Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32312e302f32342d3234203d3e20383334.roa
File: 39332e39322e32312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5K8PV+JU+dEJGwA27AACks0ZOOoE0eoh/Oo7XTWIaQk=
Subject key identifier: E2:66:43:11:81:22:76:D0:10:99:56:E8:DD:13:FB:D4:54:EF:F5:BC
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 3521CE4CF133FF339775130C4DB3E7F07A6D5D2C
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32312e302f32342d3234203d3e20383334.roa
Signing time: Mon 29 May 2023 14:30:05 +0000
ROA not before: Mon 29 May 2023 14:25:05 +0000
ROA not after: Mon 27 May 2024 14:30:05 +0000
asID: 834
IP address blocks: 93.92.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:21:ce:4c:f1:33:ff:33:97:75:13:0c:4d:b3:e7:f0:7a:6d:5d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: May 29 14:25:05 2023 GMT
Not After : May 27 14:30:05 2024 GMT
Subject: CN=E2664311812276D0109956E8DD13FBD454EFF5BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:31:ca:c6:bb:aa:ec:de:92:91:60:f8:a6:
ef:ff:e4:b2:c5:be:52:63:5e:fa:89:ca:41:87:c0:
00:61:e4:12:92:88:6b:d8:b9:a6:a9:09:0d:7d:15:
fa:e6:f8:93:6a:56:b6:90:4e:91:c3:2c:5d:b9:e3:
d0:03:54:ac:fd:41:8f:76:02:3c:c7:88:b2:41:7c:
eb:1f:01:58:5c:35:88:03:33:e5:88:27:8f:ed:d9:
1a:4d:c4:d4:7f:20:16:d2:2d:c4:71:27:54:29:76:
7a:f8:c6:85:76:b1:08:b1:7a:16:a4:82:49:79:9c:
2c:46:e5:ae:93:27:5a:b1:24:89:d0:99:a7:38:e4:
d6:cc:af:ce:d7:23:91:d8:a3:ea:a8:7b:3a:d3:86:
2b:5d:a7:a2:97:a4:e7:bf:a9:bd:64:c5:cb:db:49:
08:6e:ca:cc:4b:b6:1d:c7:62:e4:ce:26:46:1c:ec:
5b:f3:24:6a:b1:a1:75:85:02:fa:bd:70:1a:1b:ff:
07:a8:3b:a9:ca:aa:e0:e1:56:00:80:e3:f8:b0:c0:
51:3b:46:f8:e0:8f:4f:29:37:61:33:cc:1b:a9:22:
1a:f5:cf:be:9f:61:12:36:e5:a4:ff:fb:f8:21:cc:
98:b7:6b:3c:38:83:a0:25:b2:11:a8:e4:a5:7e:19:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:66:43:11:81:22:76:D0:10:99:56:E8:DD:13:FB:D4:54:EF:F5:BC
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
27:92:82:37:e2:45:ef:2c:1c:8a:fb:19:7b:f8:e0:0d:b5:50:
26:cd:fc:3c:40:8b:b5:af:34:1c:65:fd:b0:47:54:b8:4d:3e:
97:6e:a0:4a:f5:a2:11:21:70:f2:3a:ae:4b:09:4c:89:31:04:
1f:c6:18:a4:67:ce:f1:17:a1:01:08:b7:d0:f3:e3:cd:39:55:
71:38:6b:74:a3:5f:32:f5:f3:66:99:a3:bc:35:e5:f0:05:47:
29:8b:23:c5:9b:e0:ff:e5:31:9c:2d:34:f7:04:09:58:e3:cf:
ce:9d:07:4f:e8:d5:a4:cd:ab:54:7d:ff:28:c4:4f:a7:b4:58:
39:31:5c:e4:b3:49:7a:ca:93:2d:5b:01:93:94:fc:27:2b:ba:
8d:12:89:89:07:f2:72:4e:08:af:4e:de:f0:03:54:a4:94:e2:
45:51:24:1c:9f:d0:56:e1:b7:a5:ea:48:02:85:8e:65:87:24:
e1:df:f9:6a:bd:f5:80:0f:78:0d:c4:0e:fa:27:6e:1a:6e:95:
25:3f:3e:83:0e:d1:7e:4a:76:4b:3c:b0:63:d7:3a:c8:d4:6c:
3b:ef:30:40:aa:c7:19:c3:2f:b6:8b:79:8d:06:a2:25:e8:a4:
f7:ff:03:f8:09:b4:53:dc:ba:c7:72:6f:29:94:8b:99:72:25:
d0:61:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org