Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3232203d3e203633303233.roa
File: 37392e39392e32342e302f32322d3232203d3e203633303233.roa (raw, json)
Hash identifier: piHscMshx4VZND1QZ7U519/5UBaX6eaSprhd66v0/Ko=
Subject key identifier: 2D:67:CE:1C:88:F7:EE:29:8B:53:F8:94:53:86:D0:4E:5F:14:59:C3
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 4E7928F62A40DFE6FFF8FEE43C43B39BD09E57A9
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3232203d3e203633303233.roa
Signing time: Wed 21 Jun 2023 10:20:12 +0000
ROA not before: Wed 21 Jun 2023 10:15:12 +0000
ROA not after: Wed 19 Jun 2024 10:20:12 +0000
asID: 63023
IP address blocks: 79.99.24.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:79:28:f6:2a:40:df:e6:ff:f8:fe:e4:3c:43:b3:9b:d0:9e:57:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Jun 21 10:15:12 2023 GMT
Not After : Jun 19 10:20:12 2024 GMT
Subject: CN=2D67CE1C88F7EE298B53F8945386D04E5F1459C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:5a:e3:18:51:c7:26:00:a8:81:ab:e2:68:
bd:83:c4:91:88:83:3c:f0:e5:77:64:4e:4f:dd:7b:
c8:ce:66:79:bf:b1:08:80:c5:cb:d1:72:e6:6f:e3:
9d:d5:64:e8:de:ab:be:2a:79:b6:88:f6:83:82:09:
cd:b6:e7:19:5f:32:4f:98:97:a8:f7:a1:d2:08:7a:
d6:d5:45:4e:39:9e:1d:6d:d3:e4:1d:d6:77:16:12:
46:c5:51:eb:0e:31:f1:17:4b:70:77:37:e2:4c:89:
e5:f6:1a:db:e9:15:9a:a1:aa:2e:8d:a0:52:89:5a:
21:10:a7:de:2e:22:6a:a3:0d:32:67:12:10:63:f8:
94:92:5d:27:7b:c6:21:57:c5:34:e1:7d:c6:81:a3:
69:61:75:b0:1f:67:b4:7b:52:28:ee:08:a4:b6:3b:
b9:67:64:bd:45:e1:01:27:0d:cf:22:0d:78:37:c3:
93:a9:41:4f:ca:e2:df:3b:a3:9c:1f:a9:c0:c2:17:
84:50:31:29:1e:66:69:96:17:2e:c6:f3:dd:73:14:
8a:62:36:86:94:d5:a0:88:78:84:5a:4f:d6:e1:c3:
e2:a3:2d:cb:d3:80:0d:0a:91:01:47:61:b7:cf:4d:
ff:a4:00:eb:80:9a:00:d5:f9:d6:c3:4e:6b:85:44:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:CE:1C:88:F7:EE:29:8B:53:F8:94:53:86:D0:4E:5F:14:59:C3
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3232203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.24.0/22
Signature Algorithm: sha256WithRSAEncryption
23:b7:ad:bf:34:d9:d9:9c:f9:ce:e2:76:e3:72:76:96:74:72:
80:83:a4:b6:9a:b3:e0:77:07:63:66:bf:1a:a4:1b:80:6a:c0:
af:f2:c0:5b:81:06:2a:e9:0f:f3:b4:a6:8e:59:53:ce:0d:5c:
6b:3f:60:fd:bf:ee:2d:0e:14:7e:0e:d9:bf:be:18:f0:97:e2:
42:ad:77:5e:47:41:21:07:ee:09:6d:bc:be:cd:37:90:18:30:
69:e4:79:f9:ec:4f:24:bf:1f:b4:49:f1:1a:1e:0b:2b:e2:99:
a4:b3:bf:0b:cc:0a:41:d9:d9:3e:6b:17:d6:ba:bf:4a:5f:47:
be:13:5c:b3:e8:99:dc:90:28:fd:66:14:41:ed:54:d5:44:db:
48:89:49:23:6d:5f:31:6b:d1:4a:ec:14:cc:86:22:05:cb:0f:
7d:32:01:35:7a:a9:72:45:79:92:1d:20:95:39:1b:e0:be:db:
d0:27:3b:18:c7:ae:61:d3:80:79:0d:d1:03:06:e1:32:87:1c:
07:4b:a6:8a:2a:c0:30:d9:6e:9e:6f:f9:74:d2:1c:88:50:fe:
75:f3:0a:7b:07:77:86:4d:d9:7d:e3:f2:38:4e:5e:44:02:23:
d2:8b:7c:7a:9b:61:a2:90:3a:d1:0c:c3:18:29:d9:4b:cf:98:
e4:8a:f3:c8
-----BEGIN CERTIFICATE-----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Generated at Sat Oct 21 00:40:50 2023 by rpki-client on console-fra.rpki-client.org