Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/38392e3130372e392e302f32342d3234203d3e20383334.roa
File: 38392e3130372e392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: fmVj5aHoECx91eNaUUV5HLfbioKq63JuEqOg6ZfvUPM=
Subject key identifier: 6F:24:3C:12:85:6B:33:32:11:5E:7C:6E:08:B6:1B:31:9F:B0:48:3B
Certificate issuer: /CN=80e9a2846ec14a67d2c3e775614a574c10ecd0ab
Certificate serial: 7AD3812F077E2192CCE9983A003786DCDE420ED2
Authority key identifier: 80:E9:A2:84:6E:C1:4A:67:D2:C3:E7:75:61:4A:57:4C:10:EC:D0:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOmihG7BSmfSw-d1YUpXTBDs0Ks.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/38392e3130372e392e302f32342d3234203d3e20383334.roa
Signing time: Sat 16 Sep 2023 00:00:05 +0000
ROA not before: Fri 15 Sep 2023 23:55:05 +0000
ROA not after: Sat 14 Sep 2024 00:00:05 +0000
asID: 834
IP address blocks: 89.107.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d3:81:2f:07:7e:21:92:cc:e9:98:3a:00:37:86:dc:de:42:0e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e9a2846ec14a67d2c3e775614a574c10ecd0ab
Validity
Not Before: Sep 15 23:55:05 2023 GMT
Not After : Sep 14 00:00:05 2024 GMT
Subject: CN=6F243C12856B3332115E7C6E08B61B319FB0483B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:80:23:e3:8e:80:c4:86:e1:e9:42:36:ab:
11:1f:9c:e4:81:e0:56:49:10:56:54:7c:09:74:27:
61:76:f7:81:02:b7:ef:5f:3b:3a:d9:d1:e7:25:db:
aa:61:7c:8e:30:3b:1c:a3:db:ee:47:6f:79:a4:90:
08:d3:38:49:c4:2d:90:c2:1c:99:38:70:f7:6e:3d:
94:b7:ee:5d:49:38:ae:85:cd:1b:7d:c5:07:98:07:
c4:b8:93:eb:79:49:e7:61:a1:5a:0f:80:9f:fb:7e:
d7:02:6f:ba:35:24:2c:40:24:88:02:36:5f:5d:b0:
21:b2:95:d1:fc:24:4f:56:6f:f7:c7:f6:21:5e:be:
08:9e:7e:af:d7:9c:11:48:70:7a:22:c7:4b:17:8e:
e1:62:95:fe:23:63:e5:0a:65:11:aa:e9:d3:e1:37:
43:b7:d5:e2:fa:62:1f:34:f1:18:88:05:25:52:85:
b3:93:c9:e6:4f:36:ca:cc:ed:d7:d6:cc:8e:8f:78:
85:cb:22:67:72:5c:5f:b0:da:70:d9:01:02:e9:ef:
8c:a1:27:95:43:33:7d:63:6a:c0:b5:5c:c1:c8:4e:
d6:68:cd:ac:dc:4f:72:35:69:4a:d7:44:af:ae:98:
05:08:29:59:a1:dc:bb:31:58:ec:e3:dd:41:fb:65:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:24:3C:12:85:6B:33:32:11:5E:7C:6E:08:B6:1B:31:9F:B0:48:3B
X509v3 Authority Key Identifier:
keyid:80:E9:A2:84:6E:C1:4A:67:D2:C3:E7:75:61:4A:57:4C:10:EC:D0:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/80E9A2846EC14A67D2C3E775614A574C10ECD0AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOmihG7BSmfSw-d1YUpXTBDs0Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/38392e3130372e392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:62:f0:3c:83:fe:61:17:e2:64:d9:5a:3a:c3:a9:58:26:bf:
a9:5a:42:d4:c2:a4:94:72:9e:5c:e3:06:e2:73:3d:86:15:b3:
71:04:44:84:1f:9b:a4:f2:a8:62:41:d8:2a:fd:27:d2:80:76:
52:04:f6:42:d6:07:b7:10:80:80:ef:59:3b:95:93:d0:cd:e6:
fa:8c:12:5d:33:d0:a4:c5:24:66:d8:e6:90:12:f7:bb:19:73:
03:e7:2d:9c:50:74:e1:54:0d:20:e3:d2:96:2c:11:56:4a:67:
e9:ee:b4:b8:10:a0:94:60:ab:f6:81:f8:a9:4d:40:bb:64:aa:
50:a4:9e:bd:f6:37:da:ab:fd:cd:9a:b4:00:e6:3b:96:10:f2:
0f:88:9f:37:5f:80:38:94:39:07:b9:42:7b:76:ad:71:c2:40:
c2:34:6c:18:25:07:7e:ce:7e:f2:3c:7b:31:1b:be:0e:d2:fd:
68:e7:dd:8b:19:25:30:b8:81:4c:b0:ab:24:6a:fa:f7:59:30:
a9:9a:34:0e:84:4f:d8:3f:bc:63:69:6a:af:3d:be:71:66:43:
a5:7f:40:3d:71:d6:b6:18:f1:e9:93:0e:22:6c:86:1a:03:9a:
f4:77:af:90:9e:58:ea:29:8b:e5:ba:bc:41:d2:7a:04:b8:e4:
60:a5:3f:d4
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 18 13:07:48 2023 by rpki-client on console-ams.rpki-client.org