Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3138352e3139362e302e302f32322d3234203d3e203432333636.roa
File: 3138352e3139362e302e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: xBVlL5zlEwcpdBQfB23z//fCeRCteDkvuUbUfIpbFY4=
Subject key identifier: 9C:CF:40:4A:F2:0F:D6:35:57:DA:EF:52:FC:22:9A:4E:D3:9F:7A:11
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 6B8BFB94DAAC4906AF4AAD6FA1EA32302A3A7181
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3138352e3139362e302e302f32322d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:19:50 +0000
ROA not before: Mon 10 Apr 2023 08:14:50 +0000
ROA not after: Mon 08 Apr 2024 08:19:50 +0000
asID: 42366
IP address blocks: 185.196.0.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8b:fb:94:da:ac:49:06:af:4a:ad:6f:a1:ea:32:30:2a:3a:71:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:14:50 2023 GMT
Not After : Apr 8 08:19:50 2024 GMT
Subject: CN=9CCF404AF20FD63557DAEF52FC229A4ED39F7A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:79:0f:18:bb:23:93:d7:5e:44:fc:77:a6:
af:3d:b7:81:02:80:b6:7f:ef:31:69:93:d1:39:77:
c4:d6:55:2b:61:47:f5:ac:91:82:42:39:e4:4f:0b:
cc:df:b0:11:4a:5b:da:5d:01:19:e1:b7:50:ca:eb:
3e:01:88:7a:f4:46:79:f3:a9:6a:98:77:3b:a3:c0:
5a:58:2c:67:e4:9e:d7:96:5c:24:14:70:62:46:a6:
41:fb:81:96:51:b5:54:00:26:65:5f:b5:e8:4f:0f:
1f:b3:6f:bf:bc:04:da:47:51:02:25:8e:49:00:35:
14:10:e0:77:a9:d9:2d:31:1b:5d:2c:98:9e:a1:dc:
ba:fb:37:91:53:b9:e1:10:58:da:a4:34:1d:01:14:
07:dd:db:d4:f1:4d:b9:8b:27:76:6a:f3:e1:11:61:
1b:45:4b:a4:8e:94:88:9f:41:ab:50:13:64:9d:b9:
52:5b:d4:4e:9f:c5:ef:43:26:97:3c:b3:7e:27:bc:
30:38:97:e6:36:38:71:fe:eb:38:b9:db:f3:83:f4:
46:59:c2:59:c8:97:76:68:f5:77:4f:3e:6d:08:bd:
55:99:db:b8:1b:3e:82:59:1e:fb:bc:de:f2:dd:73:
b8:55:05:90:99:9e:d1:02:21:2c:7c:9d:9d:07:8b:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CF:40:4A:F2:0F:D6:35:57:DA:EF:52:FC:22:9A:4E:D3:9F:7A:11
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3138352e3139362e302e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:0a:d4:d0:02:98:02:3a:18:8d:a1:10:e5:ce:ec:13:fd:91:
91:0b:74:d4:64:fb:0c:dc:1c:d8:8c:46:29:ea:8e:e5:e8:d6:
64:e5:7a:47:92:af:2f:c4:93:bc:e2:06:6a:12:37:ba:f4:b6:
68:01:0e:19:3b:63:14:cf:bc:b6:5e:e6:4d:b8:f5:45:03:61:
0a:c5:5c:b8:9b:5f:a8:d6:93:3c:0b:b7:a8:09:e8:ad:93:b3:
7a:9c:7c:58:ea:8c:67:91:40:7d:c5:ab:f8:ac:0e:6f:50:7a:
9c:19:2a:19:18:f5:d0:7c:2b:eb:40:f1:72:27:5c:ea:e6:bc:
03:91:e6:b2:cf:34:c9:11:dc:c7:9f:1a:82:c8:06:07:3b:33:
b6:0f:43:82:ac:5d:ce:b5:13:f4:a9:38:d3:a7:7d:40:23:d5:
75:af:1b:ea:22:4b:00:3d:ad:14:31:ed:1b:2f:ca:5d:40:b5:
f3:ef:a6:3e:cf:3d:d7:37:6b:5f:80:b9:94:ce:55:79:b4:7b:
9d:9c:8b:c3:54:16:4e:f1:a4:2d:90:c1:25:a2:4d:98:0a:e7:
e9:06:08:b7:e6:4f:78:7f:af:e8:ae:a6:71:b2:b0:60:b4:2c:
c9:b9:b0:f0:e6:ad:e0:ee:2a:ff:a2:79:59:db:f0:b4:cb:f6:
a1:1a:5d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org