Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20383334.roa
File: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: sp213o0d070h7B9H4cFC5dffpnhr7bMeXKGCA/6FEZs=
Subject key identifier: 2D:96:AA:58:70:11:D3:6E:08:F7:49:23:57:A4:8A:FF:D0:D5:24:66
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 077274C5F0AFD4FE31C7E3DA53A73FB6AE4AE2F4
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20383334.roa
Signing time: Mon 11 Dec 2023 00:00:08 +0000
ROA not before: Sun 10 Dec 2023 23:55:08 +0000
ROA not after: Mon 09 Dec 2024 00:00:08 +0000
asID: 834
IP address blocks: 188.164.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:72:74:c5:f0:af:d4:fe:31:c7:e3:da:53:a7:3f:b6:ae:4a:e2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Dec 10 23:55:08 2023 GMT
Not After : Dec 9 00:00:08 2024 GMT
Subject: CN=2D96AA587011D36E08F7492357A48AFFD0D52466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:5b:2b:08:89:b3:bd:8b:0a:ae:10:4b:f9:
13:d6:93:15:2f:05:a0:75:f6:5a:c4:dd:bc:d2:40:
82:01:5f:19:91:0a:48:9f:b3:09:47:0d:0c:bc:73:
09:d4:3e:b3:b5:df:49:76:21:cc:5d:8b:b6:a4:25:
51:47:59:83:92:65:ad:8b:6f:d2:bf:38:43:c6:a4:
a7:54:1f:df:47:0e:a5:0b:f2:02:6e:5f:af:0c:a1:
26:3a:61:50:97:a6:75:d3:29:2c:88:ad:85:32:be:
c5:96:1a:02:5b:e9:16:4b:7b:26:be:55:db:14:4f:
1b:9b:a4:e3:ca:89:95:b3:27:b9:1a:bc:64:c2:68:
4a:86:38:5b:14:01:62:ad:9d:2c:40:94:ef:59:19:
bb:33:0e:ec:72:e1:bc:bb:21:f9:bb:a7:46:22:be:
54:f4:c5:df:05:4c:19:68:4c:f9:f5:22:06:58:a4:
0f:82:36:fc:87:37:e3:e9:25:ac:73:2f:e5:c1:e2:
27:3f:a1:ec:33:71:e6:be:64:56:dd:0c:3e:b8:be:
f0:16:f3:59:65:9f:42:64:57:f2:92:ff:93:96:18:
c5:b3:6f:89:ca:4b:c3:29:4f:1b:91:55:32:a0:ff:
f7:f7:28:7f:9e:63:e1:a6:19:34:2d:4c:82:17:3d:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:96:AA:58:70:11:D3:6E:08:F7:49:23:57:A4:8A:FF:D0:D5:24:66
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
31:87:89:1a:a4:ff:56:60:1b:16:dc:1e:2d:8e:a6:7b:05:34:
be:08:fa:ba:37:65:42:e7:d5:66:32:e3:d3:e2:68:d9:40:ae:
4c:dc:ea:1c:38:b7:b6:4d:68:8f:7e:f5:7f:10:33:07:fa:5a:
a9:b8:d8:0b:ea:b9:a3:8f:a2:a2:9f:28:4d:66:da:9b:44:f3:
33:65:c6:4f:fe:22:ea:9d:f4:3f:c4:38:84:b6:7d:13:2c:6d:
7a:57:2f:64:4b:57:0f:1c:ad:5f:80:e0:4b:b4:73:9b:4d:b1:
1e:a7:c0:45:4c:3f:c2:86:db:ec:16:95:3e:73:1b:93:92:60:
ac:f5:81:23:81:96:07:b0:66:44:a2:81:66:9f:b3:36:01:bf:
56:90:87:62:d8:cf:8e:de:52:65:54:66:98:7f:e1:5f:50:46:
0d:eb:86:e3:4f:2c:6d:07:58:31:82:09:b8:42:f2:19:b6:f8:
54:42:f6:4d:34:49:82:7b:93:58:38:2a:c1:38:f4:6a:a4:7d:
b8:2e:1f:83:24:bb:db:b2:f6:41:7f:0d:47:7d:fb:58:09:cb:
dc:34:ac:5a:54:28:62:96:82:99:a0:8b:c1:f0:34:3e:3b:36:
21:96:3c:c5:17:b4:45:20:a2:a7:c3:f0:9f:2b:22:93:5b:43:
8f:8d:a3:5c
-----BEGIN CERTIFICATE-----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Generated at Thu Dec 28 03:55:21 2023 by rpki-client on console.sobornost.net