Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e20383334.roa
File: 38342e33382e3235342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hTXW70LpuGoXBi6JYAqmAAzk6Ht/VicbAz+0W+U63gc=
Subject key identifier: 2E:A5:3B:D2:A5:AA:40:22:6D:C1:D0:D0:4E:27:6C:B5:35:0F:44:22
Certificate issuer: /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial: 63B64462C034151A55BCC39EFF62CD0A0EC979B1
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e20383334.roa
Signing time: Mon 08 Jan 2024 00:00:06 +0000
ROA not before: Sun 07 Jan 2024 23:55:06 +0000
ROA not after: Mon 06 Jan 2025 00:00:06 +0000
asID: 834
IP address blocks: 84.38.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 17:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b6:44:62:c0:34:15:1a:55:bc:c3:9e:ff:62:cd:0a:0e:c9:79:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Validity
Not Before: Jan 7 23:55:06 2024 GMT
Not After : Jan 6 00:00:06 2025 GMT
Subject: CN=2EA53BD2A5AA40226DC1D0D04E276CB5350F4422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:9f:76:08:94:9c:7d:ab:83:a7:23:33:6f:
82:b4:e7:81:b5:b5:88:9c:33:b6:92:12:af:bd:77:
33:30:ff:77:df:09:2b:87:b4:76:cc:d8:4d:d5:b3:
18:36:64:b1:6b:c2:55:15:b8:ba:5d:d5:a5:72:89:
df:da:5f:2d:07:df:c9:35:90:6f:b2:e0:4f:43:6b:
57:d3:85:d4:8f:90:15:48:20:d6:31:4d:21:1e:aa:
95:aa:eb:97:a8:f4:7d:2b:54:82:7d:64:e9:bd:9e:
26:77:e5:c4:08:a9:74:aa:20:22:46:f8:b7:80:06:
ac:bd:74:14:88:fe:e3:a4:e7:b4:04:8f:87:c4:00:
3c:0b:c2:29:b1:26:7b:d9:0a:4c:28:9d:e7:72:0b:
af:ac:57:26:ff:6f:7d:23:92:0a:7c:22:b1:9b:39:
e2:63:06:bf:75:84:94:79:86:01:76:02:50:34:48:
5f:20:95:13:3a:ea:13:43:95:da:f6:13:8c:df:cd:
59:f8:1e:b8:99:4f:01:44:6d:7b:4a:eb:7c:24:34:
78:65:a8:a6:22:6f:e4:13:1a:63:a4:f8:76:18:80:
cd:fb:0e:8c:6d:8d:55:11:4c:58:0c:1f:d4:55:db:
ae:03:f4:46:a8:f1:c5:dc:dd:56:5a:a7:ea:9e:f3:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A5:3B:D2:A5:AA:40:22:6D:C1:D0:D0:4E:27:6C:B5:35:0F:44:22
X509v3 Authority Key Identifier:
keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4a:2b:5b:42:4a:de:3e:81:7c:37:b5:31:34:99:5e:30:59:
48:3a:02:bc:1b:96:b4:98:65:fa:0f:c0:85:d9:64:27:85:fd:
6c:93:54:28:c4:4f:9f:64:a8:fb:85:92:73:db:04:75:ba:80:
7d:ae:a0:72:75:19:b7:75:17:86:a0:2a:4f:92:15:ed:40:62:
e7:f2:cb:3f:96:da:2d:b3:40:bf:6a:6c:1b:d6:c8:1c:2b:4d:
a4:e8:32:e1:ce:d9:e1:a6:0c:99:bb:87:aa:fa:e1:ba:80:28:
be:36:35:70:d7:70:d4:44:e2:a5:f7:e4:b5:b9:45:9e:0d:67:
77:a2:b3:4c:de:d2:ef:19:46:50:1a:4b:f0:37:98:09:7b:3b:
62:3b:d5:56:42:51:c0:9c:8a:07:13:ec:67:51:d0:25:44:60:
98:58:2d:4b:53:63:18:0a:7c:4a:8a:1c:ea:63:58:df:a1:57:
ef:e1:f9:b5:64:5e:38:c9:c6:c6:62:b2:cd:1f:4f:ce:8f:10:
79:42:39:a9:5f:37:07:16:c1:7f:0d:2c:dc:9b:c4:22:e2:d0:
3b:29:a6:63:31:33:f7:32:5e:50:0f:58:34:25:60:3a:41:da:
d5:b5:c2:c1:13:3d:56:1b:97:8c:ae:6e:2b:c3:96:2b:c2:ae:
1c:f8:51:bc
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUY7ZEYsA0FRpVvMOe/2LNCg7JebEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDViYmRiNjI5ZmRkMGYxYzMzYmZiMWFjN2NmNDQxMjFi
YzVlNmVhZDAeFw0yNDAxMDcyMzU1MDZaFw0yNTAxMDYwMDAwMDZaMDMxMTAvBgNV
BAMTKDJFQTUzQkQyQTVBQTQwMjI2REMxRDBEMDRFMjc2Q0I1MzUwRjQ0MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gZ92CJScfauDpyMzb4K054G1
tYicM7aSEq+9dzMw/3ffCSuHtHbM2E3Vsxg2ZLFrwlUVuLpd1aVyid/aXy0H38k1
kG+y4E9Da1fThdSPkBVIINYxTSEeqpWq65eo9H0rVIJ9ZOm9niZ35cQIqXSqICJG
+LeABqy9dBSI/uOk57QEj4fEADwLwimxJnvZCkwonedyC6+sVyb/b30jkgp8IrGb
OeJjBr91hJR5hgF2AlA0SF8glRM66hNDldr2E4zfzVn4HriZTwFEbXtK63wkNHhl
qKYib+QTGmOk+HYYgM37DoxtjVURTFgMH9RV264D9Eao8cXc3VZap+qe86J3AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQULqU70qWqQCJtwdDQTidstTUPRCIwHwYDVR0j
BBgwFoAUBbvbYp/dDxwzv7GsfPRBIbxebq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTNmMDgzYjctNzgxOC00Y2NmLTg2NjMtOTE5MWY4YTg2
MTZhLzAvMDVCQkRCNjI5RkREMEYxQzMzQkZCMUFDN0NGNDQxMjFCQzVFNkVBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JidmJZcF9kRHh3enY3R3NmUFJCSWJ4
ZWJxMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTNmMDgzYjct
NzgxOC00Y2NmLTg2NjMtOTE5MWY4YTg2MTZhLzAvMzgzNDJlMzMzODJlMzIzNTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCb+MA0G
CSqGSIb3DQEBCwUAA4IBAQBqSitbQkrePoF8N7UxNJleMFlIOgK8G5a0mGX6D8CF
2WQnhf1sk1QoxE+fZKj7hZJz2wR1uoB9rqBydRm3dReGoCpPkhXtQGLn8ss/ltot
s0C/amwb1sgcK02k6DLhztnhpgyZu4eq+uG6gCi+NjVw13DUROKl9+S1uUWeDWd3
orNM3tLvGUZQGkvwN5gJeztiO9VWQlHAnIoHE+xnUdAlRGCYWC1LU2MYCnxKihzq
Y1jfoVfv4fm1ZF44ycbGYrLNH0/OjxB5QjmpXzcHFsF/DSzcm8Qi4tA7KaZjMTP3
Ml5QD1g0JWA6QdrVtcLBEz1WG5eMrm4rw5Yrwq4c+FG8
-----END CERTIFICATE-----
Generated at Tue Jan 9 20:47:14 2024 by rpki-client on console-ams.rpki-client.org