Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132322e302f32332d3234203d3e203432333636.roa
File: 3139342e33352e3132322e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: KTHrSom8ytmDp6PO+onVuPDsIdjRWygvpojictNaFhk=
Subject key identifier: EA:24:DC:BF:58:C1:7A:62:1B:30:61:30:0E:4D:79:6D:73:4C:DA:E4
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 056084C83268635A5931309CCF7F0584B8B32724
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132322e302f32332d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:19:38 +0000
ROA not before: Mon 10 Apr 2023 08:14:38 +0000
ROA not after: Mon 08 Apr 2024 08:19:38 +0000
asID: 42366
IP address blocks: 194.35.122.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:60:84:c8:32:68:63:5a:59:31:30:9c:cf:7f:05:84:b8:b3:27:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:14:38 2023 GMT
Not After : Apr 8 08:19:38 2024 GMT
Subject: CN=EA24DCBF58C17A621B3061300E4D796D734CDAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:af:ce:1e:54:cb:23:76:0c:87:21:68:21:1b:
9b:c4:0b:d8:76:b9:a2:bf:f6:84:43:54:1f:f1:e6:
59:b4:b1:97:c9:20:d7:5c:ca:f4:fb:66:68:c9:f9:
ff:74:06:4e:d5:16:aa:b1:e7:12:66:7f:f2:f5:7f:
a4:75:4a:db:a9:a6:27:82:96:ca:2d:3e:17:74:8e:
62:e8:9f:36:63:e1:b5:f6:46:e0:2e:2e:a1:fd:f6:
d2:49:32:cd:70:74:dd:77:ed:21:7a:7e:4f:bd:67:
a5:e9:4f:5d:c3:c6:46:96:84:74:b9:8b:f2:cb:eb:
61:b4:cc:37:7d:86:ca:f7:bf:b9:47:2a:00:09:ed:
a3:a6:2a:2b:43:e2:38:43:00:26:90:a7:cf:49:50:
17:7b:cb:be:f9:11:12:d1:04:51:97:4f:bf:68:11:
16:da:b7:ed:36:f1:fa:89:16:bc:20:6e:af:54:45:
6e:06:d6:72:f4:e0:a1:cf:9a:38:95:d9:f2:4a:fe:
c4:91:1d:13:e0:1f:28:f7:3c:c6:44:97:e8:22:d1:
47:6d:7e:04:a9:57:f6:96:1e:1c:47:39:2e:f8:e0:
6a:f7:99:fc:50:2c:3f:5a:09:06:40:e3:85:6a:51:
40:74:ba:9a:1f:b7:5d:13:de:ab:98:fa:eb:b6:9b:
7e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:24:DC:BF:58:C1:7A:62:1B:30:61:30:0E:4D:79:6D:73:4C:DA:E4
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132322e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.122.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:9e:e0:37:b3:0b:d3:e0:d0:fa:52:3d:70:d8:a4:9f:81:94:
39:ae:5d:f9:3a:13:8a:f4:55:5f:e0:ec:f3:f9:85:77:97:24:
18:62:ad:c3:11:ec:18:2e:b9:e1:8e:df:8d:fb:cf:a5:04:56:
61:3f:66:36:15:2d:b8:7f:f2:e0:e7:21:4d:bc:7b:87:3e:85:
7b:0c:f3:36:9e:85:ac:cb:8d:d4:e3:6b:42:ac:5a:35:05:18:
ab:c0:99:c7:17:97:1e:14:d2:4d:f6:ac:32:c9:39:64:90:02:
a8:65:c8:1f:46:3e:a8:03:55:fa:3e:93:46:23:e5:09:b2:40:
ca:4b:0e:73:30:e5:df:ca:58:34:cd:f8:da:2d:bd:d0:9b:60:
5c:16:14:b7:2a:c0:d7:23:01:91:41:b4:10:87:b0:ed:0e:bf:
37:0b:f0:c1:8d:c3:7c:c3:b6:ef:9b:50:f2:9c:f6:27:4d:2e:
b2:65:54:00:0d:52:f1:8d:e6:1b:f0:9b:bd:33:f0:c1:89:9e:
e8:e3:01:8c:c6:e6:10:c2:c5:1d:91:83:1e:dd:11:ea:c5:61:
47:02:4c:08:94:05:5e:1b:84:bf:80:77:3d:bf:ad:5d:83:c9:
2f:55:0c:92:98:c6:6a:36:be:94:36:7d:f1:82:80:dc:66:b3:
57:a6:5e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org