Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e20383334.roa
File: 39332e39322e31382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: yb6hLk0MaYlt4tFy3Bxvj+bfzZgKZeDmgv8wUtWbEHE=
Subject key identifier: 83:E6:15:87:F4:EA:07:DC:E2:0F:D5:01:47:EA:9C:04:F3:84:5B:78
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 70CEBDE65082E48543B2557C913861F137C97F23
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e20383334.roa
Signing time: Tue 06 Jun 2023 10:00:06 +0000
ROA not before: Tue 06 Jun 2023 09:55:06 +0000
ROA not after: Tue 04 Jun 2024 10:00:06 +0000
asID: 834
IP address blocks: 93.92.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ce:bd:e6:50:82:e4:85:43:b2:55:7c:91:38:61:f1:37:c9:7f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jun 6 09:55:06 2023 GMT
Not After : Jun 4 10:00:06 2024 GMT
Subject: CN=83E61587F4EA07DCE20FD50147EA9C04F3845B78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:ce:b0:08:75:3b:e6:59:4d:38:84:f1:ff:
f4:88:1e:da:2c:66:12:51:37:58:d6:de:29:57:1f:
2c:64:23:18:e1:48:f2:6e:19:75:ee:ad:9b:ff:a4:
93:b8:fe:43:2f:7f:bd:1b:9d:86:b9:d9:96:58:cb:
e4:84:ff:b8:f7:e2:54:f9:1d:0b:d4:6f:f2:2b:8c:
0a:ac:a6:b9:a8:d8:81:70:26:4c:16:08:f0:b4:bf:
b6:54:18:5c:55:95:02:75:63:92:32:6a:a8:87:6e:
23:76:a8:e2:58:91:a5:46:91:e6:a8:26:4c:9a:e2:
92:ec:a1:f7:c0:f4:29:a5:23:eb:57:80:27:d5:f1:
5f:b1:e7:ad:10:5f:44:c4:48:c6:1d:84:55:67:98:
58:3f:ba:16:e9:e2:6c:33:20:7f:e9:b1:c6:86:dd:
63:a7:b7:19:47:63:38:8f:d4:87:7a:75:de:22:b8:
ee:34:bf:6b:e9:a6:f0:26:cd:5a:58:10:2e:b4:af:
01:7f:a9:ee:34:a7:2e:ff:4c:b0:39:eb:eb:20:77:
d8:78:78:48:3e:7a:52:82:4b:66:0d:c7:6d:9f:21:
e1:52:81:7a:31:7b:c2:63:6a:2f:df:a3:32:6f:95:
4b:b0:4f:27:ec:44:5a:5a:11:c9:25:b8:c7:e2:22:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:15:87:F4:EA:07:DC:E2:0F:D5:01:47:EA:9C:04:F3:84:5B:78
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3d:78:ed:da:0e:cd:2a:d6:e4:6d:d8:22:b0:ed:51:7c:02:
7f:d4:43:d7:38:70:58:cb:a7:f8:8b:d1:51:5a:62:67:77:a3:
e7:9b:3f:cc:42:a5:49:7d:01:ec:57:a1:4a:15:bc:b5:2e:3c:
62:51:54:55:2b:06:9a:22:7b:a5:1e:45:b9:79:42:0e:b0:92:
88:75:2a:56:71:a2:1a:0d:9d:c1:13:1a:cb:79:37:36:a7:f2:
54:a5:33:ba:c2:41:ba:30:70:8d:7b:96:cd:b9:d1:d8:f3:fc:
36:85:4e:1a:ec:9a:aa:86:ef:61:03:72:21:c4:b5:02:0a:9c:
55:a8:30:cc:0a:87:37:be:f7:56:4e:44:f9:d9:cb:a2:66:11:
99:17:ff:61:5a:77:45:f0:2e:77:3c:81:f3:d3:94:d6:d8:f1:
63:d7:c6:4c:0c:16:b9:48:57:0a:9b:45:f9:06:7d:c9:57:ea:
7f:24:6d:64:2a:ed:35:aa:dc:97:df:db:31:8f:fe:82:ff:88:
00:8a:4d:25:46:0a:1f:4a:02:39:1e:74:72:ec:8f:b0:73:0d:
6f:ac:b4:00:17:54:19:6b:3d:b4:8f:b5:05:06:32:f9:ea:60:
ce:85:7c:cd:b8:60:43:0a:fa:97:6a:1e:d7:ea:38:d0:1e:e2:
9d:ee:cb:f4
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUcM695lCC5IVDslV8kThh8TfJfyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm
YWRhMzQ0NDAeFw0yMzA2MDYwOTU1MDZaFw0yNDA2MDQxMDAwMDZaMDMxMTAvBgNV
BAMTKDgzRTYxNTg3RjRFQTA3RENFMjBGRDUwMTQ3RUE5QzA0RjM4NDVCNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAs6wCHU75llNOITx//SIHtos
ZhJRN1jW3ilXHyxkIxjhSPJuGXXurZv/pJO4/kMvf70bnYa52ZZYy+SE/7j34lT5
HQvUb/IrjAqsprmo2IFwJkwWCPC0v7ZUGFxVlQJ1Y5IyaqiHbiN2qOJYkaVGkeao
Jkya4pLsoffA9CmlI+tXgCfV8V+x560QX0TESMYdhFVnmFg/uhbp4mwzIH/pscaG
3WOntxlHYziP1Id6dd4iuO40v2vppvAmzVpYEC60rwF/qe40py7/TLA56+sgd9h4
eEg+elKCS2YNx22fIeFSgXoxe8Jjai/fozJvlUuwTyfsRFpaEckluMfiIj37AgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUg+YVh/TqB9ziD9UBR+qcBPOEW3gwHwYDVR0j
BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5
NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y
YU5FUS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYt
NjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5NDMxLzEvMzkzMzJlMzkzMjJlMzEzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF1cEjANBgkq
hkiG9w0BAQsFAAOCAQEAhT147doOzSrW5G3YIrDtUXwCf9RD1zhwWMun+IvRUVpi
Z3ej55s/zEKlSX0B7FehShW8tS48YlFUVSsGmiJ7pR5FuXlCDrCSiHUqVnGiGg2d
wRMay3k3NqfyVKUzusJBujBwjXuWzbnR2PP8NoVOGuyaqobvYQNyIcS1AgqcVagw
zAqHN773Vk5E+dnLomYRmRf/YVp3RfAudzyB89OU1tjxY9fGTAwWuUhXCptF+QZ9
yVfqfyRtZCrtNarcl9/bMY/+gv+IAIpNJUYKH0oCOR50cuyPsHMNb6y0ABdUGWs9
tI+1BQYy+epgzoV8zbhgQwr6l2oe1+o40B7ine7L9A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org