Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e20323030343832.roa
File: 38342e33382e3235342e302f32342d3234203d3e20323030343832.roa (raw, json)
Hash identifier: mtOJArTFQRyoE1OWIL0W6PNYqTdLc4sJMkrt5RITxxU=
Subject key identifier: 5D:A0:02:EF:2B:B0:0F:C7:97:40:6E:85:80:E1:ED:56:6D:7C:C9:64
Certificate issuer: /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial: 70DC407EE6B697E10D3F7303D3A132DD23418C0C
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e20323030343832.roa
Signing time: Wed 14 Jun 2023 13:59:38 +0000
ROA not before: Wed 14 Jun 2023 13:54:38 +0000
ROA not after: Wed 12 Jun 2024 13:59:38 +0000
asID: 200482
IP address blocks: 84.38.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:dc:40:7e:e6:b6:97:e1:0d:3f:73:03:d3:a1:32:dd:23:41:8c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Validity
Not Before: Jun 14 13:54:38 2023 GMT
Not After : Jun 12 13:59:38 2024 GMT
Subject: CN=5DA002EF2BB00FC797406E8580E1ED566D7CC964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:33:af:5e:e0:db:58:ba:cf:c1:bc:4a:f8:
e4:4e:99:23:6e:14:94:7c:dd:a3:30:ee:28:97:a2:
37:bd:40:32:15:dd:c5:84:c5:c7:b4:eb:32:c2:03:
11:d0:cb:83:31:49:16:32:ba:34:ec:8a:78:3e:0f:
1b:39:51:02:6d:be:59:01:e1:49:74:ad:d4:42:5a:
7e:bd:50:c8:36:d8:bb:03:8a:6b:45:4e:6e:dd:ac:
77:37:d7:f9:78:42:e8:30:d8:f3:0c:22:36:ba:8f:
5b:ba:8f:fd:c8:31:8d:9b:94:01:35:2b:e0:67:ae:
92:d9:9d:af:38:ca:3b:aa:ea:a9:10:a4:87:b5:46:
ce:9b:48:6d:01:66:96:1d:36:5d:da:d1:34:4a:11:
06:c9:f4:c0:a6:3b:c1:1f:ca:3f:c0:6f:91:6c:c6:
34:a0:91:c9:b7:fd:3b:75:49:57:c5:90:a9:18:7a:
74:21:b8:52:38:83:dd:c8:2c:9e:3c:f2:11:3b:a8:
0a:1d:0d:02:d4:b5:cb:9b:ca:71:c8:11:89:7c:00:
28:fb:3c:d4:74:aa:ba:c6:0e:ca:b4:75:97:00:57:
3f:ed:2a:eb:da:e5:fc:6c:c9:f3:1e:9f:59:94:26:
79:37:48:6b:82:c7:84:7c:6d:be:ce:5c:b5:f1:44:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:02:EF:2B:B0:0F:C7:97:40:6E:85:80:E1:ED:56:6D:7C:C9:64
X509v3 Authority Key Identifier:
keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e20323030343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.254.0/24
Signature Algorithm: sha256WithRSAEncryption
07:29:fe:7f:6d:70:c1:f6:26:c7:51:44:d3:f1:18:00:0e:6a:
81:cd:09:da:ec:11:41:b1:ac:9d:8b:2f:f2:41:5b:7d:b2:49:
e8:21:4e:b7:61:e3:3a:6f:59:c6:0d:c5:c8:60:b3:2c:b1:ca:
ab:6e:cb:f6:9e:c5:6a:2e:c1:7d:5a:e8:49:12:68:a8:a4:8c:
e4:56:c9:f5:c4:b3:cf:a9:f9:3d:7b:f8:ba:c5:f1:16:17:58:
ac:25:ec:76:9e:45:68:bb:85:b7:38:c9:61:dd:e5:95:34:8c:
c0:90:36:84:bf:1b:75:ff:45:38:df:12:2b:1a:10:bd:56:07:
a6:6d:c0:d4:08:9b:1a:61:27:dc:72:d2:7f:d3:5b:f9:85:33:
a2:24:85:ee:ea:cb:7f:c7:a6:c7:98:97:c0:62:46:ac:cf:14:
43:eb:fa:37:15:e3:60:59:32:f2:9e:5c:f7:88:78:6d:2e:38:
d1:97:f3:71:9c:f7:42:72:e6:ee:2f:8e:79:9f:d9:f7:10:a9:
cf:de:e1:4e:98:88:6f:b5:1a:26:57:b2:22:59:01:40:1d:26:
e0:0e:cf:d3:f2:fb:c1:05:7e:4b:cc:1d:b0:46:16:2a:4f:2c:
58:6a:e1:18:b9:5f:17:76:7c:23:d0:b2:b0:f9:72:24:b8:4b:
7c:e8:41:c6
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 13 00:33:14 2023 by rpki-client on console-fra.rpki-client.org