Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e20323033333439.roa
File: 37382e32342e3132322e302f32342d3234203d3e20323033333439.roa (raw, json)
Hash identifier: cLrfUMeTizkuR+sl7m0gkx7jHms1TYXmpPgs+c4itac=
Subject key identifier: C7:AB:F0:48:43:9C:CB:D9:3E:73:53:1A:EB:D4:09:1C:C1:BA:1F:8A
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 21F742B6E8F46CB1D7FC240F2D113B8DBF68C66A
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e20323033333439.roa
Signing time: Sat 30 Sep 2023 08:05:43 +0000
ROA not before: Sat 30 Sep 2023 08:00:43 +0000
ROA not after: Sat 28 Sep 2024 08:05:43 +0000
asID: 203349
IP address blocks: 78.24.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f7:42:b6:e8:f4:6c:b1:d7:fc:24:0f:2d:11:3b:8d:bf:68:c6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Sep 30 08:00:43 2023 GMT
Not After : Sep 28 08:05:43 2024 GMT
Subject: CN=C7ABF048439CCBD93E73531AEBD4091CC1BA1F8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:82:3c:be:8e:18:77:d6:c1:a2:6f:c9:52:
e2:fd:eb:a7:17:7a:b8:62:d2:7b:cf:25:7f:23:04:
1a:d2:63:e3:a8:5c:93:a3:05:94:07:62:d6:4c:db:
9a:b3:10:d7:9e:07:46:c4:81:af:3f:ce:7e:bc:67:
99:22:5d:ae:3b:92:7a:dd:29:18:92:0f:24:78:24:
8a:a5:e1:2d:be:e8:8c:12:80:97:e6:da:04:a4:61:
3b:0d:d9:c1:4c:3e:91:d9:0d:a6:e1:9b:6a:a6:84:
1c:aa:4e:90:6c:c3:53:f4:53:9f:65:58:3f:da:75:
75:6a:f2:48:cc:56:3c:35:78:96:6f:69:a9:f4:15:
13:b1:d6:7e:69:eb:ba:20:79:e4:49:29:b1:79:f0:
73:42:46:f3:c8:0d:48:37:87:1e:f2:75:58:9c:27:
19:f1:e0:ea:7f:2d:00:51:13:08:df:cb:80:54:46:
b4:12:30:d5:ad:03:1b:b2:e7:35:10:ca:16:bd:5a:
64:cf:c4:27:9e:ea:19:50:d2:b7:90:11:30:d8:a2:
4a:39:19:d7:72:ec:7f:f4:f1:01:be:1e:42:01:36:
5b:d0:c2:68:49:d0:8b:7d:ba:07:33:3c:22:01:12:
92:58:8a:ae:99:4a:5d:4e:47:ff:d3:a5:d8:79:54:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:F0:48:43:9C:CB:D9:3E:73:53:1A:EB:D4:09:1C:C1:BA:1F:8A
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e20323033333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/24
Signature Algorithm: sha256WithRSAEncryption
53:6d:3e:ad:f2:98:b0:f5:f0:2d:c4:88:7a:c6:04:e6:95:89:
6a:89:ed:bd:e8:38:da:a7:68:75:3b:f5:c9:33:ed:a8:b0:da:
96:c3:69:1e:ab:da:41:7e:bb:1b:0a:0b:7d:40:38:18:35:a0:
32:3a:f1:a0:1e:80:d7:29:d2:38:6a:eb:8c:45:a5:47:23:cb:
34:1e:ec:22:1a:b2:e1:ea:9e:cf:7b:e3:d3:73:01:11:23:25:
8e:37:fa:03:25:21:63:2e:91:6d:d8:38:ff:0e:e6:c4:da:5d:
71:58:b3:84:cd:b1:13:80:55:da:8b:d2:81:8e:d4:d8:2c:94:
28:65:52:59:19:a9:9e:87:2e:fb:f5:69:f9:37:34:c4:a7:1a:
8c:f5:db:15:cb:e9:ba:7e:cc:85:24:68:35:5b:88:85:79:de:
0d:9d:25:41:2e:e9:f6:11:4b:c0:59:15:9c:74:c9:00:14:3b:
44:30:c6:4f:cf:ef:e9:98:cb:dd:16:db:86:a6:6f:2e:8c:d6:
af:be:cb:8b:dd:6a:5b:51:6f:b0:5e:1f:6e:bb:7a:13:a6:5f:
98:9e:94:ce:2e:dc:24:e4:4f:0c:e3:55:30:55:fb:67:c1:81:
b8:4e:ea:1d:b5:6b:5f:0e:71:6a:7d:7f:87:b7:41:2c:7c:3d:
22:57:c2:72
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 2 14:56:25 2023 by rpki-client on console-fra.rpki-client.org