Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203134363138.roa
File: 322e35382e38342e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: BBHmKGvZ5TeRLYfNbc6Ecu9GW7dxy8LpQSBC822GBIA=
Subject key identifier: ED:BB:24:5E:82:27:B9:84:05:78:C4:35:AA:7C:90:C3:C6:1A:1E:66
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 5B5A8B17C5D2F1F1C9A00B170A88864775AA7435
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203134363138.roa
Signing time: Wed 10 May 2023 13:52:25 +0000
ROA not before: Wed 10 May 2023 13:47:25 +0000
ROA not after: Wed 08 May 2024 13:52:25 +0000
asID: 14618
IP address blocks: 2.58.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5a:8b:17:c5:d2:f1:f1:c9:a0:0b:17:0a:88:86:47:75:aa:74:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: May 10 13:47:25 2023 GMT
Not After : May 8 13:52:25 2024 GMT
Subject: CN=EDBB245E8227B9840578C435AA7C90C3C61A1E66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:30:99:0e:64:5e:c8:d7:71:d7:1d:1b:fa:
f6:6a:bd:f1:23:f3:87:37:e0:b2:fe:39:ba:7b:8d:
e7:af:31:ef:82:b2:0f:51:0a:06:43:79:ff:c9:80:
9a:58:97:c5:2b:f8:0f:c7:0a:2e:31:43:57:c4:a9:
ea:26:ce:c1:14:fe:56:01:29:50:dd:fc:89:33:68:
f2:4c:65:eb:82:13:1f:d7:73:28:36:17:55:d9:01:
c4:f0:17:cd:bb:49:65:4e:d9:01:9d:dd:7c:f4:dc:
7e:19:90:58:ca:af:78:7e:bc:4f:58:f3:a9:7c:23:
22:0e:3b:4b:1f:45:be:ef:cd:51:6e:92:57:53:a5:
05:be:1d:88:7b:f0:2a:c6:e3:3e:18:83:8f:52:89:
ec:ef:98:3d:a7:6b:f8:f2:5e:f5:02:09:03:73:3e:
46:70:d5:be:28:a9:9f:9b:b1:c4:28:6b:86:b4:25:
93:c6:ad:29:c3:45:59:a5:ab:0e:e7:b8:e0:36:c9:
0e:e1:5f:54:84:21:70:75:5f:db:62:51:1e:52:e5:
62:21:f4:ec:39:80:55:c8:7c:ba:9e:14:6d:88:ec:
ed:30:e5:d9:2d:fd:88:65:e0:b3:1f:f3:62:ed:fd:
12:6e:8c:7b:27:eb:40:12:ae:de:ff:0a:be:b2:be:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BB:24:5E:82:27:B9:84:05:78:C4:35:AA:7C:90:C3:C6:1A:1E:66
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c0:8b:b6:d4:9c:8a:08:29:e3:73:18:5a:b7:91:f9:56:d4:
1c:d0:de:ea:37:e9:e5:10:b7:da:8d:f9:b5:34:cf:70:8b:8d:
6f:5f:9b:21:72:96:be:3b:4a:19:fc:52:5d:1a:3b:3f:af:e6:
1a:cc:c2:16:65:07:c9:1e:7c:5e:99:79:31:28:a1:37:1f:1a:
7b:8a:c2:4b:7f:94:19:61:29:78:ee:21:63:92:97:7b:88:26:
21:5e:87:4c:c7:54:8f:a9:51:a1:45:4b:d7:49:5b:a2:71:93:
f3:a0:d3:aa:a8:dd:8a:9a:63:09:d1:62:f4:54:2e:49:65:35:
f0:fc:7a:cf:39:57:cd:99:1e:c9:27:54:b0:3f:91:98:c9:78:
88:f6:d2:56:38:52:e1:ca:9a:ac:83:ea:b0:aa:a2:38:58:ee:
03:0e:20:1a:70:45:bf:15:7b:42:72:0e:21:79:7d:36:57:4d:
af:12:e5:5f:75:61:3f:2b:4b:f6:05:b7:0a:57:4f:fe:68:74:
4f:cf:f3:4e:00:b7:ff:80:84:bf:a5:b2:eb:f9:2c:fb:6b:06:
12:f0:ff:44:3f:af:1a:4d:68:a3:13:8f:88:20:c6:32:04:6a:
f5:ef:a5:01:2d:ac:ad:fa:2e:1e:29:84:a7:a0:05:eb:2e:2b:
c4:45:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org