Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31372e302f32342d3234203d3e20313937363434.roa
File: 39332e39322e31372e302f32342d3234203d3e20313937363434.roa (raw, json)
Hash identifier: 30XAtm8hlJGm2ZaB/90p8Mbib+JpVpxCr612gNMWt9A=
Subject key identifier: 14:BE:9E:41:4B:B9:6A:1C:34:7A:41:C7:D5:D1:82:AD:84:68:F0:20
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 55F1D4A7E358965833EF98CBE05C82F0DA8D6609
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31372e302f32342d3234203d3e20313937363434.roa
Signing time: Wed 02 Aug 2023 13:18:51 +0000
ROA not before: Wed 02 Aug 2023 13:13:51 +0000
ROA not after: Wed 31 Jul 2024 13:18:51 +0000
asID: 197644
IP address blocks: 93.92.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f1:d4:a7:e3:58:96:58:33:ef:98:cb:e0:5c:82:f0:da:8d:66:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Aug 2 13:13:51 2023 GMT
Not After : Jul 31 13:18:51 2024 GMT
Subject: CN=14BE9E414BB96A1C347A41C7D5D182AD8468F020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:11:c5:d4:3f:ec:71:c1:5e:f9:30:00:fc:
a7:97:0b:0f:0a:bf:62:26:29:44:8f:16:3a:90:9e:
27:75:3e:a4:68:18:62:41:e9:48:82:db:14:81:7d:
3f:9c:b3:b9:36:f9:07:ca:0f:80:ec:5e:9d:43:61:
c2:8e:ad:36:c7:5a:c1:d1:f4:b3:a0:f9:6f:9d:f4:
79:6c:d7:76:d0:a8:8e:2a:81:8c:23:94:60:0e:dd:
78:0c:da:1e:cd:22:20:39:e5:8f:6f:e9:63:bc:79:
1d:47:bd:95:67:db:0e:81:20:60:c8:ff:c9:54:9a:
86:85:14:2b:ce:c9:db:66:96:18:95:41:f7:34:34:
bd:7d:bd:3a:d4:a0:d6:0f:1c:c6:fb:77:fe:24:62:
b7:58:2b:13:58:f2:db:37:9d:50:53:df:6d:e3:b0:
32:69:f1:1e:9d:35:8e:b4:79:86:ef:86:fb:35:55:
11:a6:0e:c4:7e:f5:0b:27:2e:2a:11:bb:e6:f9:80:
33:5f:9f:d4:00:b9:4d:21:d6:a4:92:3b:33:8a:01:
94:34:12:6d:7c:35:67:bf:f0:ab:12:3d:a1:a3:55:
c2:ed:c5:9f:90:c6:dc:45:82:92:7a:87:2b:56:57:
2e:db:3a:be:d9:51:01:78:99:b0:d3:1e:d3:b2:59:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BE:9E:41:4B:B9:6A:1C:34:7A:41:C7:D5:D1:82:AD:84:68:F0:20
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31372e302f32342d3234203d3e20313937363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ad:0f:56:80:d9:30:3c:5d:a8:2e:c2:16:8b:16:0f:6a:a7:
b4:9c:21:f7:9b:64:8a:35:47:52:4f:35:cf:fe:1a:0d:70:9e:
20:0e:77:7f:cb:3c:21:57:2e:24:83:d4:27:f4:e7:eb:fc:52:
63:f0:ab:ef:44:f0:86:b9:b0:4b:38:c8:e7:b3:79:c4:9f:56:
7a:b9:c6:0d:52:23:05:0a:78:f7:2e:9b:0f:0f:b7:83:da:03:
14:5a:6c:b2:83:22:64:74:b5:22:a3:4f:24:a2:5a:de:5d:28:
b9:a0:0b:4e:7d:84:6a:29:9d:5f:0f:4f:f4:c9:46:59:22:66:
e0:7b:be:fc:1e:7d:d6:c4:c9:ab:4b:4e:23:2f:17:e1:ca:10:
f8:0d:1c:a8:3d:5e:7e:42:0d:69:a6:f6:f9:1b:24:50:b4:13:
60:2e:3d:6a:02:60:27:5d:ce:68:cb:f8:89:cb:48:88:75:81:
e0:01:8c:32:1a:c7:c3:1c:63:af:2e:49:d1:03:1d:05:a6:ab:
19:66:47:d8:b3:7c:bb:f5:1f:a5:e3:f5:14:81:18:15:ae:23:
53:42:18:ac:db:fb:b1:cd:30:5d:55:8a:6d:3f:20:6d:64:e3:
c9:c2:21:e4:40:10:ab:34:8c:c9:6c:32:32:4d:84:8f:14:a9:
23:ea:84:d2
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 4 15:50:30 2023 by rpki-client on console-ams.rpki-client.org