Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3234203d3e20313734.roa
File: 37382e32342e3132322e302f32332d3234203d3e20313734.roa (raw, json)
Hash identifier: QqRlW2PmdWU7OX5LtB5NcoSDOuPvqZo6/HfVbTigeYk=
Subject key identifier: 7F:81:FA:00:F3:3D:8C:32:BB:B8:C8:7C:A8:3F:18:4F:76:41:16:86
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 3905938026438065A9787F0929E3878B57E47B2A
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3234203d3e20313734.roa
Signing time: Wed 07 Jun 2023 17:18:55 +0000
ROA not before: Wed 07 Jun 2023 17:13:55 +0000
ROA not after: Wed 05 Jun 2024 17:18:55 +0000
asID: 174
IP address blocks: 78.24.122.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:05:93:80:26:43:80:65:a9:78:7f:09:29:e3:87:8b:57:e4:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jun 7 17:13:55 2023 GMT
Not After : Jun 5 17:18:55 2024 GMT
Subject: CN=7F81FA00F33D8C32BBB8C87CA83F184F76411686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c1:10:89:c5:1d:a8:1d:bb:3b:8c:33:ec:6b:
94:8c:4a:6c:97:13:45:fd:dc:b1:ae:ac:d1:e0:cb:
d6:b2:08:8b:64:d0:55:cf:de:07:74:aa:15:5a:75:
c4:db:ed:d3:94:dc:c9:62:4d:a8:3a:a1:6e:c6:a4:
18:60:f2:01:6f:cd:90:09:6c:2b:11:64:25:e3:65:
7a:fa:a9:b4:c2:26:6c:49:d7:c4:76:46:06:65:86:
c6:52:ad:92:b5:11:45:ad:77:29:3a:52:78:d6:91:
c3:ce:6c:db:f2:88:82:30:9b:bf:23:49:17:bd:2c:
3d:ac:2f:95:66:96:fb:62:cc:35:44:af:64:07:fe:
ba:90:b3:7e:d6:e0:3d:1f:d6:59:cd:7d:5a:0c:30:
1a:30:31:75:02:5c:5b:90:a2:5f:0d:9f:fa:e9:e2:
33:d7:a5:6e:af:04:ab:fc:b5:da:dd:7f:ae:6e:ad:
27:a2:f5:f7:07:4d:5b:02:0c:04:29:d3:fc:dc:82:
05:b9:d7:d9:ba:14:53:97:cc:2a:c0:9e:82:59:b7:
f9:8c:05:7e:94:d7:9c:f6:fe:64:0a:da:7b:01:b2:
9e:da:a5:b2:1f:1f:1b:55:73:27:91:8a:5c:83:bd:
56:f5:22:ec:1e:59:66:fa:60:52:14:e4:58:d8:18:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:81:FA:00:F3:3D:8C:32:BB:B8:C8:7C:A8:3F:18:4F:76:41:16:86
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/23
Signature Algorithm: sha256WithRSAEncryption
13:67:2a:72:ec:4c:51:d5:79:35:c7:97:1e:c8:7e:d7:c1:5f:
91:a5:56:dc:ac:bf:7c:dc:47:ac:1a:af:20:f2:a5:64:91:b0:
04:ba:08:3f:4a:b9:e3:0a:33:e1:19:50:c3:f0:97:c1:e7:ee:
ec:90:f3:5d:79:c1:f0:76:f8:de:e0:cc:33:34:82:79:88:00:
49:7d:f2:b1:e4:ba:15:5c:ca:fa:78:a1:8f:58:4e:64:55:2e:
97:bb:00:a1:2f:22:63:f5:d9:16:82:89:b1:fe:aa:72:35:3d:
b2:f7:15:07:c1:7e:4b:39:85:bb:e5:d0:c3:30:d8:26:2b:e7:
6b:f0:9a:d5:1e:81:18:f5:29:63:ab:8c:e4:2e:26:82:0b:2b:
82:40:ba:35:e8:28:fd:e9:94:37:a5:48:b1:9a:64:c3:06:fc:
d0:99:6b:87:b6:10:88:5e:26:c8:4f:11:f5:1c:8f:85:82:58:
df:3f:2f:80:53:4a:0f:4d:03:15:e8:2f:61:59:5d:8b:4e:d5:
34:a7:dc:61:ec:3c:2a:8a:54:4d:38:90:b7:8d:b7:50:1f:38:
c2:8d:3f:c0:7d:ad:ab:cc:34:b5:30:33:34:65:ac:2e:cb:2c:
52:ef:31:75:fa:2f:3f:3e:ef:9d:c5:05:69:1b:59:23:f1:80:
f4:fd:00:c1
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUOQWTgCZDgGWpeH8JKeOHi1fkeyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm
YWRhMzQ0NDAeFw0yMzA2MDcxNzEzNTVaFw0yNDA2MDUxNzE4NTVaMDMxMTAvBgNV
BAMTKDdGODFGQTAwRjMzRDhDMzJCQkI4Qzg3Q0E4M0YxODRGNzY0MTE2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwwRCJxR2oHbs7jDPsa5SMSmyX
E0X93LGurNHgy9ayCItk0FXP3gd0qhVadcTb7dOU3MliTag6oW7GpBhg8gFvzZAJ
bCsRZCXjZXr6qbTCJmxJ18R2RgZlhsZSrZK1EUWtdyk6UnjWkcPObNvyiIIwm78j
SRe9LD2sL5VmlvtizDVEr2QH/rqQs37W4D0f1lnNfVoMMBowMXUCXFuQol8Nn/rp
4jPXpW6vBKv8tdrdf65urSei9fcHTVsCDAQp0/zcggW519m6FFOXzCrAnoJZt/mM
BX6U15z2/mQK2nsBsp7apbIfHxtVcyeRilyDvVb1IuweWWb6YFIU5FjYGOvZAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUf4H6APM9jDK7uMh8qD8YT3ZBFoYwHwYDVR0j
BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5
NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y
YU5FUS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYt
NjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5NDMxLzEvMzczODJlMzIzNDJlMzEzMjMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzNzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBThh6MA0G
CSqGSIb3DQEBCwUAA4IBAQATZypy7ExR1Xk1x5ceyH7XwV+RpVbcrL983EesGq8g
8qVkkbAEugg/SrnjCjPhGVDD8JfB5+7skPNdecHwdvje4MwzNIJ5iABJffKx5LoV
XMr6eKGPWE5kVS6XuwChLyJj9dkWgomx/qpyNT2y9xUHwX5LOYW75dDDMNgmK+dr
8JrVHoEY9Sljq4zkLiaCCyuCQLo16Cj96ZQ3pUixmmTDBvzQmWuHthCIXibITxH1
HI+FgljfPy+AU0oPTQMV6C9hWV2LTtU0p9xh7DwqilRNOJC3jbdQHzjCjT/Afa2r
zDS1MDM0ZawuyyxS7zF1+i8/Pu+dxQVpG1kj8YD0/QDB
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org