Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e20313734.roa
File: 37382e32342e3132322e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: KFpoRwrCKaZ1/gid0cgkX45gxj8jX1/YBJfUmiFEfZQ=
Subject key identifier: 74:A8:A9:73:DF:8D:32:CB:F4:F9:1F:A6:62:5D:51:7C:94:4D:FF:58
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 6F8FF515E6738B4ADD5CF0D7DEC663F0CB3FA7EF
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e20313734.roa
Signing time: Thu 08 Jun 2023 19:43:24 +0000
ROA not before: Thu 08 Jun 2023 19:38:24 +0000
ROA not after: Thu 06 Jun 2024 19:43:24 +0000
asID: 174
IP address blocks: 78.24.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:8f:f5:15:e6:73:8b:4a:dd:5c:f0:d7:de:c6:63:f0:cb:3f:a7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jun 8 19:38:24 2023 GMT
Not After : Jun 6 19:43:24 2024 GMT
Subject: CN=74A8A973DF8D32CBF4F91FA6625D517C944DFF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:cf:af:d8:f9:06:b4:66:aa:f8:b3:6c:13:
71:77:f6:64:da:ea:70:6e:97:3a:85:0a:30:14:29:
54:31:cf:9b:c1:13:a3:48:24:31:33:3b:a0:98:56:
5d:12:71:94:01:ec:72:f7:93:72:88:58:81:c9:34:
c4:0f:49:49:42:7a:48:14:d8:08:e3:45:0d:a9:1c:
7e:13:b6:9f:1c:fd:40:1f:9f:56:52:a3:8b:95:8b:
36:06:f6:13:e6:9b:30:38:14:63:de:09:ab:7e:5e:
ab:19:cb:50:e3:9c:33:8d:bd:f3:65:57:a5:0f:89:
ee:54:28:53:d1:d8:17:86:58:6e:6c:81:b5:7e:5b:
c8:d3:3c:04:63:69:26:94:e9:dc:e3:de:f8:b9:24:
5d:7f:f6:c4:4c:11:de:ee:c4:bc:b3:de:c8:da:a7:
d3:3e:90:68:75:5e:a2:59:b3:54:77:ef:9e:16:3e:
d2:fe:46:12:c2:a8:64:92:f9:d7:cb:6b:c4:07:4b:
9e:4c:50:3e:9c:26:84:0d:a9:c9:5f:b1:91:46:28:
48:39:34:32:87:4b:33:03:07:15:38:f8:a7:51:bc:
af:23:9f:c1:fd:88:7c:27:9f:0a:74:89:2e:f6:58:
fa:61:4f:d2:32:9c:ac:02:9d:b8:e8:bc:4e:7c:1a:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A8:A9:73:DF:8D:32:CB:F4:F9:1F:A6:62:5D:51:7C:94:4D:FF:58
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ec:91:c6:cc:8f:8a:c4:83:8c:3f:2f:69:bc:30:91:a4:a9:
8f:df:46:00:d8:47:42:d9:a2:ba:ff:c5:73:4b:1f:de:32:c2:
87:7d:cd:78:79:d5:0d:e5:8e:1c:23:c3:29:4e:5b:0d:39:80:
db:de:d3:57:be:3e:3b:75:19:3f:8e:0b:d4:7a:22:69:f6:45:
80:2d:df:ad:96:dc:28:27:ac:01:21:fe:57:03:be:70:95:97:
ee:71:3e:e4:b5:24:a4:c3:c4:73:66:9a:e1:3d:ce:74:f4:86:
0a:b2:1b:06:8b:2d:c2:c0:78:41:fb:ca:a6:69:dd:f8:0e:5a:
40:cb:9b:7c:89:9a:b0:d3:f5:f8:c4:80:b7:de:c8:00:b8:ab:
9c:e5:2b:c8:3b:46:95:3d:0b:a2:9d:4e:6a:cf:50:70:fc:b9:
15:2c:5a:ee:6a:33:e7:1e:12:0e:8b:ae:15:66:ed:da:5c:e2:
00:b4:cd:8b:f9:2f:43:89:47:66:77:c3:59:32:12:82:e4:5d:
fe:7d:25:bc:d7:77:08:5d:08:5d:4e:a6:70:0f:0e:91:22:6f:
85:0a:51:8b:97:12:31:f1:b4:cb:43:db:71:65:7a:98:fe:14:
f3:7b:41:1e:e0:39:fe:35:ca:5d:0c:c8:e4:80:65:3a:5b:6c:
f4:7b:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 00:42:45 2023 by rpki-client on console-ams.rpki-client.org