Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e20383334.roa
File: 39332e39322e32322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 5EFnsDKvY58wAtWozBAClfZQevWYFRlfJP5W7FHcTUo=
Subject key identifier: D6:76:6E:3B:80:D7:B7:88:4D:2E:C2:19:D3:52:43:F6:C8:3A:A6:FC
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 346840EE720909FDCD96CEB821F9A3BBB1AA92AD
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e20383334.roa
Signing time: Sun 15 Oct 2023 00:00:08 +0000
ROA not before: Sat 14 Oct 2023 23:55:08 +0000
ROA not after: Sun 13 Oct 2024 00:00:08 +0000
asID: 834
IP address blocks: 93.92.22.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:68:40:ee:72:09:09:fd:cd:96:ce:b8:21:f9:a3:bb:b1:aa:92:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Oct 14 23:55:08 2023 GMT
Not After : Oct 13 00:00:08 2024 GMT
Subject: CN=D6766E3B80D7B7884D2EC219D35243F6C83AA6FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:30:61:5c:37:de:58:14:7f:bb:43:a4:72:
07:95:79:35:09:81:7d:ac:29:e7:fa:a4:0b:f1:cd:
c8:af:5f:0c:66:61:84:b4:97:15:25:22:2d:9f:c2:
76:9c:05:db:79:bc:70:18:14:8e:5d:cb:66:c8:07:
45:f0:b6:e7:04:ac:3d:a0:33:c4:2b:e6:ad:ca:68:
90:ce:2a:e4:f7:c1:0b:90:30:66:01:0a:a3:86:cf:
bb:0c:d6:65:39:8d:27:35:31:db:7f:43:5e:96:f1:
fb:b0:f1:eb:7a:33:cd:0d:0e:00:e4:83:e9:9f:f3:
68:27:94:a3:97:c7:09:c6:1e:16:a5:f3:50:aa:b6:
f9:23:be:a0:ac:2e:58:ef:45:63:9a:67:d4:34:2f:
1c:dc:9a:ef:c8:4e:e9:e0:f6:09:41:e5:6d:81:b5:
14:a6:e8:cc:28:a1:b9:0b:2c:a9:ec:c9:19:dc:d0:
32:a9:97:fb:3f:10:37:d1:b8:35:89:4f:c7:2c:9d:
3c:46:70:98:b3:ab:5d:f8:34:ea:f1:db:31:02:b8:
42:44:35:5c:5e:6c:eb:eb:c6:f1:38:b3:3b:86:b0:
0c:2f:63:03:37:05:8f:84:16:9e:0b:7f:c4:17:17:
a1:ce:bc:ad:1d:ed:75:00:f4:56:3d:3e:9b:8a:34:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:6E:3B:80:D7:B7:88:4D:2E:C2:19:D3:52:43:F6:C8:3A:A6:FC
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
63:52:bf:d5:ef:13:55:fb:33:bc:de:25:48:d0:80:9e:cb:8c:
27:5e:0f:69:7a:ba:4a:44:6d:55:50:74:a8:9e:d3:26:15:3d:
bc:22:48:1c:4e:ec:75:0b:31:34:d7:76:e1:09:b1:c1:ff:eb:
3b:f4:8f:c5:f7:b5:e3:d1:9c:e4:34:b9:7b:0a:13:ae:35:af:
9e:22:ab:fc:12:55:73:40:94:dd:f9:37:d1:60:32:6a:7b:af:
65:37:12:ef:26:ea:99:62:69:9d:97:fd:2b:9c:10:fb:12:64:
2f:51:ed:57:fc:a7:24:6b:87:8d:8b:57:75:cf:a0:8a:d8:89:
26:86:27:ec:55:b7:a2:79:38:36:b7:c2:2d:2e:a3:b3:8b:9c:
0a:ff:5c:85:37:92:5f:fd:ae:a6:6c:89:a1:f8:76:04:59:b1:
4c:e0:a5:f7:5c:92:8e:c3:7b:a3:7b:15:40:7e:f9:1d:2f:af:
ae:93:9a:94:32:72:c2:1b:2e:42:57:2b:a8:15:aa:11:90:f6:
9e:80:12:98:3a:1c:54:47:cd:c2:b4:01:7e:f9:d3:0d:7d:cd:
ee:c4:7a:ea:48:a1:2f:2a:17:6d:2d:d9:78:3b:ef:7b:32:2d:
e7:f7:a1:76:ee:56:08:22:2a:cd:20:aa:60:0f:c3:b7:35:74:
8a:65:06:9d
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUNGhA7nIJCf3Nls64Ifmju7Gqkq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm
YWRhMzQ0NDAeFw0yMzEwMTQyMzU1MDhaFw0yNDEwMTMwMDAwMDhaMDMxMTAvBgNV
BAMTKEQ2NzY2RTNCODBEN0I3ODg0RDJFQzIxOUQzNTI0M0Y2QzgzQUE2RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjzBhXDfeWBR/u0OkcgeVeTUJ
gX2sKef6pAvxzcivXwxmYYS0lxUlIi2fwnacBdt5vHAYFI5dy2bIB0XwtucErD2g
M8Qr5q3KaJDOKuT3wQuQMGYBCqOGz7sM1mU5jSc1Mdt/Q16W8fuw8et6M80NDgDk
g+mf82gnlKOXxwnGHhal81CqtvkjvqCsLljvRWOaZ9Q0Lxzcmu/ITung9glB5W2B
tRSm6MwoobkLLKnsyRnc0DKpl/s/EDfRuDWJT8csnTxGcJizq134NOrx2zECuEJE
NVxebOvrxvE4szuGsAwvYwM3BY+EFp4Lf8QXF6HOvK0d7XUA9FY9PpuKNN0HAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQU1nZuO4DXt4hNLsIZ01JD9sg6pvwwHwYDVR0j
BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5
NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y
YU5FUS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYt
NjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5NDMxLzEvMzkzMzJlMzkzMjJlMzIzMjJl
MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV1cFjANBgkq
hkiG9w0BAQsFAAOCAQEAY1K/1e8TVfszvN4lSNCAnsuMJ14PaXq6SkRtVVB0qJ7T
JhU9vCJIHE7sdQsxNNd24Qmxwf/rO/SPxfe149Gc5DS5ewoTrjWvniKr/BJVc0CU
3fk30WAyanuvZTcS7ybqmWJpnZf9K5wQ+xJkL1HtV/ynJGuHjYtXdc+gitiJJoYn
7FW3onk4NrfCLS6js4ucCv9chTeSX/2upmyJofh2BFmxTOCl91ySjsN7o3sVQH75
HS+vrpOalDJywhsuQlcrqBWqEZD2noASmDocVEfNwrQBfvnTDX3N7sR66kihLyoX
bS3ZeDvvezIt5/ehdu5WCCIqzSCqYA/DtzV0imUGnQ==
Generated at Fri Dec 15 12:42:01 2023 by rpki-client on console-fra.rpki-client.org