Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203136353039.roa
File: 322e35382e38342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: bdFEm7ZglvKfO2l63znXfqHo28pgTHxJeETS33yu27o=
Subject key identifier: C8:FC:F9:B9:3C:88:E8:E1:C8:ED:56:FA:E4:2F:E5:BF:1C:75:FD:2C
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 351CE3622CCF3385C98352D03298A7A264B141C0
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203136353039.roa
Signing time: Wed 10 May 2023 13:52:26 +0000
ROA not before: Wed 10 May 2023 13:47:26 +0000
ROA not after: Wed 08 May 2024 13:52:26 +0000
asID: 16509
IP address blocks: 2.58.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1c:e3:62:2c:cf:33:85:c9:83:52:d0:32:98:a7:a2:64:b1:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: May 10 13:47:26 2023 GMT
Not After : May 8 13:52:26 2024 GMT
Subject: CN=C8FCF9B93C88E8E1C8ED56FAE42FE5BF1C75FD2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:c1:a7:41:20:9c:a8:95:e1:b2:0d:af:c3:
85:f0:98:d9:7d:f3:c6:b7:b0:b5:99:da:42:20:09:
90:a0:f2:b5:e4:e0:22:9d:40:df:f8:9c:d1:78:30:
7a:71:24:e3:19:e7:25:85:cf:71:e3:ef:d4:20:39:
b7:6f:d3:a5:aa:8f:35:3f:5b:a9:fe:10:e7:aa:cf:
2d:38:68:03:03:4f:68:ea:b3:68:4a:32:64:38:66:
14:60:0d:3e:3e:dd:e5:a7:24:c5:96:d4:4d:c7:cc:
a4:37:c7:7e:b0:9d:76:97:e6:65:6d:31:07:e6:7c:
06:0e:57:74:01:d4:35:a7:c6:a2:67:0a:c9:14:e4:
7f:94:4b:7f:16:49:44:a7:91:ff:9b:73:89:05:13:
7b:d1:b1:49:87:76:6e:31:87:58:cf:be:d8:d9:09:
d3:e2:7f:e5:31:c8:c0:28:ae:bd:bd:1c:3a:9e:bf:
9f:87:6e:ff:91:2e:87:a1:23:14:64:a7:ec:ee:46:
1a:e8:f6:38:df:0a:0a:82:19:2e:e7:71:da:ac:8a:
8e:6d:c9:1e:fa:f1:7e:f5:46:93:79:da:f1:d8:53:
00:cb:4f:20:94:11:05:96:b0:01:73:9e:b1:73:8c:
20:b1:9a:bd:84:a9:b7:bb:08:72:b4:68:e2:8d:1a:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FC:F9:B9:3C:88:E8:E1:C8:ED:56:FA:E4:2F:E5:BF:1C:75:FD:2C
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b7:6a:e7:24:a4:cf:09:f7:a8:5f:b1:87:f8:d0:96:35:26:
0b:8f:49:20:26:b7:08:0a:c3:b1:fd:f6:7a:f3:60:83:12:32:
79:27:ef:dc:ae:e6:89:71:9a:f0:02:75:eb:d3:2c:ee:ba:dc:
9e:57:48:c7:c0:7e:74:32:f5:86:ad:bc:9b:e4:01:b5:ab:f6:
79:2a:ac:91:38:02:62:ce:d1:33:80:2e:dd:9e:9e:20:52:24:
94:c1:16:47:27:4f:ba:b7:97:c4:73:5b:92:95:8c:97:33:27:
bb:5f:c6:13:ca:ae:18:53:7e:bb:02:2c:04:1f:de:4c:9b:c3:
06:f3:74:c2:52:1f:f2:4c:27:42:91:1e:3c:1c:55:41:bf:4f:
bb:e5:43:b8:62:24:d6:e2:e7:2d:53:df:95:84:f1:e6:c9:fb:
ad:dd:e2:6e:14:ce:e6:10:4e:e9:8a:94:6f:db:65:b3:a0:c5:
a7:b4:bd:f3:1b:e4:cd:df:7a:fe:4b:25:df:1c:8e:d7:83:c4:
36:0d:89:68:8b:1e:f9:6e:36:67:ac:2d:97:ab:19:65:1d:df:
1e:a6:4d:cc:bd:af:49:72:3e:68:51:99:3f:ee:f5:e3:b2:8d:
6a:85:a5:f4:42:22:80:50:c4:99:33:9f:99:34:3f:ec:61:a3:
d6:66:b6:3f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUNRzjYizPM4XJg1LQMpinomSxQcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yMzA1MTAxMzQ3MjZaFw0yNDA1MDgxMzUyMjZaMDMxMTAvBgNV
BAMTKEM4RkNGOUI5M0M4OEU4RTFDOEVENTZGQUU0MkZFNUJGMUM3NUZEMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwocGnQSCcqJXhsg2vw4XwmNl9
88a3sLWZ2kIgCZCg8rXk4CKdQN/4nNF4MHpxJOMZ5yWFz3Hj79QgObdv06WqjzU/
W6n+EOeqzy04aAMDT2jqs2hKMmQ4ZhRgDT4+3eWnJMWW1E3HzKQ3x36wnXaX5mVt
MQfmfAYOV3QB1DWnxqJnCskU5H+US38WSUSnkf+bc4kFE3vRsUmHdm4xh1jPvtjZ
CdPif+UxyMAorr29HDqev5+Hbv+RLoehIxRkp+zuRhro9jjfCgqCGS7ncdqsio5t
yR768X71RpN52vHYUwDLTyCUEQWWsAFznrFzjCCxmr2Eqbe7CHK0aOKNGn0PAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUyPz5uTyI6OHI7Vb65C/lvxx1/SwwHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzIyZTM1MzgyZTM4MzQyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjpUMA0G
CSqGSIb3DQEBCwUAA4IBAQBBt2rnJKTPCfeoX7GH+NCWNSYLj0kgJrcICsOx/fZ6
82CDEjJ5J+/cruaJcZrwAnXr0yzuutyeV0jHwH50MvWGrbyb5AG1q/Z5KqyROAJi
ztEzgC7dnp4gUiSUwRZHJ0+6t5fEc1uSlYyXMye7X8YTyq4YU367AiwEH95Mm8MG
83TCUh/yTCdCkR48HFVBv0+75UO4YiTW4uctU9+VhPHmyfut3eJuFM7mEE7pipRv
22WzoMWntL3zG+TN33r+SyXfHI7Xg8Q2DYloix75bjZnrC2XqxllHd8epk3Mva9J
cj5oUZk/7vXjso1qhaX0QiKAUMSZM5+ZND/sYaPWZrY/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org