Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3232203d3e20323132323338.roa
File: 37392e39392e32382e302f32322d3232203d3e20323132323338.roa (raw, json)
Hash identifier: R8QM6o+9t9bx31DduQ1hV70be4eW0epykBZDKWIfHco=
Subject key identifier: 17:DB:13:BD:4D:33:36:90:5F:46:47:F6:A0:A3:B3:34:35:58:FD:DE
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 7CA5265A36DB6AB19FF623E60FE30B15A27439EA
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3232203d3e20323132323338.roa
Signing time: Thu 28 Sep 2023 07:41:28 +0000
ROA not before: Thu 28 Sep 2023 07:36:28 +0000
ROA not after: Thu 26 Sep 2024 07:41:28 +0000
asID: 212238
IP address blocks: 79.99.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a5:26:5a:36:db:6a:b1:9f:f6:23:e6:0f:e3:0b:15:a2:74:39:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Sep 28 07:36:28 2023 GMT
Not After : Sep 26 07:41:28 2024 GMT
Subject: CN=17DB13BD4D3336905F4647F6A0A3B3343558FDDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:8c:6f:99:1d:d7:41:18:be:b8:f1:0a:e2:
e2:67:33:40:c3:e9:11:4f:d2:03:b2:bc:f4:2b:6f:
50:99:f2:5c:4c:23:d5:1d:a1:bd:0d:87:15:56:00:
92:e3:cb:85:a7:5e:b1:47:32:6c:5f:ab:8f:10:a6:
db:85:02:63:d2:ba:57:49:75:8b:f1:08:47:91:54:
95:05:76:f2:83:11:b5:59:a6:17:88:33:d4:11:4d:
74:50:49:8f:de:f4:d1:05:0e:be:e9:4f:91:5e:da:
14:f3:11:f9:0f:66:da:0e:7c:4b:39:93:88:ce:08:
ff:b5:d1:9f:5a:60:1b:4c:c2:aa:d0:36:a2:0e:39:
69:f1:a7:96:e9:d4:9a:2f:4f:fd:13:61:47:45:03:
d8:9a:1c:47:3d:7a:c7:51:91:c5:2b:e9:2b:09:25:
1d:41:98:4c:30:5d:20:3c:ee:5e:93:81:45:4a:7e:
aa:2c:61:3d:a8:89:c3:3d:c2:ad:fc:a8:e2:41:0e:
cc:0f:1e:5c:32:6d:ac:49:f8:08:7b:e0:0b:7f:8a:
ee:fe:87:fd:41:4c:aa:5c:1d:d9:1f:e9:c5:52:72:
f5:c3:31:a0:cd:98:93:cd:08:44:d1:f9:67:22:37:
79:8c:cb:14:46:2a:37:eb:76:5f:49:58:4b:ce:c2:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DB:13:BD:4D:33:36:90:5F:46:47:F6:A0:A3:B3:34:35:58:FD:DE
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3232203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.28.0/22
Signature Algorithm: sha256WithRSAEncryption
09:d6:e0:e4:73:ea:28:10:46:c2:c2:47:7b:93:a5:7b:1d:aa:
ad:10:9a:db:7c:9a:0f:69:53:2d:e1:6e:84:5e:64:a7:12:af:
1a:e5:22:57:59:78:74:0e:d6:f4:28:6a:ca:bf:22:3b:4a:1c:
b5:2f:f6:50:fa:f8:70:c3:76:7f:c0:5a:70:53:5f:9b:59:0e:
4a:27:e7:47:1c:19:e1:4b:e8:65:ae:5f:1f:f9:81:ab:bc:f9:
f7:5f:12:72:bc:f4:0a:06:32:e2:7a:4c:d1:60:22:e8:98:f2:
c1:24:b5:0b:d4:94:dd:13:12:71:3b:0f:9e:47:a1:5a:5f:21:
ae:a3:87:85:7e:dd:d4:a5:2a:78:4e:a3:fc:5a:a1:1a:ba:80:
f1:d8:4a:4f:9b:4d:da:46:e1:ba:6c:8a:d9:ef:87:00:07:81:
bd:d3:c9:1a:c2:c3:41:24:1e:41:a8:f3:a4:d3:6d:18:d4:9b:
2f:c4:89:3f:6f:6c:cc:2e:b8:b4:ae:66:47:38:a3:5d:40:5b:
a2:fa:74:2b:2b:8a:c2:cf:cf:f9:7c:4d:3d:3e:61:04:dd:9a:
8f:4b:f0:3a:45:98:2c:ff:0a:f7:a2:18:83:df:36:cd:a3:d9:
c1:8b:9c:e6:cf:b8:2f:65:36:e2:d5:04:9d:b5:05:e7:38:ac:
48:9c:2e:a2
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfKUmWjbbarGf9iPmD+MLFaJ0OeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDdiZTlkMzUyMDc1MGVmMjgwZTczNGY0MTM0NmQwNTFj
OGIyZjUyNDAeFw0yMzA5MjgwNzM2MjhaFw0yNDA5MjYwNzQxMjhaMDMxMTAvBgNV
BAMTKDE3REIxM0JENEQzMzM2OTA1RjQ2NDdGNkEwQTNCMzM0MzU1OEZEREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCor4xvmR3XQRi+uPEK4uJnM0DD
6RFP0gOyvPQrb1CZ8lxMI9Udob0NhxVWAJLjy4WnXrFHMmxfq48QptuFAmPSuldJ
dYvxCEeRVJUFdvKDEbVZpheIM9QRTXRQSY/e9NEFDr7pT5Fe2hTzEfkPZtoOfEs5
k4jOCP+10Z9aYBtMwqrQNqIOOWnxp5bp1JovT/0TYUdFA9iaHEc9esdRkcUr6SsJ
JR1BmEwwXSA87l6TgUVKfqosYT2oicM9wq38qOJBDswPHlwybaxJ+Ah74At/iu7+
h/1BTKpcHdkf6cVScvXDMaDNmJPNCETR+WciN3mMyxRGKjfrdl9JWEvOwkShAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUF9sTvU0zNpBfRkf2oKOzNDVY/d4wHwYDVR0j
BBgwFoAU176dNSB1DvKA5zT0E0bQUciy9SQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTZhZTIxODItMjg4ZC00ZmZiLThhZjktOGMyYmNhYzE5
NzlhLzAvRDdCRTlEMzUyMDc1MEVGMjgwRTczNEY0MTM0NkQwNTFDOEIyRjUyNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3NmROU0IxRHZLQTV6VDBFMGJRVWNp
eTlTUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTZhZTIxODIt
Mjg4ZC00ZmZiLThhZjktOGMyYmNhYzE5NzlhLzAvMzczOTJlMzkzOTJlMzIzODJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk9j
HDANBgkqhkiG9w0BAQsFAAOCAQEACdbg5HPqKBBGwsJHe5Olex2qrRCa23yaD2lT
LeFuhF5kpxKvGuUiV1l4dA7W9Chqyr8iO0octS/2UPr4cMN2f8BacFNfm1kOSifn
RxwZ4UvoZa5fH/mBq7z5918Scrz0CgYy4npM0WAi6JjywSS1C9SU3RMScTsPnkeh
Wl8hrqOHhX7d1KUqeE6j/FqhGrqA8dhKT5tN2kbhumyK2e+HAAeBvdPJGsLDQSQe
QajzpNNtGNSbL8SJP29szC64tK5mRzijXUBbovp0KyuKws/P+XxNPT5hBN2aj0vw
OkWYLP8K96IYg982zaPZwYuc5s+4L2U24tUEnbUF5zisSJwuog==
Generated at Mon Nov 27 00:42:39 2023 by rpki-client on console-fra.rpki-client.org