Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e20383334.roa
File: 38302e37352e3232312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Y59nEqbv49TZqUqDFgpnvXxIK38xb3eG3PZocNwsrNw=
Subject key identifier: 79:84:B9:91:84:72:8A:3E:55:CF:D4:2D:7A:7F:37:10:82:DF:C9:6A
Certificate issuer: /CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Certificate serial: 590A8EAF7A1C60FEFB027F566839FB57B225640B
Authority key identifier: 4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e20383334.roa
Signing time: Mon 19 Feb 2024 14:07:48 +0000
ROA not before: Mon 19 Feb 2024 14:02:48 +0000
ROA not after: Mon 17 Feb 2025 14:07:48 +0000
asID: 834
IP address blocks: 80.75.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 12:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0a:8e:af:7a:1c:60:fe:fb:02:7f:56:68:39:fb:57:b2:25:64:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Validity
Not Before: Feb 19 14:02:48 2024 GMT
Not After : Feb 17 14:07:48 2025 GMT
Subject: CN=7984B99184728A3E55CFD42D7A7F371082DFC96A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:c9:3f:c6:72:50:93:ab:94:cd:15:f1:ed:
b3:80:2c:78:4c:ab:fa:2a:79:5e:1e:ab:bc:b0:12:
94:58:68:44:a1:da:3e:e0:a2:3b:62:d5:ef:be:21:
8e:4d:7f:7b:e5:0e:83:22:73:41:77:c2:47:5c:a3:
02:5c:6c:fe:d4:5f:93:20:5c:ab:45:2e:10:d2:68:
5d:58:98:d0:a9:06:4c:1f:f5:72:a5:c4:a3:b9:d9:
bb:7e:5f:b9:dc:4b:21:8e:6d:74:47:16:ab:b8:0b:
91:d5:e1:22:9a:d4:71:d5:c1:83:5e:37:0f:41:e0:
f1:ac:d1:dc:b6:a4:a4:8b:27:f8:cc:3f:2b:89:2c:
15:e7:87:4f:b4:60:d4:9c:73:1c:6a:fc:7b:e5:d7:
f8:78:d3:54:a1:a6:d3:77:11:79:94:c0:92:d7:db:
f9:49:51:32:b6:81:85:00:d4:03:9e:f4:12:09:90:
66:15:02:a0:bd:6e:94:9b:a1:81:ee:be:3d:19:9f:
25:1c:61:a1:0e:55:3b:46:77:fc:ef:d1:32:72:60:
58:ba:46:97:9c:65:ed:61:c4:dd:2d:ca:5c:a4:0f:
52:de:7a:1e:e4:38:e7:98:4e:ab:02:6b:68:79:ab:
1e:18:6b:64:9d:1a:39:60:8c:f4:99:57:d0:99:2b:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:84:B9:91:84:72:8A:3E:55:CF:D4:2D:7A:7F:37:10:82:DF:C9:6A
X509v3 Authority Key Identifier:
keyid:4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:98:80:6c:2e:bd:ec:3a:6d:5b:c7:c8:2d:be:af:b3:ee:12:
65:78:84:3d:75:dd:44:05:2d:ac:df:aa:29:41:d0:79:99:f0:
53:ee:ab:60:a3:67:78:10:a9:66:2b:d0:b8:40:d2:35:fe:99:
b0:f0:9f:3d:75:f9:48:ac:af:8f:13:6c:74:84:af:fc:af:39:
bc:c4:f8:80:ff:1d:28:a8:ee:e7:db:43:d1:57:75:ac:c8:20:
c7:1e:01:31:50:09:db:4d:67:c3:43:3d:d4:e6:79:d6:5c:73:
a2:d9:41:cd:0f:3a:72:ee:fa:b7:5a:78:60:71:3f:30:a7:d4:
88:49:1c:d5:a7:76:77:68:2f:4e:29:09:0c:6c:bb:c6:11:71:
2d:a9:26:84:be:9e:dc:4e:ff:75:57:9c:69:6d:70:62:eb:6e:
81:35:f9:23:26:ee:4c:da:b1:f8:05:9f:b2:12:5f:22:69:97:
25:f7:4b:a8:1b:6a:7f:3f:40:8b:be:61:2b:c5:84:09:a7:bc:
51:73:d5:28:ce:62:3e:e9:6f:19:36:10:a5:13:16:3b:20:d7:
2b:3a:dd:51:ae:b4:7f:db:b6:3b:c4:04:36:8c:3d:68:96:1c:
89:fe:af:99:d1:5c:5e:56:fc:f5:6d:42:ba:1b:7d:0f:25:53:
fd:f0:53:24
-----BEGIN CERTIFICATE-----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Generated at Wed Mar 13 16:50:38 2024 by rpki-client on console-fra.rpki-client.org