Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3234203d3e2031323339.roa
File: 37382e32342e3132322e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier: Gzr4a7B2m9LzuQsOzjCEP02Eo7CKMiNZdvnT7v/Cf3o=
Subject key identifier: 60:52:A1:86:A6:D2:98:DC:72:0D:75:78:67:E1:6C:C2:A4:99:92:7D
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 1910335A11B7C513D76B16FE8D7ABFED58C5D3F9
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3234203d3e2031323339.roa
Signing time: Wed 07 Jun 2023 22:51:51 +0000
ROA not before: Wed 07 Jun 2023 22:46:51 +0000
ROA not after: Wed 05 Jun 2024 22:51:51 +0000
asID: 1239
IP address blocks: 78.24.122.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:10:33:5a:11:b7:c5:13:d7:6b:16:fe:8d:7a:bf:ed:58:c5:d3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jun 7 22:46:51 2023 GMT
Not After : Jun 5 22:51:51 2024 GMT
Subject: CN=6052A186A6D298DC720D757867E16CC2A499927D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:ed:26:72:fa:bb:22:25:74:b0:8d:9c:8e:
a0:d0:fd:51:20:b3:33:f3:b1:64:ce:4c:80:28:bf:
e1:59:02:6a:fe:12:6f:61:39:52:a4:91:3c:ed:53:
e3:8b:0d:7c:92:dd:55:d6:91:ea:cb:3a:fb:04:2d:
4c:0a:54:07:93:85:d3:18:e4:6e:b6:21:51:3b:72:
24:01:dd:e6:a5:43:ec:a6:d1:2f:ef:51:b6:74:63:
ee:8b:d2:99:ef:ce:ae:53:be:93:22:0e:62:82:a2:
0d:0b:6a:45:1b:51:98:4c:2e:71:b1:62:1e:55:cd:
16:67:38:dc:65:57:ba:18:2b:f8:10:46:d4:ee:ae:
bf:27:c3:13:9c:3f:6a:bb:82:75:26:31:e2:45:47:
33:d8:5f:e2:38:8f:bb:1f:b4:b2:c4:fa:5a:11:75:
5f:03:5b:af:ed:8f:be:43:64:1d:61:b9:41:6b:86:
b0:e4:a5:70:2c:ec:27:04:73:ac:b4:90:52:5a:c5:
62:6a:60:7b:b4:de:1f:d3:a5:85:a5:47:a9:8f:04:
f3:a2:df:cf:6c:79:4f:4d:84:71:8a:8c:12:33:45:
fe:8c:3b:15:85:0a:24:30:ef:a6:57:16:c8:e5:0d:
c1:2b:63:64:5b:b1:4a:f7:4a:38:bb:90:81:61:dc:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:52:A1:86:A6:D2:98:DC:72:0D:75:78:67:E1:6C:C2:A4:99:92:7D
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/23
Signature Algorithm: sha256WithRSAEncryption
23:ee:18:46:9c:5b:26:92:b3:36:33:0b:69:69:cf:90:4f:8a:
79:ba:59:1c:9f:c4:e3:76:c1:50:f6:95:8e:4d:d9:07:1c:3a:
b9:87:05:27:ac:c9:ab:a5:bd:3b:d2:64:d9:2c:78:b7:56:f8:
43:d4:b4:7c:00:73:96:31:28:4b:f5:92:1f:9b:f1:59:f6:6c:
98:92:a3:85:09:e4:bf:e6:16:b2:53:f4:d8:9f:a7:2f:6a:14:
5d:39:d3:91:13:d5:75:01:f8:12:55:2e:22:d0:b1:84:c6:7a:
3a:19:7b:48:c1:ca:37:0f:6f:41:53:79:a3:d4:a4:b1:42:dd:
aa:13:ef:3a:41:98:94:10:a1:aa:dd:e3:eb:b5:27:61:fb:5e:
78:c0:ab:c6:e8:27:c6:16:d1:6f:ad:cb:e9:d2:e9:4a:aa:ec:
88:0b:fc:d2:07:d9:d6:ff:ef:ee:aa:a7:20:3d:38:df:74:96:
6d:ec:20:c5:94:62:14:7a:b2:42:68:c0:fe:ac:d0:58:ef:d6:
4c:a8:ef:04:4a:da:2c:85:66:ae:33:ce:6e:7d:f0:61:53:dc:
69:86:80:af:55:70:6b:fd:c9:12:b9:80:e9:cf:6e:62:5c:65:
ba:45:65:f7:c7:e3:f3:06:7f:86:ac:5b:77:8f:e7:4b:8f:40:
e1:3c:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org