Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e20323034383433.roa
File: 39332e39322e31382e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: 5brqDm3Yr4dBOOtOhkEqcYRjL7DXtkq5ehz//4wagII=
Subject key identifier: 38:7D:7E:F9:74:87:DC:82:82:CE:12:89:74:EB:CE:A0:15:7E:07:DC
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 0E03568A341A0899314EA7E30D884A3F3F7B965E
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e20323034383433.roa
Signing time: Thu 04 May 2023 11:15:16 +0000
ROA not before: Thu 04 May 2023 11:10:16 +0000
ROA not after: Thu 02 May 2024 11:15:16 +0000
asID: 204843
IP address blocks: 93.92.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:03:56:8a:34:1a:08:99:31:4e:a7:e3:0d:88:4a:3f:3f:7b:96:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: May 4 11:10:16 2023 GMT
Not After : May 2 11:15:16 2024 GMT
Subject: CN=387D7EF97487DC8282CE128974EBCEA0157E07DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:05:9c:d2:0f:97:9e:95:c6:80:15:f1:aa:
8f:ee:85:6c:25:a6:57:d0:da:dd:32:98:79:cb:f1:
da:5b:a3:f7:97:60:b2:c3:0d:4c:16:ca:60:81:97:
14:81:15:3a:6d:7b:7d:cc:9f:3d:ad:2c:f6:0b:a1:
86:34:17:94:4f:90:bf:58:6a:81:88:21:74:2c:29:
ae:8e:22:03:f6:ae:62:45:74:92:58:71:41:13:86:
e3:c9:dd:de:20:79:cb:18:8f:51:6b:79:94:9e:30:
52:00:22:91:28:19:ee:96:1e:74:f7:4b:31:ec:b1:
2e:19:ba:9f:a5:6b:b9:73:08:3f:5b:ad:3e:0f:8d:
90:33:61:d6:cd:0c:9d:80:ba:91:da:0e:a4:8e:34:
f9:c7:58:4e:94:1e:5b:94:c0:d8:eb:d5:45:01:5a:
49:7d:4a:f5:33:e6:fe:83:65:61:3a:b8:5a:a9:5d:
cc:8e:b2:1d:c3:fb:87:ba:dd:36:37:3a:36:55:78:
5c:a2:ff:5d:a4:59:a8:7c:9c:13:d0:2d:bf:7b:a4:
6d:19:5d:39:04:f9:d3:bc:c7:92:73:38:d8:17:f8:
a4:dc:db:11:d7:da:43:d6:08:36:78:67:71:38:df:
bd:d5:ec:6f:7c:ea:ae:1c:5a:59:ff:38:f5:13:76:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:7E:F9:74:87:DC:82:82:CE:12:89:74:EB:CE:A0:15:7E:07:DC
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c7:2d:38:35:3f:11:af:a4:04:66:73:7e:97:94:ba:cf:00:
65:79:af:67:9e:06:c7:19:c8:51:92:7e:63:79:ee:d0:d1:a7:
90:38:78:da:07:d3:20:89:9f:22:44:b7:32:22:a5:28:83:f9:
78:bd:30:90:8f:9d:ec:53:60:a0:b9:79:80:e3:01:e2:7a:25:
f7:15:fd:00:d9:05:08:25:73:4a:a4:04:d2:ea:14:f7:f0:f3:
4d:2e:98:72:09:8c:e4:ad:7a:37:8d:a3:03:73:b8:fd:11:75:
39:79:fa:d9:f4:6f:59:fa:58:8f:84:12:aa:ad:67:6d:56:50:
e1:87:5b:34:b7:95:a6:6c:ac:e1:3e:31:4e:41:89:1e:37:2b:
54:79:b9:4c:cb:cc:81:87:c4:c8:73:ab:b1:cf:be:20:96:2b:
c9:91:50:81:2c:bd:e4:91:d2:13:77:ce:d1:c1:14:66:ad:0e:
2b:19:60:27:91:8b:84:a7:d4:72:50:b0:99:74:f9:79:70:2e:
a0:71:4b:0b:fd:18:8e:df:2e:d6:44:60:0c:12:f1:24:89:4d:
5a:2e:34:a8:fb:61:e1:81:68:7b:8c:2d:5a:49:95:3a:fe:2e:
c8:8b:2d:64:dd:50:f3:c0:8a:db:3e:32:fc:72:47:12:f6:6b:
41:e0:6e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org