Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3233203d3e2031323339.roa
File: 37382e32342e3132322e302f32332d3233203d3e2031323339.roa (raw, json)
Hash identifier: 84hxetwrr7eOrxofUJsikeAblC1WxiT5xqrz/Riyt+A=
Subject key identifier: EB:F4:A1:DB:3E:AC:6B:16:0C:F5:3C:09:81:83:1E:56:04:88:3C:4B
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 30F1ACB0C15B8D7C2B1D98FE20392F561323520F
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3233203d3e2031323339.roa
Signing time: Fri 02 Jun 2023 14:26:01 +0000
ROA not before: Fri 02 Jun 2023 14:21:01 +0000
ROA not after: Fri 31 May 2024 14:26:01 +0000
asID: 1239
IP address blocks: 78.24.122.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f1:ac:b0:c1:5b:8d:7c:2b:1d:98:fe:20:39:2f:56:13:23:52:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jun 2 14:21:01 2023 GMT
Not After : May 31 14:26:01 2024 GMT
Subject: CN=EBF4A1DB3EAC6B160CF53C0981831E5604883C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:e9:dc:42:f5:6e:3d:6f:43:64:f5:89:92:
aa:b6:17:58:57:ce:fb:36:a8:8b:c7:94:90:ca:a9:
28:6c:98:5c:38:e5:e2:6f:78:4a:ce:fc:63:4d:b7:
ac:66:7a:af:49:81:26:c6:b2:a5:d4:b7:58:f8:28:
12:e4:a1:ab:e0:e4:52:70:7b:e4:58:7c:50:52:e1:
14:33:93:76:01:40:79:b2:d1:f6:16:54:66:56:a4:
5a:1c:09:dc:49:6f:1f:e5:fe:aa:bd:52:b4:00:49:
a4:80:5d:cc:73:99:92:f2:eb:41:90:94:1f:43:a0:
47:7e:25:bf:66:52:fc:c9:59:e6:07:64:7f:dc:22:
0b:bf:6a:41:2a:66:b0:43:84:1f:7c:14:23:76:b9:
a0:a8:59:e7:a2:f1:2c:ff:fc:a8:76:9e:a9:78:b1:
31:6c:8a:10:23:2e:30:47:b7:21:d4:2f:b4:e7:cd:
2d:a5:4e:01:52:7a:e5:f1:4d:a9:73:d3:8e:bf:b6:
1a:f8:76:e8:99:0d:7b:fa:bb:41:69:ed:80:c0:9c:
5e:2b:12:20:3a:73:3f:b0:a0:1f:09:c1:5c:cd:8b:
15:6c:47:0d:d1:c1:34:f9:3a:5a:c8:36:9e:22:18:
76:21:5b:a3:5c:c6:4c:31:ea:ed:cb:82:b7:d5:37:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F4:A1:DB:3E:AC:6B:16:0C:F5:3C:09:81:83:1E:56:04:88:3C:4B
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3233203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/23
Signature Algorithm: sha256WithRSAEncryption
83:1c:7f:4f:7e:98:05:a6:b8:fd:88:6e:36:b6:17:7b:ba:94:
fc:61:ee:d7:34:7d:d9:ca:3c:15:cf:85:dc:ec:84:43:3c:9c:
49:1d:e1:bb:63:7f:a3:5f:2a:cb:11:72:ab:02:56:82:c1:c8:
82:a8:85:cf:3e:8a:27:ab:66:98:8c:6d:b4:fd:6d:c2:5b:0f:
8c:77:ac:78:62:26:08:f7:57:07:56:3c:da:e6:50:be:83:41:
c2:50:ed:4b:56:bc:da:4b:10:ec:03:a4:40:4a:49:25:42:5a:
b6:f7:9c:e6:5b:71:2b:f6:1e:92:21:98:06:64:5d:41:43:49:
54:ea:be:5a:6d:4f:d1:6c:d3:bc:b3:d4:50:22:be:01:80:21:
c3:39:9a:3f:1f:1c:b7:04:90:1e:71:26:16:75:aa:8c:53:44:
b3:b1:0a:ce:35:c4:6f:ec:1a:10:35:f9:18:bf:50:4f:1f:73:
86:95:eb:1b:ae:96:a0:b0:26:e8:6d:73:48:97:70:d5:1a:14:
4d:cf:09:74:bc:81:85:86:73:13:25:3c:3b:96:eb:e4:e3:6b:
94:18:d5:9b:6f:3f:a3:f3:47:a7:a5:ab:35:91:b7:7f:5c:cc:
b5:9e:3f:5b:21:44:d2:ee:3b:01:b0:03:0b:13:30:8e:17:74:
56:e9:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org