Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31372e302f32342d3234203d3e20323039313831.roa
File: 39332e39322e31372e302f32342d3234203d3e20323039313831.roa (raw, json)
Hash identifier: l5heB1rYt3LbTedeTc1aJAbFDiRJqpWYpJw5CV4yGlM=
Subject key identifier: AA:FC:A4:13:18:78:0C:29:A5:4C:66:F4:4A:EA:B4:03:93:29:3F:E5
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 0572FF6376124E9780E37FA530AA0F25257C56D4
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31372e302f32342d3234203d3e20323039313831.roa
Signing time: Thu 04 May 2023 11:15:15 +0000
ROA not before: Thu 04 May 2023 11:10:15 +0000
ROA not after: Thu 02 May 2024 11:15:15 +0000
asID: 209181
IP address blocks: 93.92.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:72:ff:63:76:12:4e:97:80:e3:7f:a5:30:aa:0f:25:25:7c:56:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: May 4 11:10:15 2023 GMT
Not After : May 2 11:15:15 2024 GMT
Subject: CN=AAFCA41318780C29A54C66F44AEAB40393293FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cf:96:39:a7:2e:3d:58:7e:6d:fb:8d:52:53:
cb:64:08:a9:60:0d:4a:37:3c:2e:d3:7f:db:7c:72:
02:c6:7c:e5:0f:b6:2c:6a:d0:f7:08:ac:a3:fe:18:
25:0a:fc:83:b6:fc:04:b1:31:8b:12:9e:0b:e5:d1:
d6:43:b5:87:83:ae:04:06:c1:59:ac:bf:f4:d6:9b:
e9:fd:c3:62:1a:01:e1:04:52:2f:40:bb:a8:65:a3:
54:53:8a:cb:32:92:bf:2d:14:93:62:f4:ea:cc:be:
a7:07:67:c9:1e:e7:7f:eb:14:55:cc:66:bb:d0:8c:
81:c3:3e:a5:3f:f8:87:46:d4:75:21:d7:5d:f2:eb:
28:7b:c1:ec:6f:84:be:ea:01:2f:e7:98:69:a4:60:
17:8d:46:9e:e9:77:02:36:bd:47:c2:5c:92:c8:a4:
91:1f:2f:01:3b:0a:77:da:f6:1c:90:7b:fa:37:e0:
f4:25:c1:0f:3c:23:a4:1f:9f:91:f6:b3:a7:bf:48:
cb:df:db:c6:78:fc:75:84:d4:79:93:89:ec:08:05:
af:3d:4b:6e:0d:8e:9f:ec:25:9f:93:3c:15:dd:52:
17:a9:55:58:94:b4:7e:9b:a2:9f:23:9b:80:1f:e4:
08:19:55:7a:0d:9e:63:2b:5a:13:9a:c3:c3:24:db:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:A4:13:18:78:0C:29:A5:4C:66:F4:4A:EA:B4:03:93:29:3F:E5
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31372e302f32342d3234203d3e20323039313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.17.0/24
Signature Algorithm: sha256WithRSAEncryption
93:de:00:7b:e4:b7:02:d7:a9:a0:9c:68:bd:db:1f:96:97:94:
76:5f:74:f8:e8:e6:31:5e:c7:62:cf:a3:72:0b:30:76:0c:d9:
29:0b:c5:22:94:9c:bf:b4:76:d8:10:8e:fc:66:c9:ba:06:e7:
f1:a3:4c:68:b1:7b:95:ae:f7:db:01:23:3c:76:97:07:af:1f:
a8:e8:44:8b:3b:a7:c6:e8:bf:1e:52:32:db:14:58:98:3c:8b:
b4:58:a1:c9:80:ab:df:5c:3b:bc:79:13:7b:29:bd:34:2c:6b:
8c:17:f6:17:43:1e:f2:38:f4:5f:9c:05:11:da:03:3d:09:37:
b2:63:c1:4b:dc:f8:0b:07:28:3e:c3:e9:16:ff:78:c2:5b:7c:
7b:0c:34:43:88:77:3b:d7:94:11:84:48:1b:e5:52:1e:a1:50:
be:ce:77:f1:93:e1:2c:9b:3a:f7:37:eb:aa:3d:e0:ac:c5:49:
f5:34:de:d5:b8:f6:ae:3c:68:6d:d3:c1:df:f7:c0:b8:b7:06:
0c:a0:f9:22:2b:77:d7:18:c7:fd:04:71:cd:2a:74:aa:d8:b2:
49:c3:b9:30:67:e3:7c:f3:ec:b5:26:7e:47:a8:28:88:fb:31:
a9:a6:31:dd:48:94:10:f7:d4:3a:6b:9a:d2:fe:05:9b:5e:20:
85:c3:44:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 00:28:04 2023 by rpki-client on console-fra.rpki-client.org