Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3234203d3e20383334.roa
File: 37392e39392e32382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 4u3gWK2itsxCNeCvbLwgk/UYmOG5Txu3ZOt6naA5iuA=
Subject key identifier: DE:79:BA:39:21:93:C3:D8:A9:96:AC:70:E6:AE:A2:2E:00:A7:DA:60
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 719B4DB2F8A6328341C17F4BC4A335314E18A474
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3234203d3e20383334.roa
Signing time: Mon 27 Nov 2023 00:00:06 +0000
ROA not before: Sun 26 Nov 2023 23:55:06 +0000
ROA not after: Mon 25 Nov 2024 00:00:06 +0000
asID: 834
IP address blocks: 79.99.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9b:4d:b2:f8:a6:32:83:41:c1:7f:4b:c4:a3:35:31:4e:18:a4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Nov 26 23:55:06 2023 GMT
Not After : Nov 25 00:00:06 2024 GMT
Subject: CN=DE79BA392193C3D8A996AC70E6AEA22E00A7DA60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:31:a3:05:bb:d2:0a:0b:9d:13:d9:31:62:
9a:28:c0:e9:0d:c9:65:54:0a:b9:5c:c8:e4:f7:aa:
6e:25:b9:04:d7:dc:bc:b5:c5:65:58:b7:c0:10:f1:
fd:48:f5:2f:32:be:fb:1d:96:3d:10:27:c9:4f:c2:
f0:14:d9:c3:23:dd:ac:0f:5e:55:09:ea:45:fa:b2:
60:75:4d:e2:ba:2a:18:a2:a9:98:a3:e2:d7:ff:2b:
4d:48:da:a3:80:d6:4e:b6:98:82:11:85:04:ef:32:
e3:ae:06:31:ba:8a:3f:84:46:c5:e9:14:b4:b5:44:
18:c6:d1:22:30:09:1c:fb:23:94:f4:3a:e2:61:6d:
44:d8:87:3a:bb:c6:e1:6a:48:87:59:2f:2f:f8:6e:
ec:3b:28:33:27:ee:3b:34:30:43:4a:a4:b2:70:41:
9b:f3:65:7a:80:ef:9f:48:f6:0b:02:a8:13:9f:f0:
24:19:94:83:60:14:28:ab:98:6b:3b:ad:7d:66:02:
48:09:a7:b5:dc:93:03:e9:5f:06:55:7f:d4:a9:1a:
31:44:a8:01:f6:4f:bf:19:fc:38:58:5a:12:9e:e1:
ac:6e:e2:22:4b:ec:05:d6:d1:5e:c7:78:71:bf:ef:
08:09:6f:cd:62:60:1f:10:4b:47:57:51:2c:c8:a7:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:79:BA:39:21:93:C3:D8:A9:96:AC:70:E6:AE:A2:2E:00:A7:DA:60
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.28.0/22
Signature Algorithm: sha256WithRSAEncryption
87:54:e6:77:1d:c5:43:a9:65:09:48:56:59:ab:2d:07:08:57:
9e:41:b6:43:bb:ae:bc:1f:b4:e7:0d:2e:8e:92:69:f6:3e:8e:
8b:1a:90:1d:7f:da:df:bc:51:55:c3:a8:37:f9:aa:84:86:86:
d4:f4:7a:f6:18:b6:4e:51:dd:b1:25:aa:15:3d:3d:c5:e4:ca:
7b:01:49:ad:58:f2:07:a8:71:ba:6e:d8:21:63:b6:b7:f6:a2:
13:4c:bc:5a:56:0b:4e:f2:81:4b:ac:6c:d2:c7:75:02:e3:4a:
00:d0:94:a1:02:7c:64:3f:48:5f:e4:51:5f:74:d9:c8:6a:ed:
41:25:50:79:2c:31:e2:cb:88:68:3d:38:1b:fd:7b:b1:87:f2:
1b:8c:d5:c5:69:2f:60:c2:e4:65:5e:ee:7e:04:2a:38:2c:91:
67:c1:2f:94:28:53:7e:c9:7d:85:36:f4:13:de:d0:80:2b:f3:
55:2e:48:bd:c2:61:d0:08:d3:0b:9a:2f:1d:3f:ab:ef:3e:9a:
33:7f:08:32:9b:fb:19:fe:7c:d1:1d:a7:22:9e:70:8f:3e:a2:
53:8e:d5:e8:77:67:78:bb:b8:c8:ce:8a:1e:82:b0:21:f4:0e:
3c:60:eb:7f:91:b1:3d:47:1c:8d:45:ba:0c:d3:02:dc:42:95:
cf:b1:8f:11
-----BEGIN CERTIFICATE-----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Generated at Fri Dec 8 10:58:50 2023 by rpki-client on console-fra.rpki-client.org