Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e20383334.roa
File: 37392e39392e32342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: kPS2cA9E+js7az35iesXOpsWcwALNcL5bREHyE6HAdU=
Subject key identifier: 1E:CE:E8:BF:5A:12:31:AD:45:07:26:C8:42:32:C5:C8:06:A2:4B:5A
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 04C1263DB25B5BBD5DEC04DF9A68061B544DABB8
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e20383334.roa
Signing time: Fri 01 Dec 2023 00:00:04 +0000
ROA not before: Thu 30 Nov 2023 23:55:04 +0000
ROA not after: Fri 29 Nov 2024 00:00:04 +0000
asID: 834
IP address blocks: 79.99.24.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c1:26:3d:b2:5b:5b:bd:5d:ec:04:df:9a:68:06:1b:54:4d:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Nov 30 23:55:04 2023 GMT
Not After : Nov 29 00:00:04 2024 GMT
Subject: CN=1ECEE8BF5A1231AD450726C84232C5C806A24B5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:e1:11:dc:32:9b:b2:09:c4:1c:69:e6:17:
0d:2a:c5:52:4c:2d:b1:33:ff:d1:55:7d:9d:74:ec:
f5:5b:09:37:f9:d4:1a:35:1f:f1:41:40:d8:6e:65:
7f:e5:97:2d:24:49:6d:9d:17:1d:14:02:e1:07:16:
ea:99:b4:19:23:0a:51:d5:fd:b6:1c:9b:e1:13:79:
89:b1:53:be:fb:df:b8:c8:15:74:26:84:b8:28:91:
0c:f5:e6:b2:07:63:50:9a:38:fb:a7:a9:ad:83:26:
ee:88:42:c0:98:41:70:da:b9:6c:f1:55:83:4e:69:
59:91:eb:61:16:23:80:ec:32:05:52:cb:94:28:09:
73:f9:7f:ec:49:d1:93:b1:47:1c:52:17:48:d3:ad:
af:65:55:54:37:2e:a6:9e:5c:b5:2e:dd:60:81:2a:
dd:e3:a2:23:56:b6:db:01:d8:bb:70:d9:03:6f:06:
64:e1:1f:4a:42:d3:fe:c7:fa:4d:af:19:45:6e:11:
3e:db:2f:e2:e2:14:0a:55:f2:ba:1f:f4:79:6f:fa:
44:33:03:11:cf:2e:9c:8c:74:01:65:7c:7f:63:12:
38:d0:c7:f7:88:03:65:8d:de:51:9b:b0:a4:3a:17:
e0:2a:4b:e5:f2:e0:28:e7:5d:48:a3:85:9b:63:b4:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:E8:BF:5A:12:31:AD:45:07:26:C8:42:32:C5:C8:06:A2:4B:5A
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:e7:2b:c9:05:05:b8:18:b7:a0:f3:0b:28:62:45:95:aa:73:
54:84:a5:bb:c3:35:66:54:b5:54:16:f0:43:3a:f0:96:51:7b:
cf:cb:ad:d2:8d:45:5b:59:d6:b2:01:9e:cc:ca:76:0f:a8:aa:
d3:0b:e9:96:51:e2:96:34:8b:62:df:cf:c1:15:2e:49:10:bf:
74:d1:99:02:0f:ba:3c:4e:09:06:59:9c:34:dc:1c:6e:e0:82:
59:4a:9c:f0:91:08:97:d2:8c:36:93:13:fd:a2:db:c7:b1:a9:
2a:4e:28:9a:9e:e2:d0:38:f1:4a:0e:75:76:c4:de:ce:08:e5:
d5:9d:54:aa:4b:2d:62:7a:8f:e8:98:41:5e:5f:e2:40:ab:1e:
bf:c0:08:c2:12:94:17:e2:44:81:4a:5d:cf:a3:4b:28:0f:ae:
87:1a:87:e2:b1:9f:ad:73:96:08:fb:f0:3b:f0:c8:5d:a7:3a:
fa:72:dd:3e:34:0f:86:75:be:cd:18:c1:8b:58:03:1e:13:7d:
2c:db:7e:ad:c8:cd:50:b9:20:71:52:ce:2e:56:e4:b8:13:cc:
c9:57:77:ab:d0:9f:5b:b5:44:07:2b:c9:70:a8:c7:56:d0:bc:
82:90:87:9e:cc:c8:a8:f2:be:17:23:70:d5:3d:b7:25:4f:8f:
00:8e:6d:76
-----BEGIN CERTIFICATE-----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Generated at Mon Dec 11 23:29:44 2023 by rpki-client on console-fra.rpki-client.org