:bc:54:00:e7:a6:ec:7c:0e:39:36:5b:ca:1d:
d9:af:ef:58:a8:ed:0a:2d:f0:87:ea:13:b1:5c:65:f2:50:f6:
25:8c:bc:7c:62:41:2d:60:78:5b:4b:ca:fa:9d:6e:70:1c:c4:
94:65:02:2b
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUCk2ggvWYoZiTLT8+IOa4zz6AnA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yMzAzMjcwODIyMjlaFw0yNDAzMjUwODI3MjlaMDMxMTAvBgNV
BAMTKDUwODExMTI1Q0U2NTVBNjA5QzM0NTkzNUQyM0NFRTVDQUE2Mzc0NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT5s+vXaYT531MfJdF6wMvRS/y
wHVDMuDY/+ImublYyK97LH95HjzLl3D2/w8P7j1sP69k0gaa4DR1gLv2zcqWrw/q
/kpGntcB/xl7O9X9vSC9vsRxNyPYuYzX+XOnc8MCAbEKLRwlBsa92geFKb/DfJ/D
MJnp3sgajrrgJ8eK5IhfIkUSNJr2j5WcHYErDdqQMNW58yZwKdmShYoTUfhnsXEF
PZurYYqrevNoc3pRt1869zYlh9T5K4Ne1A0322ofg8HZKUHtuepar9F0WXljLVtY
uzqiuKggbBIONR2c+BnkiMneWqhKiIkxOAUMxgG7WnDJGlvSwug0aMemItJfAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUUIERJc5lWmCcNFk10jzuXKpjdE8wHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzEzMzMwMmUzMTM4MzUyZTMx
MzEzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgrl0MA0G
CSqGSIb3DQEBCwUAA4IBAQCyrdcNIFpaVFi9xe06YWjVgBBKM7pueEAwktoAhDQh
QSRMGuDNVs84Gz9HCjFmh8vw/Ua3ydr+RV0gO6NBfE18F8UOs82h5XbX539aG6ac
7odMVl/7BrhlkqOVzsPixPQ/SUAnro9x6f6AtY0UWPmSczXnI4yEajWPdMcJe4ry
M5LfLH3eEzeVrShVlNt/3GaIu+iHBT9Actux7Ck0qRyx8eo5VuQWbjlB8d5zuq1W
lLGs9nupX4lpWJ3FyoOWPJ/D2W9ClTsDOYYRDLxUAOem7HwOOTZbyh3Zr+9YqO0K
LfCH6hOxXGXyUPYljLx8YkEtYHhbS8r6nW5wHMSUZQIr
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org