Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e382e302f32322d3232203d3e203135343139.roa
File: 38392e3131362e382e302f32322d3232203d3e203135343139.roa (raw, json)
Hash identifier: VoxxKvjy5MCAxifY1h2FGuJrxRLVQ8jV4sbjA+lMcDU=
Subject key identifier: 21:39:00:E0:CD:8E:17:63:85:3E:7A:6C:24:60:E2:BC:73:FB:60:FA
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 53F820CD4A3CCF5180FF8C4F8AAF547785D0D144
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e382e302f32322d3232203d3e203135343139.roa
Signing time: Fri 07 Jun 2024 09:01:53 +0000
ROA not before: Fri 07 Jun 2024 08:56:53 +0000
ROA not after: Fri 06 Jun 2025 09:01:53 +0000
asID: 15419
IP address blocks: 89.116.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 12 Nov 2024 12:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f8:20:cd:4a:3c:cf:51:80:ff:8c:4f:8a:af:54:77:85:d0:d1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Jun 7 08:56:53 2024 GMT
Not After : Jun 6 09:01:53 2025 GMT
Subject: CN=213900E0CD8E1763853E7A6C2460E2BC73FB60FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:94:13:39:59:2b:ec:a1:3e:36:dd:2a:29:
52:31:f7:77:00:52:90:e8:35:1d:e7:2b:58:e6:9d:
e5:95:29:e2:81:3f:f8:eb:83:7d:3a:a0:a4:17:22:
18:dc:e1:43:13:4d:3b:aa:2f:aa:0d:c9:81:de:9e:
4d:2e:3d:d0:37:f7:f0:10:67:d4:3b:cd:30:1c:ba:
ce:e5:8f:f0:5d:42:6b:77:81:4e:13:4f:cd:b8:8d:
60:d3:3e:c2:5f:27:6c:eb:01:9d:bc:85:aa:03:c6:
07:50:0c:cf:b7:b1:71:a7:58:72:2a:d8:33:35:e3:
d8:f3:d6:73:19:d7:46:0c:bb:5d:98:2f:f1:5e:6f:
46:42:3f:0d:d3:12:cf:0c:76:0c:7d:13:cf:74:c1:
8b:b2:e5:33:de:dc:70:de:be:ff:bb:f9:8b:88:93:
f6:14:13:f3:23:4d:9f:90:50:c3:77:be:ee:45:ca:
8a:dc:8d:0e:46:d6:9f:be:36:53:9c:ff:2c:39:12:
92:8d:67:41:75:02:b5:45:c7:05:4b:fd:fb:20:aa:
42:14:90:94:1c:4a:6d:22:11:92:b4:62:68:3c:9e:
08:af:07:41:16:35:26:88:27:45:b8:86:e5:23:37:
7a:51:e5:64:3e:aa:ba:e2:ac:03:b1:d8:b3:9e:7b:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:39:00:E0:CD:8E:17:63:85:3E:7A:6C:24:60:E2:BC:73:FB:60:FA
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e382e302f32322d3232203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.8.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:71:32:e3:66:c7:9a:fe:1c:63:a2:90:3f:4a:ab:56:bf:f7:
29:66:54:db:64:94:42:f8:85:5f:60:cf:bd:d0:52:c7:73:16:
7e:7e:1d:6b:f6:19:69:d7:76:88:0f:32:af:cc:ab:e9:ba:d2:
46:c9:25:f1:71:1d:67:20:95:64:dd:6b:a0:d8:c8:2f:15:c1:
0b:8f:aa:b3:a8:2e:18:39:ac:17:6d:7e:7f:4a:53:16:57:d4:
5b:96:67:0e:de:e5:a8:d9:ed:7e:68:2c:50:9d:08:2a:00:a5:
85:09:7f:60:9b:0b:8d:3f:45:69:3c:9f:3a:73:3d:ad:7d:f5:
b2:24:ab:8a:b5:29:f9:16:08:75:34:a7:1a:7f:e5:94:8e:95:
cd:d2:e0:d7:12:ae:59:72:3f:e0:a5:bc:e6:e8:c8:fb:12:ad:
25:ad:fe:e3:f4:76:5f:c8:33:bb:4e:aa:07:7c:92:bf:0c:e5:
04:4e:a8:6a:25:f4:01:1b:b8:ad:18:b1:68:57:d8:8f:5f:9a:
32:dd:1f:67:41:17:35:11:f9:32:eb:9c:c0:1f:57:ef:63:e2:
6c:c6:3d:4d:93:bf:ca:68:96:6b:9d:fe:bb:97:3f:1f:81:4e:
dc:e5:a2:13:0d:0e:06:24:8a:48:38:b7:8d:e8:d3:32:7e:63:
3b:d3:ef:fb
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 12 16:12:38 2024 by rpki-client on console-fra.rpki-client.org