Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/38392e3130372e392e302f32342d3234203d3e20323037323739.roa
File: 38392e3130372e392e302f32342d3234203d3e20323037323739.roa (raw, json)
Hash identifier: YwRu4Dh3Ascnl9Ug2Vy0uw9rpaOM2/5UVCw/mzqv/ZI=
Subject key identifier: 20:07:1E:94:E9:08:37:D9:B2:5A:5F:A4:77:47:43:52:A5:07:DD:99
Certificate issuer: /CN=80e9a2846ec14a67d2c3e775614a574c10ecd0ab
Certificate serial: 25D28FF9493C5F0A3D392FB618B8EE415E0EB551
Authority key identifier: 80:E9:A2:84:6E:C1:4A:67:D2:C3:E7:75:61:4A:57:4C:10:EC:D0:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOmihG7BSmfSw-d1YUpXTBDs0Ks.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/38392e3130372e392e302f32342d3234203d3e20323037323739.roa
Signing time: Wed 22 Mar 2023 20:02:21 +0000
ROA not before: Wed 22 Mar 2023 19:57:21 +0000
ROA not after: Wed 20 Mar 2024 20:02:21 +0000
asID: 207279
IP address blocks: 89.107.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d2:8f:f9:49:3c:5f:0a:3d:39:2f:b6:18:b8:ee:41:5e:0e:b5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e9a2846ec14a67d2c3e775614a574c10ecd0ab
Validity
Not Before: Mar 22 19:57:21 2023 GMT
Not After : Mar 20 20:02:21 2024 GMT
Subject: CN=20071E94E90837D9B25A5FA477474352A507DD99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:ae:dd:b2:91:90:f0:82:11:41:f4:b5:59:
d1:31:7c:7a:de:d4:fd:92:d6:c1:13:28:cb:98:f3:
56:79:91:d5:33:69:d4:e0:be:38:0a:8a:78:07:1f:
9b:f2:a4:88:95:0c:73:60:50:91:76:bf:5c:c7:71:
9b:94:11:6e:a9:d1:cb:20:30:35:fe:34:1d:27:09:
9f:57:8e:20:44:b7:ce:4c:28:7d:37:1f:f0:ef:2b:
2c:71:f3:d3:07:97:a9:0f:7d:b1:92:7e:53:78:51:
6d:e5:c8:07:38:37:c3:97:2f:27:11:d5:81:f6:f5:
d0:3b:49:6b:d5:93:48:e1:d3:2b:e2:6e:8d:f5:ef:
36:2e:05:34:cd:d6:8b:34:d3:be:af:86:82:8c:23:
b8:e0:3a:32:49:7a:c8:a5:5d:34:5f:39:0d:51:d4:
f3:90:5a:77:62:f8:04:ae:e7:5f:e9:24:ee:c7:05:
a3:85:13:d4:3c:38:6b:9a:30:8d:0b:79:1b:21:67:
4e:c6:e2:b6:ce:11:cd:61:2e:fb:3a:72:b5:33:db:
8c:89:58:74:44:7f:b7:6a:91:11:e8:7c:00:c4:c3:
5c:67:e2:92:63:23:a8:09:ad:39:11:21:97:25:35:
54:51:96:e4:34:09:28:3e:c9:4d:9d:cd:d1:4d:a2:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:07:1E:94:E9:08:37:D9:B2:5A:5F:A4:77:47:43:52:A5:07:DD:99
X509v3 Authority Key Identifier:
keyid:80:E9:A2:84:6E:C1:4A:67:D2:C3:E7:75:61:4A:57:4C:10:EC:D0:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/80E9A2846EC14A67D2C3E775614A574C10ECD0AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOmihG7BSmfSw-d1YUpXTBDs0Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/38392e3130372e392e302f32342d3234203d3e20323037323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a5:a0:c2:b8:25:35:78:4e:f8:d0:51:53:29:3b:79:d2:9e:
78:50:6c:9c:c2:ec:cc:9a:08:09:3e:24:9b:ee:1f:d7:d1:05:
55:a3:e2:b7:00:f8:a1:50:e0:8d:6f:de:33:41:95:90:cc:5c:
aa:87:b5:bb:5a:33:f6:c7:b5:5b:84:d5:17:44:eb:3d:1f:27:
72:e7:08:1e:58:88:fa:d1:a5:27:d6:22:db:b5:c1:e2:72:88:
cb:20:8a:a9:40:a2:17:a4:5f:15:3f:4e:d5:fa:cc:b7:5d:21:
31:00:e7:54:83:69:bf:89:15:3b:b5:f7:3b:1c:06:0d:94:58:
2f:0c:0a:9c:44:2c:fe:4d:49:c2:76:f9:55:9a:1c:fc:6f:2a:
71:f6:06:56:1c:7a:54:40:c8:16:e9:e4:0a:82:0a:92:84:24:
8f:f0:ed:93:9f:24:72:de:f9:e8:d7:db:e2:cf:8b:f3:87:1e:
1d:8a:09:4c:7d:68:69:59:51:3f:a0:cb:8d:32:3c:84:13:f2:
bc:18:94:d9:97:63:52:76:49:c1:e1:f5:68:b6:a7:f9:6c:ef:
5f:95:93:5e:a1:52:d2:e3:64:74:ce:d0:02:89:a2:52:a2:98:
9a:f3:c5:8f:4a:fd:af:36:6d:47:44:b8:17:70:f8:fe:4c:37:
29:9b:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org