Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e2033333536.roa
File: 39332e39322e32322e302f32332d3234203d3e2033333536.roa (raw, json)
Hash identifier: DJOuCCRiHt3GCqe4bd2P7oMmLnTvb8CUgURASXoOtJU=
Subject key identifier: 5E:EE:7D:21:76:88:D8:70:2D:B1:35:E0:CF:22:E2:04:26:C9:B7:FB
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 4676190C99C9B90D3AEB2060A8238404E34ADBF7
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e2033333536.roa
Signing time: Sun 01 Oct 2023 07:39:30 +0000
ROA not before: Sun 01 Oct 2023 07:34:30 +0000
ROA not after: Sun 29 Sep 2024 07:39:30 +0000
asID: 3356
IP address blocks: 93.92.22.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:76:19:0c:99:c9:b9:0d:3a:eb:20:60:a8:23:84:04:e3:4a:db:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Oct 1 07:34:30 2023 GMT
Not After : Sep 29 07:39:30 2024 GMT
Subject: CN=5EEE7D217688D8702DB135E0CF22E20426C9B7FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:b3:a5:76:c9:7f:96:37:3a:89:12:a6:25:
02:6e:3f:72:17:1a:3c:50:86:d6:16:b4:ab:fa:0b:
3b:56:22:3a:98:d9:8b:f3:95:0e:a4:b0:32:8b:2a:
fb:3c:ff:a4:a1:16:36:b4:09:1c:92:96:26:45:7d:
91:88:9c:73:8e:29:da:54:4d:de:de:01:c4:93:5f:
96:7d:29:ae:3e:28:1e:3c:94:4c:43:ea:fa:e3:85:
77:ec:eb:bb:7e:33:5e:1e:1a:8c:3a:35:fd:b7:a7:
e7:98:e1:12:e2:14:3c:b0:e1:ab:85:79:3e:68:73:
12:9d:99:09:1b:27:d9:83:6c:0e:d4:1c:b2:c1:46:
e4:3d:10:fd:39:1c:a0:c9:e9:d0:a6:12:b4:17:86:
71:d4:28:68:9f:38:48:21:51:92:f6:69:9e:3c:a0:
65:41:c2:81:ec:5e:b0:80:4b:e4:42:ae:39:5f:58:
0b:c6:66:49:aa:d7:c6:b0:6e:96:32:32:ba:cc:7b:
eb:e0:8c:fe:5e:86:0f:c3:a1:ee:84:0b:95:71:4e:
3a:ec:24:e8:8a:e3:ae:91:ab:53:33:e8:85:d3:82:
ab:6c:19:ee:2d:8a:a4:aa:54:7a:5c:82:c5:cd:30:
9c:58:83:d1:25:c8:72:04:eb:49:25:be:45:4f:a7:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EE:7D:21:76:88:D8:70:2D:B1:35:E0:CF:22:E2:04:26:C9:B7:FB
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
79:c9:f3:44:f1:2c:63:63:da:31:b5:a0:ae:c7:1c:b3:d7:c8:
73:c2:40:5b:93:4a:0c:09:92:9c:af:4b:f0:77:6a:38:65:fd:
dc:42:79:51:a1:44:62:26:b0:f3:2e:2a:d5:6d:c8:81:60:2e:
1e:0a:b5:f2:f6:70:4b:4c:84:73:b9:55:f7:2e:fa:67:2e:5d:
92:a9:f0:03:f0:22:a7:01:4e:2c:e7:73:43:18:45:1c:03:9c:
0b:92:51:cb:17:16:c4:54:99:c5:44:6c:8d:95:f0:dd:64:98:
7b:c4:5a:f6:fc:2f:0a:e0:4e:0f:0e:28:50:14:ac:9e:a9:73:
24:e5:59:12:5e:51:e4:f1:46:d2:ad:74:6a:99:72:a3:4c:06:
da:1e:a8:d5:02:e1:ea:5d:ec:f8:1b:8b:43:71:7a:0f:a7:48:
bd:36:98:49:f0:ac:3e:c8:5b:78:83:cb:f9:91:11:b5:b5:cd:
df:53:18:8b:02:ec:2c:d1:f1:2f:76:26:40:79:d0:a7:f8:07:
8c:a5:eb:a5:e8:1b:1f:d2:41:75:31:36:0c:52:72:15:6b:98:
80:c5:38:1a:76:69:64:a9:a3:39:95:bc:ad:c1:0b:64:27:7d:
f9:b4:f1:c1:38:3d:1b:80:d5:f1:4a:c0:1c:25:74:1e:06:93:
de:95:da:d0
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 15 00:46:27 2023 by rpki-client on console-fra.rpki-client.org