Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e2033333536.roa
File: 37382e32342e3132362e302f32332d3234203d3e2033333536.roa (raw, json)
Hash identifier: 9IQEoki5eUhLttSAno5tXpYfY9/hRg/dcTYimN/U3ac=
Subject key identifier: B1:EF:D1:88:1D:71:2E:39:B6:5C:CE:9E:29:51:08:41:97:6F:C1:2D
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 646B430480EF12C564C16E64D9D701599094D786
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e2033333536.roa
Signing time: Sun 01 Oct 2023 07:39:31 +0000
ROA not before: Sun 01 Oct 2023 07:34:31 +0000
ROA not after: Sun 29 Sep 2024 07:39:31 +0000
asID: 3356
IP address blocks: 78.24.126.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6b:43:04:80:ef:12:c5:64:c1:6e:64:d9:d7:01:59:90:94:d7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Oct 1 07:34:31 2023 GMT
Not After : Sep 29 07:39:31 2024 GMT
Subject: CN=B1EFD1881D712E39B65CCE9E29510841976FC12D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:9b:0a:b0:1e:73:be:ec:15:e2:9e:dc:40:
f1:a7:3a:57:f2:7c:12:01:3e:c3:86:c3:49:7c:8b:
a6:48:7f:89:2c:b6:1e:1a:65:fd:42:cf:4f:55:d1:
e3:1e:63:e3:75:3c:93:18:a8:c4:98:af:3e:f3:a7:
83:f6:6d:4b:e2:33:98:c0:2b:80:fe:6a:c2:77:bf:
de:b4:d3:e6:01:ba:26:d3:45:4f:ef:79:3f:de:14:
76:ab:93:24:1c:6f:67:89:c0:67:9f:ec:d7:45:4f:
e8:40:82:b4:17:71:65:f9:1d:5e:e0:c0:83:d4:74:
91:c4:e5:da:74:0b:13:ed:3a:1d:ee:bf:fe:f1:62:
b9:9c:bd:29:da:38:46:8c:28:93:e8:95:71:6f:1a:
7f:9b:ee:e7:05:f0:51:d4:ef:bf:88:55:43:28:31:
a4:ec:8e:cf:09:11:4c:20:2e:c9:22:5d:48:c7:ef:
78:56:05:46:cc:66:65:d3:36:b2:89:7d:a6:5b:7b:
8e:82:3b:28:1f:6a:10:26:b3:ec:f7:c0:a5:d8:a7:
72:ad:9e:2d:b6:d2:dc:cd:6e:c9:fd:56:f5:c3:d3:
a9:8f:0a:dc:e6:4d:ae:a4:c0:a4:f6:a6:f6:f5:98:
3a:1f:ca:87:45:ba:67:17:85:7d:8c:c7:0f:93:5f:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EF:D1:88:1D:71:2E:39:B6:5C:CE:9E:29:51:08:41:97:6F:C1:2D
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.126.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:3d:2a:07:fe:ee:5b:e0:44:1e:af:80:6d:fb:f1:6c:33:9b:
a6:f8:a7:c3:37:b0:7b:b0:eb:e1:06:11:98:9d:c9:91:0f:3e:
20:6f:40:91:b7:8d:70:73:c3:83:b1:52:13:25:8d:8d:db:42:
be:ba:84:82:3e:96:fa:51:2b:53:0d:0b:d1:4e:df:8c:56:0b:
fe:4d:39:4e:6c:6e:fb:ae:a4:3d:f6:e9:18:70:de:0d:e6:9b:
23:f3:b8:f4:b8:2a:b7:ce:55:ce:a3:af:dc:4f:49:bc:ac:8b:
8c:32:ba:75:45:6f:f3:fd:ee:03:fc:5c:ca:04:1b:d1:f9:ae:
20:cf:92:7a:40:5d:ce:f4:8b:30:19:c3:4b:86:22:15:bf:1e:
c1:22:7a:14:68:2b:38:bc:91:80:eb:2f:d8:e8:db:ae:07:be:
ab:88:55:45:87:4c:3a:16:af:bf:50:50:f0:3d:1c:34:de:b8:
e1:f1:b5:f0:5a:95:9c:70:0e:0f:83:a1:d0:80:f2:6c:a9:0b:
4c:43:2b:4a:80:26:d3:53:42:99:ed:ea:d9:fa:84:c6:5c:15:
16:e7:d7:06:92:12:fa:15:5e:5f:e9:67:b9:b9:96:58:da:28:
1f:47:7f:b0:6f:8b:7f:6d:4e:fa:f3:5c:f3:db:97:34:d8:d3:
e2:20:cd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 00:45:19 2023 by rpki-client on console-ams.rpki-client.org