Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3235302e302f32342d3234203d3e20383334.roa
File: 322e35362e3235302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TqyClpyrfNWFyjrq1aejCNn28v9i26oIARPMNyWZNkw=
Subject key identifier: 58:08:85:C6:DD:DC:CB:C2:13:86:0D:89:82:A1:14:32:21:D4:24:EE
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 2EFC5E7CA48C442F8646B6F091076B6B23AD63B1
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3235302e302f32342d3234203d3e20383334.roa
Signing time: Fri 08 Sep 2023 09:00:05 +0000
ROA not before: Fri 08 Sep 2023 08:55:05 +0000
ROA not after: Fri 06 Sep 2024 09:00:05 +0000
asID: 834
IP address blocks: 2.56.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fc:5e:7c:a4:8c:44:2f:86:46:b6:f0:91:07:6b:6b:23:ad:63:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 8 08:55:05 2023 GMT
Not After : Sep 6 09:00:05 2024 GMT
Subject: CN=580885C6DDDCCBC213860D8982A1143221D424EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:e6:90:9a:18:8f:e1:6f:e0:d0:1e:cd:6c:
ba:54:27:f1:95:db:ef:86:e7:b9:26:fb:26:3c:d5:
6f:1c:0c:e5:9e:69:1a:79:67:35:fc:22:ef:e7:2f:
16:1f:1d:d5:b3:4c:71:51:95:2d:02:07:30:90:e1:
09:ce:ef:40:8f:f6:28:ba:13:a2:da:03:40:65:c7:
0b:b5:12:62:91:18:97:99:0a:8b:83:da:1a:f1:ba:
ae:7c:6f:f7:47:f3:dd:aa:f1:f8:13:eb:cf:8c:72:
30:d4:1d:37:e0:0e:e7:bd:df:7c:32:3b:35:d5:00:
5b:5e:e9:f9:6b:c5:e2:91:df:bc:5a:9c:81:4f:92:
ec:91:ab:a2:21:17:60:ec:63:6c:e1:fd:9d:76:cf:
61:e9:bf:66:29:ed:4e:d4:6d:87:3c:3c:99:41:4c:
e2:46:7d:7f:71:72:e3:2d:29:51:85:71:e3:6d:20:
8b:dd:86:e3:f1:cc:c4:80:50:55:d1:66:88:9e:ec:
15:68:3d:60:fb:19:40:bf:f8:3a:f6:e7:3e:b1:f0:
37:98:36:53:45:8f:6d:2d:9f:ee:d6:09:c0:c9:8c:
05:5c:bd:10:97:22:d4:32:c5:f4:4b:dd:78:7a:86:
84:70:80:c4:b3:c6:b3:29:6c:a3:b8:1d:38:30:89:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:08:85:C6:DD:DC:CB:C2:13:86:0D:89:82:A1:14:32:21:D4:24:EE
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3235302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.250.0/24
Signature Algorithm: sha256WithRSAEncryption
48:dc:8b:10:13:c4:78:56:2d:67:51:46:41:fe:69:96:da:53:
76:0e:5d:e1:00:c8:7f:69:97:dc:88:49:f8:56:02:54:00:3b:
4a:f0:eb:4f:91:ba:9b:ee:35:41:ca:d2:c3:1d:28:03:27:12:
1d:87:44:39:05:2e:8a:9c:c2:08:ba:ad:b4:2a:75:cb:9c:0b:
05:35:37:90:19:76:6a:1c:38:70:b7:78:ab:f6:4c:b2:31:d5:
30:b5:f0:86:f5:6d:71:78:3c:f5:eb:f8:08:b3:fa:33:c3:50:
d6:e4:0f:42:f0:b8:ed:de:a8:36:90:df:0f:09:1d:1f:5a:f6:
1a:d4:23:54:e1:7e:f4:f6:6b:63:b9:8b:89:d3:8e:b7:e2:33:
a5:56:2e:07:d8:58:2a:c3:0e:c2:d3:83:e1:be:20:dc:65:bb:
5b:18:b2:7f:50:2e:f4:95:25:94:45:0f:f2:24:ac:c5:f2:36:
0c:f8:0d:65:6d:93:7f:ff:03:b8:f9:d4:12:51:42:05:e3:6b:
c5:a2:52:44:d7:6a:92:9c:e0:3c:e5:68:21:d3:c9:9a:25:31:
5a:7d:33:cc:ff:3e:b0:bc:d4:6a:f8:de:76:5c:b2:26:eb:e9:
f4:a8:e8:e5:83:2a:0b:19:ad:63:0d:cd:df:70:0f:22:14:84:
b4:f5:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:09 2023 by rpki-client on console.sobornost.net