Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e2031323339.roa
File: 37382e32342e3132322e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: jQ2FPCG7MgFiUoIByams9nPFcdAEub4T3d2VPUYwOQs=
Subject key identifier: 9C:3A:83:66:24:F0:BC:40:57:71:64:0F:85:09:86:2E:68:B0:23:6F
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 7C925310A81274E839974C24C43ACF2BA90D6947
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e2031323339.roa
Signing time: Sat 03 Jun 2023 14:19:14 +0000
ROA not before: Sat 03 Jun 2023 14:14:14 +0000
ROA not after: Sat 01 Jun 2024 14:19:14 +0000
asID: 1239
IP address blocks: 78.24.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:92:53:10:a8:12:74:e8:39:97:4c:24:c4:3a:cf:2b:a9:0d:69:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jun 3 14:14:14 2023 GMT
Not After : Jun 1 14:19:14 2024 GMT
Subject: CN=9C3A836624F0BC405771640F8509862E68B0236F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:1b:1e:5b:db:13:51:a9:15:2a:31:54:ab:
90:b1:21:f9:60:0d:47:95:8f:0e:ef:16:23:b2:84:
cd:61:2f:b1:d7:ea:6a:c6:d2:15:b1:70:f1:94:02:
2d:a2:0d:80:7f:c9:14:79:ce:61:98:51:62:56:f6:
d7:ea:5c:c0:f8:a8:72:8e:1e:cb:72:3c:9a:15:73:
7f:3b:76:03:a5:4e:1e:b1:d4:73:a1:70:34:54:bb:
9d:4a:81:4d:48:19:0b:43:f8:71:b8:00:dd:99:b8:
17:23:3b:ff:70:e4:33:ee:83:14:91:07:6f:f8:4a:
01:42:2a:c1:4f:a3:0b:9f:ce:eb:a5:0c:74:8a:7e:
2a:af:a3:29:c0:5f:ae:ee:cb:d7:13:d6:3b:ca:c8:
ea:49:6f:00:1a:22:6f:a2:a0:a0:62:d1:44:e8:c0:
18:7e:cb:47:d2:06:f8:dd:b8:7d:9c:53:ea:a4:8c:
c2:f6:b3:50:58:07:6b:e7:c1:55:28:b2:31:87:5a:
79:27:49:88:3c:06:2d:5c:b1:62:19:99:6e:75:e6:
57:c9:65:5b:49:6b:7b:0e:b3:d5:f9:22:31:5b:39:
3d:1c:50:c6:a2:b6:51:6a:0c:1c:1a:9d:86:3d:72:
06:3e:9c:d8:9a:d3:e3:41:26:29:00:7d:17:3a:7e:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:83:66:24:F0:BC:40:57:71:64:0F:85:09:86:2E:68:B0:23:6F
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/24
Signature Algorithm: sha256WithRSAEncryption
69:83:de:62:b2:0a:fb:3c:c3:24:f9:4c:b4:25:1e:ce:82:99:
07:6c:9b:38:90:e2:86:27:bf:9d:f3:ea:c9:30:9d:f5:5c:e5:
be:65:57:30:91:a2:80:ae:4b:a2:1a:8c:97:f7:e0:49:4d:d6:
fc:37:c9:27:eb:75:70:9c:45:f1:53:8c:56:b8:29:c4:8d:28:
bc:f6:15:97:4e:81:3d:a8:71:e7:2d:c1:5c:11:74:7c:8c:bf:
bc:31:55:c8:7b:7d:3f:a5:c6:7b:27:0c:4b:a0:60:d0:82:ca:
37:b6:63:b9:4e:d6:71:dc:65:af:3d:10:40:1b:f4:4b:6c:b8:
07:9c:2c:c4:f8:24:41:07:56:fd:8d:1f:3d:51:1f:3e:9e:85:
e3:f1:c5:2a:87:2e:38:18:0a:b1:fb:a5:c8:bc:17:3d:c0:09:
e2:de:1b:7c:38:96:b3:4c:86:2f:6d:b1:6e:66:68:0e:ea:54:
de:71:2e:52:31:05:54:79:69:83:f5:7b:8b:5c:89:23:62:31:
04:35:d4:a6:e7:e8:ca:c1:da:be:c8:11:32:6f:72:12:5e:e4:
8b:a2:0f:9f:06:a7:dd:91:77:be:72:0f:bc:1c:34:94:ac:0b:
6c:d6:20:c9:fb:d8:82:e2:e6:fc:d4:a6:2c:eb:49:46:f9:83:
25:97:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 00:42:45 2023 by rpki-client on console-ams.rpki-client.org