Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e203231383539.roa
File: 37392e39392e32342e302f32322d3234203d3e203231383539.roa (raw, json)
Hash identifier: pJIFVDM3/lCdspJgl3RZwShA367dMtYFbJ3t0YJLaq4=
Subject key identifier: 0D:47:D2:7F:07:DA:E6:C8:8F:F7:20:80:1A:0F:44:C0:52:86:4C:FD
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 30EA7880A77CB75500BDF781546F7D85644B2A32
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e203231383539.roa
Signing time: Wed 01 Nov 2023 14:56:53 +0000
ROA not before: Wed 01 Nov 2023 14:51:53 +0000
ROA not after: Wed 30 Oct 2024 14:56:53 +0000
asID: 21859
IP address blocks: 79.99.24.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ea:78:80:a7:7c:b7:55:00:bd:f7:81:54:6f:7d:85:64:4b:2a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Nov 1 14:51:53 2023 GMT
Not After : Oct 30 14:56:53 2024 GMT
Subject: CN=0D47D27F07DAE6C88FF720801A0F44C052864CFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:be:5d:9d:29:52:33:c9:f0:f4:56:94:8d:
68:33:42:bd:ee:00:51:d7:f7:ad:2a:5b:1f:7b:74:
04:25:2e:f8:e6:48:47:b2:db:d1:04:74:b0:60:af:
e2:32:2b:9c:bd:0f:76:4a:39:d3:71:83:66:81:af:
39:18:3b:78:8d:ab:0a:68:e9:f8:df:31:06:af:f4:
1b:f6:80:f7:df:2b:ce:76:fa:90:55:be:aa:51:3a:
4a:e2:7f:43:d2:47:72:b3:6a:a1:e5:56:6d:1d:e2:
fd:fb:1d:de:aa:40:1e:25:58:22:13:a5:30:f5:35:
4e:48:99:76:7b:12:0f:d3:54:99:91:5d:38:7c:6b:
0b:29:12:c2:f4:8a:d5:5b:bf:de:3a:f7:12:37:89:
38:4c:f2:e2:14:c9:a1:df:4b:99:4b:4b:5d:4f:dc:
79:16:86:d5:86:28:d9:5a:6b:34:a4:65:d5:d8:a3:
a0:96:5e:18:f9:3a:e5:ae:45:05:4b:47:c3:56:d6:
d6:2e:43:85:15:b8:6e:55:2f:f3:d7:43:a5:59:9e:
bd:b1:7c:ef:bc:d9:60:77:36:82:39:6d:7f:15:3d:
fe:b6:1a:8b:e8:3c:f7:ac:d8:d8:56:d0:71:e0:b5:
e0:e3:3b:22:59:99:19:6e:a6:99:f0:18:fc:0d:7c:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:D2:7F:07:DA:E6:C8:8F:F7:20:80:1A:0F:44:C0:52:86:4C:FD
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:47:97:21:f3:22:4e:aa:d6:59:d2:90:8d:ab:a8:ce:d9:ac:
39:8e:e7:d7:8d:e4:cb:d9:2e:b9:9f:24:b5:33:96:e4:e1:4e:
96:18:ae:68:27:95:36:92:43:e2:99:73:94:12:95:92:b5:bc:
aa:6a:52:bb:02:49:3d:20:31:4d:6a:95:57:8a:13:37:ac:3b:
9a:b7:7a:68:44:25:2b:27:20:d9:59:64:36:4f:e0:f2:06:8d:
76:b6:b7:34:c6:ad:01:8c:9d:83:4b:ca:d6:9b:e0:54:b4:13:
5f:6b:71:6e:5f:42:13:80:dc:8f:94:0b:b8:d3:50:32:53:6b:
dc:7a:be:6e:96:4a:58:35:16:f1:71:2c:85:da:e1:30:64:d4:
48:2c:c3:68:b1:0a:20:04:0d:48:a8:90:ce:d6:1d:c4:70:90:
2c:bc:f1:ca:c8:85:4c:39:59:6c:4e:2c:b1:f0:9c:72:83:e2:
88:15:3d:62:f0:b9:24:98:eb:cc:d0:b4:af:5c:9f:7b:98:1b:
6c:2d:09:f8:cb:c1:f8:6d:3b:47:07:50:f9:6f:fe:53:bb:85:
7f:96:c3:c5:cf:bc:dd:13:35:ec:10:ad:d4:99:da:c0:88:10:
af:e9:ef:e2:cf:68:25:1e:df:07:f5:aa:e4:6e:77:b4:60:35:
c4:d3:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 00:26:15 2023 by rpki-client on console-fra.rpki-client.org