Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32302e302f32342d3234203d3e203536393133.roa
File: 39332e39322e32302e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: fIX5zJSySlHx0b0BWzgddsVi98YzEM6JXt48wh14/i8=
Subject key identifier: 02:84:8C:2C:B1:9F:82:6B:BA:83:50:39:C6:CF:82:E3:4F:AD:9A:84
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 72BA63B1F46B4ECD88CBFBE09F5A7516681909FC
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32302e302f32342d3234203d3e203536393133.roa
Signing time: Thu 04 Apr 2024 12:05:16 +0000
ROA not before: Thu 04 Apr 2024 12:00:16 +0000
ROA not after: Thu 03 Apr 2025 12:05:16 +0000
asID: 56913
IP address blocks: 93.92.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ba:63:b1:f4:6b:4e:cd:88:cb:fb:e0:9f:5a:75:16:68:19:09:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Apr 4 12:00:16 2024 GMT
Not After : Apr 3 12:05:16 2025 GMT
Subject: CN=02848C2CB19F826BBA835039C6CF82E34FAD9A84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:c3:5f:4f:69:fa:47:6e:49:dd:bf:68:7f:
ce:ba:4f:35:a0:7a:78:ec:f2:7a:9a:db:24:a8:8c:
c3:d6:6b:28:01:9b:8e:53:6c:94:b4:e9:b0:38:57:
e7:ef:ed:db:96:ac:9e:95:37:60:43:81:e5:1d:17:
f5:54:0f:18:0b:65:88:4e:8e:bb:d5:18:58:40:86:
1b:a2:9a:cd:3e:3a:e7:18:cb:88:c6:0a:d9:ae:a8:
8a:c7:17:59:0d:3c:59:20:38:b3:d2:3d:6b:c9:a8:
5a:cb:c0:56:c2:78:de:8b:df:0b:12:5e:1f:87:24:
61:c1:8f:cb:11:b3:16:ed:c5:e3:b8:dc:56:1b:3b:
84:78:91:a8:8a:d9:fe:a8:e1:63:dc:82:5f:01:7c:
33:a7:a7:cd:3d:6d:81:ae:42:a4:4f:cd:8c:fc:5a:
7d:4b:10:3b:38:cc:91:aa:5b:f7:b4:75:db:4c:24:
91:f9:03:a9:3a:74:ba:98:9f:44:19:90:8d:b0:08:
06:aa:d3:44:f8:55:61:91:ab:85:6d:34:cc:01:62:
f8:d2:83:5a:b8:2b:c4:8f:7c:c6:23:fd:14:88:0b:
07:b0:c8:fa:27:b5:47:7d:4c:57:c1:2f:bb:06:89:
16:b9:68:ff:69:a2:3e:2d:80:3b:8b:48:32:42:b3:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:84:8C:2C:B1:9F:82:6B:BA:83:50:39:C6:CF:82:E3:4F:AD:9A:84
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32302e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c2:75:df:cf:91:97:72:b9:55:00:8c:50:15:ac:20:d4:5b:
6b:41:21:f4:16:bb:8c:90:b3:3f:7d:88:64:bc:9d:0c:cf:b7:
56:68:d6:26:b8:fd:01:46:26:8e:00:3d:c1:c2:fd:c7:c6:f4:
bb:b8:8d:55:8c:a2:6f:ec:ae:66:3f:a1:72:ea:2d:d4:e8:4b:
22:a9:28:28:50:ab:37:1c:e4:85:3e:c0:b5:94:c0:03:77:16:
5c:3e:59:ae:6b:7c:ca:38:b3:ea:b1:71:18:af:9e:d8:c2:49:
3a:6b:4d:07:84:bf:24:ba:66:2c:d8:60:09:41:f0:08:60:94:
a9:cf:59:76:52:ac:ac:b4:2a:31:d4:7b:5a:04:09:49:b8:44:
9c:6d:e9:fa:77:e3:67:87:e8:d9:ed:e2:55:d8:89:3e:8c:2b:
b7:61:ab:a8:4f:67:7c:0d:70:bc:16:ae:ee:48:26:60:c0:55:
17:6a:9a:4d:1b:3e:54:1a:6f:c9:bf:a8:fe:d6:23:51:93:f1:
55:43:ad:c1:15:b6:09:53:09:0a:dc:82:3e:91:e8:5e:18:a7:
0e:54:53:82:51:a0:13:06:7f:38:00:6d:cf:e1:ec:9d:0d:d3:
2c:b8:33:2f:67:45:a4:80:a8:e7:6a:3c:a5:e5:f1:c9:4b:18:
92:f1:0c:dc
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 4 01:00:23 2024 by rpki-client on console-ams.rpki-client.org