Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e342e302f32342d3234203d3e20383334.roa
File: 3139332e3234362e342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4PHOXlJGubQoUXrO9jxSiGUXoDvh+x7pWQ/Zl+XNTSc=
Subject key identifier: B4:BC:A9:A0:AA:75:6C:39:BA:A9:46:17:38:20:F2:90:4D:38:C1:CA
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 4BC747A971A0E86123E4CA4CF9C7A9EAF7A7CE17
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e342e302f32342d3234203d3e20383334.roa
Signing time: Thu 31 Aug 2023 00:00:12 +0000
ROA not before: Wed 30 Aug 2023 23:55:12 +0000
ROA not after: Thu 29 Aug 2024 00:00:12 +0000
asID: 834
IP address blocks: 193.246.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c7:47:a9:71:a0:e8:61:23:e4:ca:4c:f9:c7:a9:ea:f7:a7:ce:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Aug 30 23:55:12 2023 GMT
Not After : Aug 29 00:00:12 2024 GMT
Subject: CN=B4BCA9A0AA756C39BAA946173820F2904D38C1CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0a:80:86:0e:b5:1c:7c:96:88:14:d7:05:dc:
c2:db:ef:95:99:59:00:88:dd:1e:af:c1:03:d6:3f:
f0:5d:5c:52:88:40:d3:83:09:14:01:25:29:2d:61:
24:ea:73:e1:b3:02:10:46:9b:51:7f:71:cb:87:af:
f3:7c:7a:05:93:31:2b:cd:ac:e4:76:36:99:88:17:
14:3e:99:d0:ef:65:45:f8:3e:ee:1c:4c:39:b2:da:
de:e3:17:54:3c:cb:2e:92:26:0a:84:7a:8e:27:97:
59:1f:09:81:95:dd:41:f8:ee:0a:b3:ab:a9:90:12:
93:cc:98:cd:a1:c9:52:28:d3:2b:9c:88:a3:39:d4:
7f:43:37:38:82:b1:bd:45:5f:bf:2e:74:d3:75:88:
f1:58:c8:26:c1:8a:98:46:3c:ea:55:c6:01:cc:29:
af:3c:b5:96:4d:16:6a:56:61:dc:f9:cb:b8:c7:1b:
c2:08:b4:fc:ea:e7:5a:7c:3b:fe:37:65:0e:cc:f8:
87:56:0f:74:0e:c4:68:7c:d0:89:0e:99:64:dd:65:
77:86:b6:f4:bb:13:ce:85:4e:f6:57:e8:a9:1b:36:
7b:88:85:95:c9:a1:55:2e:e8:55:02:65:31:3a:5e:
e2:74:38:10:3d:f4:86:6b:bf:4a:bd:20:eb:90:70:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BC:A9:A0:AA:75:6C:39:BA:A9:46:17:38:20:F2:90:4D:38:C1:CA
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:95:c0:ba:47:7c:97:bd:9e:94:a7:d4:89:06:d0:02:27:04:
2a:4c:c6:d4:23:0e:92:e5:59:1e:ed:40:c5:28:29:c0:89:ab:
96:15:c3:cc:ac:27:18:27:f8:10:52:46:f1:94:f6:52:e2:f5:
63:e2:1a:64:39:37:c4:6b:d2:d5:b2:c3:6b:8d:c1:df:23:88:
1b:24:34:81:fd:68:8f:d7:d5:60:00:e9:92:da:5e:ea:62:86:
85:50:6a:bd:c4:d3:36:83:e7:bd:e8:1d:f4:02:5f:a4:72:9a:
7e:70:d7:23:2c:03:77:bb:13:af:0d:16:ef:54:d3:3a:9f:84:
db:b8:b3:d4:94:4e:37:27:54:a4:d5:12:11:35:df:15:56:e5:
05:b1:e8:d5:f7:ff:45:85:a9:a4:67:21:45:99:9f:8a:50:86:
fb:35:a0:1f:83:cc:a4:71:a3:0d:c0:7e:fc:e7:55:55:5d:a1:
06:d8:b3:da:44:30:97:47:7a:54:eb:b6:f6:a7:1a:65:b0:e1:
5b:56:a8:3b:7a:38:2c:8a:ee:9f:f1:0b:2e:22:8d:c8:69:66:
7e:9e:f8:fd:e8:5d:5d:2d:e2:57:47:2f:aa:93:9d:65:a5:64:
77:0b:64:36:4a:46:46:84:df:c5:c8:ac:aa:de:9a:a5:7d:37:
1f:f7:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net