Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e2033333230.roa
File: 39332e39322e32322e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: K5ZqyltXDV+484VEROm+MWobJCcjF5hLFlShCCCsBlc=
Subject key identifier: A7:2E:E0:CE:88:BE:20:6A:91:8E:6D:8C:02:2C:D6:7A:07:D3:9F:B0
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 4E09A8F37CEEC63AB72AB6ED3BDF312079C5C9F0
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e2033333230.roa
Signing time: Fri 16 Jun 2023 08:55:43 +0000
ROA not before: Fri 16 Jun 2023 08:50:43 +0000
ROA not after: Fri 14 Jun 2024 08:55:43 +0000
asID: 3320
IP address blocks: 93.92.22.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:09:a8:f3:7c:ee:c6:3a:b7:2a:b6:ed:3b:df:31:20:79:c5:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jun 16 08:50:43 2023 GMT
Not After : Jun 14 08:55:43 2024 GMT
Subject: CN=A72EE0CE88BE206A918E6D8C022CD67A07D39FB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:0a:1b:62:a4:75:b9:2e:8f:ee:dc:cc:4d:
74:14:8e:11:06:27:0d:bc:dd:9d:26:09:85:66:20:
32:d8:f5:13:5a:4d:88:ad:af:d6:6e:d5:03:12:a1:
14:d7:06:a2:4f:d1:bb:fd:d6:2a:d1:f7:06:1a:7f:
9c:f1:16:d7:81:63:ce:49:64:55:70:f1:e2:a9:21:
7f:94:e1:b8:8e:df:cf:4a:83:79:44:1a:5e:20:67:
21:5a:d1:14:a3:8d:2f:e7:f7:9b:3e:0c:28:9d:05:
01:d0:c1:67:4b:e7:16:b9:eb:ff:ee:74:f0:b3:d4:
81:f5:1b:56:42:4c:6d:51:f4:15:d3:7f:35:c7:71:
c3:2e:37:30:2d:21:8e:28:8c:aa:8f:02:70:e8:ff:
64:ca:1b:e7:14:7d:ed:23:7a:31:a3:a7:4b:64:7e:
e7:90:06:a7:c5:56:0f:ec:43:4e:d2:5e:a0:75:80:
ce:0b:cb:48:f2:f7:5a:dc:27:66:a6:8e:02:b9:bf:
89:cd:f0:e4:8c:73:9a:23:f3:b8:11:42:81:e0:54:
06:49:05:1e:af:c6:e4:d5:fe:f3:cc:9f:7c:01:c8:
05:45:6e:9a:91:b9:46:8a:bd:f4:1d:82:2b:b3:c9:
bf:f7:5b:cf:5c:93:a9:cb:31:e4:3c:f6:a5:46:99:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2E:E0:CE:88:BE:20:6A:91:8E:6D:8C:02:2C:D6:7A:07:D3:9F:B0
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
57:16:f5:cd:b0:6f:07:3c:90:37:e4:3e:78:e0:8c:75:c6:8e:
ca:23:81:d4:a3:db:b9:d4:1f:9e:6d:12:c6:22:1d:82:e8:43:
57:57:ef:5d:eb:b2:0b:ba:ae:74:26:f8:a7:ad:87:54:97:0e:
9d:7b:ea:a5:c3:68:9f:09:ee:f6:c9:03:d4:74:5d:20:d1:37:
09:c3:3a:84:ae:77:7c:03:69:ac:f9:42:85:9d:89:aa:2d:1d:
b6:25:61:34:88:c8:9b:81:7d:1c:84:dd:44:03:3a:6f:03:a8:
22:33:13:91:8c:5f:3c:64:88:5e:eb:62:5f:c6:fd:6c:66:98:
db:45:3e:df:59:64:e2:da:a7:34:6b:00:4d:b7:90:7d:58:2d:
e6:4f:bf:b2:33:15:35:aa:2a:da:fe:bf:bd:06:fd:81:07:ed:
83:6f:cb:30:16:bc:2f:08:9e:8f:16:e7:c0:68:da:e4:71:ef:
c4:bb:ae:3f:2b:38:60:63:6e:97:a9:e7:d9:78:85:73:39:04:
3c:f6:1f:6a:2c:06:c1:5b:f0:4d:9a:d1:a4:fd:7f:dd:e5:2b:
aa:e5:55:17:7f:cc:0e:5d:65:a9:f4:3c:cd:69:84:d3:8b:6b:
f9:53:fe:83:eb:5b:9b:a8:cf:02:d1:da:f9:71:0b:94:6e:87:
15:b6:36:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 00:45:19 2023 by rpki-client on console-ams.rpki-client.org