Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e203434353437.roa
File: 37392e39392e32342e302f32322d3234203d3e203434353437.roa (raw, json)
Hash identifier: IhI3Abxp+At4y8oieybgwMZNj5FLOEYZkS5ridFgCsw=
Subject key identifier: 4A:A4:52:43:37:50:CB:AC:7F:85:93:86:A8:75:4E:80:D9:FF:35:7F
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 183D93D5C4C1DBEB2C4BB040A27A6ED771BE3078
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e203434353437.roa
Signing time: Wed 05 Apr 2023 08:12:26 +0000
ROA not before: Wed 05 Apr 2023 08:07:26 +0000
ROA not after: Wed 03 Apr 2024 08:12:26 +0000
asID: 44547
IP address blocks: 79.99.24.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3d:93:d5:c4:c1:db:eb:2c:4b:b0:40:a2:7a:6e:d7:71:be:30:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Apr 5 08:07:26 2023 GMT
Not After : Apr 3 08:12:26 2024 GMT
Subject: CN=4AA452433750CBAC7F859386A8754E80D9FF357F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:2c:91:f1:38:75:a1:18:8c:d6:ac:3b:f8:
46:98:08:d1:28:86:e8:9d:8a:ac:56:24:8e:24:91:
33:37:c4:c1:75:14:07:e6:25:51:08:d5:31:ed:6b:
58:77:42:54:e9:e4:47:4a:53:16:a5:4c:86:60:71:
77:9e:3e:bf:d6:82:12:1c:75:cf:16:18:85:3c:32:
87:48:77:53:78:be:29:e1:86:28:05:4d:84:af:ee:
5d:ca:1c:44:2c:28:66:65:d7:f2:67:33:14:2d:f7:
b1:ab:39:07:f3:94:26:98:c7:47:7a:7b:bd:0d:b5:
47:6e:3b:07:32:61:2c:51:8f:05:8f:1d:c7:67:14:
cd:de:90:65:74:a1:83:3f:62:3b:2a:fa:09:6b:74:
c1:3b:fd:1e:d4:58:a4:48:22:5e:d2:9b:91:11:e8:
e3:c1:ba:6d:50:cb:51:57:5d:45:f6:56:9e:b3:77:
53:6c:41:d7:db:83:a4:e9:1c:dd:e2:94:1a:e7:46:
22:4b:aa:70:7b:08:e9:33:ce:ee:3a:66:17:cd:91:
d0:20:4b:10:be:79:60:bb:c0:34:d7:66:85:e9:59:
7b:92:1f:15:76:32:bb:df:3c:3a:f7:ea:f8:54:64:
61:2b:a7:12:89:80:8a:f7:dc:92:28:48:61:e0:c2:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:52:43:37:50:CB:AC:7F:85:93:86:A8:75:4E:80:D9:FF:35:7F
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e203434353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:b5:f3:a4:f2:99:74:ac:c0:33:bd:a0:91:f0:b2:2c:bc:65:
66:97:ac:71:ad:ad:c6:78:33:70:88:3d:f7:0a:b6:57:ba:eb:
5f:93:32:f6:a5:e0:2a:dd:1b:26:b3:11:10:fb:12:9b:c1:b3:
93:83:b8:69:30:3c:91:d7:50:e5:5c:d8:c7:98:2f:96:8b:c8:
9e:2c:6c:d4:24:b9:eb:02:1f:10:f4:88:19:dc:26:30:b3:3e:
a4:7b:54:ec:60:10:39:e5:27:e6:71:3d:ad:20:d8:94:09:7d:
59:98:e8:80:f9:e4:0d:a4:58:93:c0:77:68:d0:c7:a2:1b:fc:
52:70:e0:45:6d:df:75:07:47:f1:5b:a9:79:15:4b:f0:21:bc:
8b:01:f6:c2:21:37:82:cd:4a:d4:73:74:29:40:c7:6a:70:fa:
b3:52:fe:90:98:25:e3:41:0d:1d:b0:3a:8e:98:80:24:e8:55:
6f:09:b1:f1:26:4c:c0:dd:16:f9:64:b4:8f:b2:9e:a9:df:1d:
69:1b:83:c4:9a:59:0e:1c:d1:31:b3:ac:11:0a:2b:fe:a0:dc:
79:98:6f:fe:7b:17:61:c1:2d:19:90:13:c2:ad:a9:e9:ab:d5:
5b:7e:5e:a3:7c:81:16:32:2f:f4:fb:ec:4a:81:9c:fb:e3:5c:
a9:3f:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:57 2023 by rpki-client on console-fra.rpki-client.org