Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234362e302f32332d3234203d3e203432333636.roa
File: 3139332e3136302e3234362e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: uxy1T6tmp0gQdx90E8GcbJfs62jehlAGVKmos0aHTPM=
Subject key identifier: 36:26:F2:BE:08:50:CB:34:56:C8:36:94:95:0F:1D:A4:88:A2:33:75
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 178F77C4215CA8F40413D15BFA61759F1A942122
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234362e302f32332d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:19:12 +0000
ROA not before: Mon 10 Apr 2023 08:14:12 +0000
ROA not after: Mon 08 Apr 2024 08:19:12 +0000
asID: 42366
IP address blocks: 193.160.246.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8f:77:c4:21:5c:a8:f4:04:13:d1:5b:fa:61:75:9f:1a:94:21:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:14:12 2023 GMT
Not After : Apr 8 08:19:12 2024 GMT
Subject: CN=3626F2BE0850CB3456C83694950F1DA488A23375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:fb:af:65:1b:84:42:d2:81:3a:f9:c9:85:
2c:03:31:76:17:df:b1:8a:a7:43:63:9b:11:ff:9c:
8d:1a:0e:a3:17:c4:ed:e3:23:7e:1e:51:65:7a:7f:
2f:9b:da:15:3e:5e:83:f9:55:1c:1b:6d:16:ea:0f:
84:1c:8e:34:2c:8d:92:76:59:f5:ad:34:c7:8c:07:
1c:13:e7:0b:bd:b3:75:89:63:07:ce:8a:9c:50:36:
d7:e4:28:64:b8:fc:1b:8f:77:94:f0:67:19:1e:e0:
49:fa:81:d0:0a:ed:b2:bf:dc:aa:7b:bd:c8:0e:6c:
78:f8:6f:aa:1b:25:84:2f:42:e0:2c:3d:aa:64:c7:
31:91:fb:95:01:75:02:61:94:d6:16:b7:f1:d1:78:
bd:f5:ed:57:e0:6b:1b:83:ee:9d:7b:2c:ba:e9:06:
26:be:af:05:cb:6e:60:8c:2a:a8:ae:63:77:21:39:
89:8a:36:6f:c6:08:b0:1d:50:db:4a:3e:85:54:6f:
ce:d5:11:c3:a3:d6:a9:8f:20:44:2b:ee:10:c9:40:
8a:96:b0:4d:4e:eb:49:96:ac:c5:91:44:8e:e7:18:
f5:86:58:9d:9d:30:f7:21:b2:21:d6:32:a7:40:68:
93:91:ed:16:28:93:61:3a:f0:fe:5a:fa:08:90:7c:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:26:F2:BE:08:50:CB:34:56:C8:36:94:95:0F:1D:A4:88:A2:33:75
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234362e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.246.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:c8:84:96:2f:28:d1:d0:12:bf:df:ef:3d:b9:dc:1b:47:5d:
00:48:51:e3:3f:35:cc:fe:58:7c:18:c5:90:48:b9:db:7d:8f:
38:4b:1b:03:81:37:45:f6:f0:31:69:66:15:72:00:09:7e:e8:
31:d8:38:b4:76:17:f3:79:cf:93:23:fa:55:bd:31:64:ef:d2:
13:db:f9:28:fa:52:db:d3:dc:fa:a6:fd:47:90:73:7f:f4:c0:
52:f5:8f:03:83:64:51:c3:5f:95:7a:e9:90:6f:39:8f:3d:56:
bd:e5:7e:d2:1c:f6:d6:23:bf:eb:3c:2d:11:26:80:4c:97:92:
1a:a8:a5:bd:40:67:14:71:39:26:93:b0:c0:67:0f:82:ed:60:
17:52:77:65:3d:dd:9c:a9:bf:1c:a9:57:3e:85:b3:8b:fc:b7:
5e:d3:60:79:ab:06:ec:33:be:ec:08:88:0a:78:c3:cb:ec:05:
f2:6b:70:81:da:4b:11:94:32:c8:56:f4:9d:f5:ad:bc:55:a2:
e0:67:aa:93:fd:d0:a7:f2:e1:7c:98:fb:b0:ca:43:b3:35:a9:
ce:65:e8:ce:9d:1d:ab:39:e8:6e:40:97:e3:ea:2c:09:77:05:
92:d5:9a:5e:dc:98:77:2c:c3:6a:f6:9b:69:25:4b:6b:8c:9c:
54:6b:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org