Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e2033333230.roa
File: 37382e32342e3132362e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: EuLTlOiPdQTSudmPSr3QVfiiJ4xRZihcEDA8l77JRws=
Subject key identifier: 6A:2A:46:F0:46:D6:6F:9B:94:B9:14:36:11:FA:BB:F4:C6:E1:00:ED
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 1E7E70FD13BC47631E88F32CF49E4264244219AC
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e2033333230.roa
Signing time: Fri 16 Jun 2023 08:55:46 +0000
ROA not before: Fri 16 Jun 2023 08:50:46 +0000
ROA not after: Fri 14 Jun 2024 08:55:46 +0000
asID: 3320
IP address blocks: 78.24.126.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7e:70:fd:13:bc:47:63:1e:88:f3:2c:f4:9e:42:64:24:42:19:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jun 16 08:50:46 2023 GMT
Not After : Jun 14 08:55:46 2024 GMT
Subject: CN=6A2A46F046D66F9B94B9143611FABBF4C6E100ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:a0:ce:ff:77:28:4d:ff:bc:e8:8a:ca:66:
96:40:30:e5:a1:db:d3:b8:41:df:5e:0b:14:02:5b:
53:36:e1:76:04:cf:96:42:ea:f0:dd:f0:e5:21:1d:
0b:4d:8f:b5:8c:66:61:cc:56:f9:0a:b1:64:e9:91:
b1:86:9b:f4:e8:27:05:41:65:3e:91:cf:bd:a4:fe:
be:b1:11:21:8d:4f:bd:cf:88:85:4b:02:56:ae:ea:
a1:28:b9:87:17:96:6b:25:7c:f9:92:d7:67:d6:81:
1b:0a:2b:a3:ad:06:41:30:9c:8f:4f:8b:ee:13:f7:
56:57:cb:c6:97:99:fd:bc:5d:85:1f:8a:f4:d9:b7:
33:3f:83:3a:88:0c:d8:31:28:ae:96:5b:6b:7c:7e:
af:bb:2b:68:9f:04:b0:be:43:5c:77:48:b3:22:c8:
3f:b0:cd:66:e3:91:09:ea:9b:6c:af:fb:09:4e:09:
22:6b:93:83:a7:69:86:2f:5e:b6:71:0e:0e:db:4e:
1e:a8:79:e8:4f:37:68:de:57:84:ff:e5:0d:58:15:
fe:ff:bf:81:c5:ef:e6:77:17:01:4d:6c:47:d4:7b:
0a:68:41:3e:34:7a:1a:38:65:64:1e:ae:9b:67:07:
86:25:b0:cc:e9:45:5f:29:d1:10:f3:13:dc:f8:8f:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2A:46:F0:46:D6:6F:9B:94:B9:14:36:11:FA:BB:F4:C6:E1:00:ED
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.126.0/23
Signature Algorithm: sha256WithRSAEncryption
87:9f:51:18:67:77:73:71:6a:5e:d3:b9:3d:6c:73:db:3a:fb:
b0:d2:f0:83:24:1f:e2:58:c1:bc:82:5c:d9:02:0c:02:a4:2a:
38:da:d9:4a:b5:e4:f9:0b:03:cc:11:6c:69:2e:1f:5e:2e:f5:
17:c2:2b:52:43:01:c1:ac:6c:ae:3e:ec:57:3c:21:b5:a0:90:
30:0b:6e:d4:5e:5c:6c:3d:e3:39:94:d3:c5:4a:dd:d1:6f:ef:
95:8a:60:56:23:f6:b0:94:34:78:4e:68:0f:73:92:a7:8e:5a:
5b:2b:d8:a4:db:b1:21:88:d5:c3:2c:de:14:52:c2:13:49:eb:
f4:3c:33:37:8a:6f:38:8d:a1:49:aa:29:01:37:5d:2d:99:ce:
b0:1a:ac:34:c8:5d:20:85:f2:dd:73:90:ec:ae:b0:f5:fb:98:
43:7e:cb:27:29:ae:c2:5f:bf:9d:64:37:b1:63:6a:74:a9:44:
8f:0c:ea:91:d3:4b:08:24:aa:36:f6:2a:ae:10:b4:02:b8:fb:
8a:78:e6:08:7d:6e:b2:b1:97:91:9d:f7:00:bf:a1:75:8f:09:
ba:59:29:2b:33:a7:a0:d0:5b:28:f5:23:7d:01:1f:5d:f6:7d:
c4:72:43:d3:98:a8:aa:0a:e8:98:03:97:00:d8:da:ad:de:96:
45:c6:a6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 00:45:19 2023 by rpki-client on console-ams.rpki-client.org