Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31362e302f32342d3234203d3e2037303138.roa
File: 39332e39322e31362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: NGSvkCot+RyHuBoC0O72ZXimsNlhfeA/yb9ObmeSLYA=
Subject key identifier: C6:6B:96:C4:9E:1A:35:C2:60:31:00:2D:21:92:71:47:54:A7:E3:C5
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 338226FFDF227109CB855B6705A3536369B25B55
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31362e302f32342d3234203d3e2037303138.roa
Signing time: Thu 04 May 2023 11:15:15 +0000
ROA not before: Thu 04 May 2023 11:10:15 +0000
ROA not after: Thu 02 May 2024 11:15:15 +0000
asID: 7018
IP address blocks: 93.92.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:82:26:ff:df:22:71:09:cb:85:5b:67:05:a3:53:63:69:b2:5b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: May 4 11:10:15 2023 GMT
Not After : May 2 11:15:15 2024 GMT
Subject: CN=C66B96C49E1A35C26031002D2192714754A7E3C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:ff:5b:23:c1:ee:5a:b8:8e:a9:7b:61:99:
fe:80:d7:b8:92:79:57:f0:ab:45:10:5e:80:4c:b4:
c3:15:62:8f:84:24:e2:47:db:a4:81:fe:e9:49:91:
67:ff:48:8f:00:8d:fe:3f:ee:1f:24:74:85:4e:33:
6f:27:eb:eb:d4:d7:7a:be:90:86:ca:18:42:35:bb:
3c:ad:69:4c:42:99:9f:19:fe:a4:06:f3:cf:d1:2b:
1e:d9:44:af:12:31:3d:59:c2:db:60:df:ae:c9:47:
d8:40:7b:dc:b4:67:1a:73:30:f2:02:b7:93:09:1e:
b5:53:f7:37:b2:53:ab:d5:7e:a9:f2:53:7f:ff:df:
b2:c2:15:57:bc:9e:c3:1e:68:ad:86:a8:0e:72:1e:
05:7d:e2:46:a1:33:e2:cd:01:3c:9f:20:2d:33:23:
a3:e8:99:61:7d:f7:1d:fa:d6:a9:82:d6:03:d1:fd:
f6:59:f9:35:fc:3e:a7:b2:7c:59:63:33:56:63:87:
d4:4a:e0:ec:6f:dc:0a:09:71:35:09:6b:f8:66:4e:
97:ef:b7:81:58:aa:06:b9:d6:95:32:2e:be:d7:f8:
58:8e:e1:69:fb:20:dc:0d:b1:0b:76:95:ed:f7:65:
40:ac:25:66:2d:c6:61:f8:b2:0f:e6:d3:47:ef:da:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:96:C4:9E:1A:35:C2:60:31:00:2D:21:92:71:47:54:A7:E3:C5
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31362e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.16.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ac:04:4e:08:a0:5a:2e:44:2e:b6:e3:72:38:81:7b:d2:ea:
5a:aa:21:af:76:f0:38:5c:e1:20:93:24:45:4d:b3:0c:83:35:
34:e0:08:43:87:ff:28:4a:26:4a:e2:13:f5:38:5e:1b:2e:9c:
7f:15:cb:95:7e:2e:c0:e9:dd:5f:09:50:74:d4:6c:3d:82:1d:
dc:79:3e:a5:d5:f6:9d:3e:d8:f4:5c:58:e4:31:4e:8d:c6:a3:
92:4b:db:23:0c:0a:77:09:c7:01:66:61:58:0c:d3:21:43:83:
20:89:cb:da:31:4f:02:ed:7b:a0:a4:65:c3:9a:5e:57:b7:11:
d2:4c:74:8b:4a:15:28:d1:35:1e:2f:3d:8d:bd:1d:30:c7:35:
4d:4f:1c:81:4e:33:e6:a2:ce:c8:71:85:fe:89:4c:97:2c:2a:
18:7b:69:db:c6:40:4a:89:27:0c:c3:1b:ec:8d:bf:0e:77:da:
d6:30:33:5d:57:1f:6d:ef:f2:50:53:0e:06:f2:be:d6:d4:93:
93:0d:1e:ef:2d:51:e7:0d:3b:3f:3b:63:ce:7a:d5:86:69:9e:
4f:54:e3:68:b8:a5:9b:06:74:a4:1f:b6:df:f5:ac:ba:d4:70:
39:c9:20:ec:1f:ea:c8:a8:ee:50:f2:4d:b3:a8:eb:8c:25:9c:
a3:21:48:8b
-----BEGIN CERTIFICATE-----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Generated at Tue Jul 25 00:34:50 2023 by rpki-client on console-fra.rpki-client.org