Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32302e302f32342d3234203d3e20383334.roa
File: 39332e39322e32302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +ZxtHLLEmWYVlJ/wqlkz6CmMKsPwDJea8qlYRLOZ7rY=
Subject key identifier: 6F:B5:C8:4A:18:79:41:31:F3:0E:F6:7C:16:9A:39:19:BD:0C:39:0A
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 02B0DCF8DCB0629AB59E0EF196693DAA347AAA07
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32302e302f32342d3234203d3e20383334.roa
Signing time: Fri 08 Nov 2024 13:08:33 +0000
ROA not before: Fri 08 Nov 2024 13:03:33 +0000
ROA not after: Fri 07 Nov 2025 13:08:33 +0000
asID: 834
IP address blocks: 93.92.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 14:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:b0:dc:f8:dc:b0:62:9a:b5:9e:0e:f1:96:69:3d:aa:34:7a:aa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Nov 8 13:03:33 2024 GMT
Not After : Nov 7 13:08:33 2025 GMT
Subject: CN=6FB5C84A18794131F30EF67C169A3919BD0C390A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:fe:d1:42:dc:31:61:43:f0:28:89:84:24:
a2:cb:f2:d6:e8:73:aa:a2:1a:bb:88:a6:7e:7c:de:
f8:94:1a:b7:55:d2:3f:fa:89:a7:9c:1d:15:3a:0e:
36:9b:d4:5c:77:8a:74:dc:8c:9e:70:d6:ce:80:7e:
4c:5c:c7:20:a3:ae:b2:2f:5f:43:d6:f0:53:5b:ed:
7c:2b:db:c4:27:7e:70:60:91:bd:98:cf:a0:40:ed:
ba:9f:14:43:a4:bf:30:23:bf:ba:7a:ad:94:95:d2:
3d:ff:51:ac:b7:4a:68:55:73:82:2e:c8:81:d0:15:
60:33:eb:78:7d:58:dc:6f:2e:2c:0b:70:32:e7:06:
91:62:74:95:7f:b0:7a:90:91:7d:0a:2c:d1:fa:83:
28:43:82:81:28:e0:6f:c3:90:18:18:e3:9b:85:52:
8a:63:de:e1:ad:7f:3d:aa:1c:fe:33:ce:fe:01:23:
11:88:13:01:4f:d5:74:f3:d0:78:c9:cf:ff:9a:74:
22:67:ef:68:ca:74:c5:65:73:08:1f:41:a5:7f:78:
60:c8:20:ba:d6:9b:af:ee:e6:09:4b:a9:23:04:d8:
7f:7b:cd:23:bb:a3:4b:6b:d9:c9:23:31:ff:da:5b:
1b:46:e3:4e:c8:80:c0:e6:b1:34:95:9b:09:93:24:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B5:C8:4A:18:79:41:31:F3:0E:F6:7C:16:9A:39:19:BD:0C:39:0A
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
22:07:80:ef:2b:9f:de:6e:81:b1:97:7d:11:46:30:88:4f:e6:
b6:af:d0:65:7d:f7:af:0a:5e:1d:24:4f:e2:3f:4c:1b:34:c2:
00:ac:61:7d:80:b6:2b:0f:3c:50:32:6e:32:bd:44:ed:2b:17:
87:f7:21:11:49:c1:70:26:7f:38:fa:09:39:e4:95:6f:41:bf:
61:f9:95:3f:f2:b7:0b:f4:84:f1:45:ec:f4:9b:15:93:33:c5:
cf:d1:55:c8:2d:67:0f:25:57:f7:e8:45:48:9d:03:c9:00:2a:
89:e8:e7:d4:8e:39:60:7a:0a:62:f8:b9:db:38:fb:dc:a4:7c:
7d:a3:03:fe:0f:d2:99:a4:4b:9d:bf:ff:f1:b2:c7:18:6c:95:
b6:9f:b2:0f:d7:5f:98:8c:89:5f:fc:b8:de:26:d3:fd:56:81:
b1:63:21:15:86:57:23:36:e3:87:71:8d:26:f9:43:f2:ac:e4:
a1:cd:99:43:43:67:a3:ac:db:93:bb:8c:53:a4:bf:cb:22:b3:
ec:62:99:fa:0a:9d:c5:b9:ce:29:fb:37:b8:d1:c7:ab:54:d1:
d9:dd:20:6b:76:52:16:61:27:a1:74:c5:83:ee:3f:1d:f7:44:
8f:f2:d5:99:38:b7:84:5f:2b:ea:d4:d2:a9:dd:8a:1d:83:1b:
d8:1b:04:54
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 8 19:11:59 2024 by rpki-client on console-ams.rpki-client.org