Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e20383334.roa
File: 37382e32342e3132322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: x2G6MPYHurEkIugkLbBFeoyfwg9qVbta5zpsfuPNnJM=
Subject key identifier: 23:1C:1C:F3:F1:1E:77:A8:09:70:FB:E6:6A:79:9F:52:37:72:82:C8
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 7E151B70B856C910878EC8395AC359A410E21199
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e20383334.roa
Signing time: Fri 26 Apr 2024 13:47:29 +0000
ROA not before: Fri 26 Apr 2024 13:42:29 +0000
ROA not after: Fri 25 Apr 2025 13:47:29 +0000
asID: 834
IP address blocks: 78.24.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 16:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:15:1b:70:b8:56:c9:10:87:8e:c8:39:5a:c3:59:a4:10:e2:11:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Apr 26 13:42:29 2024 GMT
Not After : Apr 25 13:47:29 2025 GMT
Subject: CN=231C1CF3F11E77A80970FBE66A799F52377282C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:87:c7:aa:51:3a:d2:87:6a:c8:fd:f0:1f:
0a:49:da:00:80:87:40:45:e4:0f:8e:e9:80:d8:ad:
44:93:a5:6d:8a:b5:c5:0f:19:96:4a:71:56:8c:ba:
0f:d5:74:77:73:8f:73:7e:9b:25:44:cc:90:14:3e:
bb:ae:06:51:f0:9d:47:55:4a:6a:2c:ec:46:5e:6d:
d5:b7:40:ac:e0:aa:32:06:03:7c:05:28:1b:58:ef:
49:4e:44:8e:03:29:4e:4a:79:04:9b:e7:65:ba:eb:
29:42:c9:12:2a:ba:a8:00:bd:b5:96:8a:1e:0e:62:
18:8f:5a:85:c8:e9:f5:f4:f3:d8:69:62:aa:f6:f5:
bb:92:f4:19:a2:79:a0:91:79:65:65:1f:bc:f7:24:
9c:57:5c:40:27:37:7c:37:eb:0d:4c:5c:d6:f4:8c:
35:08:f5:1d:96:33:48:fa:e0:80:27:88:61:39:79:
be:db:74:2b:f3:eb:c7:2b:11:a7:22:d5:b6:4b:3b:
72:4f:f3:3f:00:7a:9a:be:b3:46:f4:df:b9:e3:dd:
18:b2:fe:f2:ef:37:ef:74:d6:f9:11:c2:3b:cb:9d:
3a:12:6a:80:d9:6f:c7:12:51:44:dc:ba:9a:88:00:
9b:a9:2e:c8:d5:d2:61:05:f6:58:3d:eb:4b:5e:1c:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1C:1C:F3:F1:1E:77:A8:09:70:FB:E6:6A:79:9F:52:37:72:82:C8
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.122.0/24
Signature Algorithm: sha256WithRSAEncryption
01:94:ca:6b:22:51:51:e6:3b:ba:0f:f1:fd:69:6e:e3:78:f9:
6b:c2:70:c3:aa:13:71:32:da:a4:4f:54:92:e6:d6:01:66:d5:
bd:9b:4b:80:a5:f9:a7:e1:09:f2:14:70:39:c4:a5:4a:83:1a:
a7:03:f2:33:26:b1:1c:56:4b:2d:2e:02:32:df:b6:94:0f:40:
94:fb:a0:ca:28:d8:58:12:d2:4e:83:9c:e7:17:8b:4e:09:f1:
96:2c:92:3a:3e:7d:c3:d6:3b:4a:fd:f0:53:9c:76:8e:0a:55:
7c:b7:82:25:87:48:d9:8c:07:bc:4b:9e:14:89:b1:38:cc:e8:
b6:7d:97:66:7e:5d:85:c5:06:14:da:ab:f7:06:1b:e5:61:fa:
a1:bc:e7:11:51:f3:da:90:db:f0:e1:bb:4c:63:b2:a4:f3:0c:
62:3c:dd:4e:13:f0:bb:62:38:ab:b2:fc:bb:68:d0:0f:f8:38:
21:00:45:6f:3d:d0:54:6f:fe:73:ed:e8:c5:92:d7:b2:78:fc:
90:7f:ae:a0:00:40:29:a4:1c:52:8f:ca:e0:20:59:a8:a8:57:
a5:13:46:cd:1e:a5:2b:de:1b:7d:d3:67:53:77:77:46:86:62:
e0:38:e8:b9:7e:07:e7:67:12:a7:96:e7:80:d9:f3:e0:73:f0:
86:0a:2f:e7
-----BEGIN CERTIFICATE-----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Generated at Wed May 1 21:27:26 2024 by rpki-client on console-fra.rpki-client.org