Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203631313335.roa
File: 322e35382e38342e302f32342d3234203d3e203631313335.roa (raw, json)
Hash identifier: PjRuFAUMCYXWGeGBfiJHjryDN+/sMYsxnncE5/guLzI=
Subject key identifier: 8A:F5:65:A8:DA:30:F7:71:37:B9:92:23:40:56:AF:ED:64:78:FA:B9
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 506ED8E6858B488D87B57EC2A9F04555F0A556E4
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203631313335.roa
Signing time: Fri 10 Nov 2023 09:20:18 +0000
ROA not before: Fri 10 Nov 2023 09:15:18 +0000
ROA not after: Fri 08 Nov 2024 09:20:18 +0000
asID: 61135
IP address blocks: 2.58.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:6e:d8:e6:85:8b:48:8d:87:b5:7e:c2:a9:f0:45:55:f0:a5:56:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Nov 10 09:15:18 2023 GMT
Not After : Nov 8 09:20:18 2024 GMT
Subject: CN=8AF565A8DA30F77137B992234056AFED6478FAB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3b:01:6c:b2:2a:bb:b5:d2:64:82:4a:47:0b:
38:13:f4:8e:f7:30:32:fb:70:60:5e:4e:d8:b7:8c:
a4:6f:92:37:af:15:50:e4:10:4f:a1:7a:b4:e6:55:
78:2e:7d:a2:dc:43:70:27:14:b5:5f:91:5b:65:b4:
c3:97:d3:62:43:de:90:21:c8:19:aa:ce:14:5c:e1:
a4:d9:4a:47:3e:e1:93:53:d6:8e:1e:e0:9d:d8:87:
93:1d:35:5f:bd:f8:89:90:5e:47:5f:37:4b:75:ef:
85:59:2f:8e:8f:9a:e7:8b:54:e0:45:47:6d:88:dd:
5c:a2:6a:c4:8a:5c:b3:78:cc:c6:a1:c5:b1:81:2a:
ca:fc:05:9d:d2:61:3b:f4:b0:c7:88:ab:1a:30:66:
69:16:ce:fc:de:2e:28:11:37:f4:bb:35:22:aa:56:
8d:7c:f9:0c:fa:a2:ff:22:d7:88:b3:22:78:12:86:
12:bc:3a:36:c7:3e:89:07:99:59:8c:9b:86:cb:0e:
8b:f4:0e:82:b6:67:7f:fc:f4:cc:8d:17:c4:f1:3f:
5b:86:f1:7b:d4:f2:77:0b:9c:0e:a4:ce:e9:1b:c4:
bd:cd:95:6e:b0:37:5c:88:1d:c3:5d:5f:47:3e:10:
ec:01:28:0f:3d:ee:eb:1a:a4:93:ea:cb:84:7d:f8:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F5:65:A8:DA:30:F7:71:37:B9:92:23:40:56:AF:ED:64:78:FA:B9
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203631313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d2:ee:54:e8:dc:ae:86:e4:53:d4:88:ef:ef:7e:07:a6:6f:
27:50:ff:88:8c:40:72:b6:cd:b1:e3:41:4d:dc:50:2b:d1:18:
ce:0b:b8:fa:15:14:2f:c8:b7:1e:ba:22:49:0a:c7:c4:b8:30:
29:97:f4:fe:7b:54:b9:3c:4d:75:8a:d7:64:27:26:f3:9d:e1:
fb:82:e4:e1:be:9a:ce:69:b0:83:01:6e:63:e2:43:42:a7:91:
19:07:4c:6d:51:c2:42:4d:2c:ab:7c:1f:e5:94:14:6b:a2:19:
bc:69:52:8d:0a:80:dc:7a:2f:10:00:67:1b:c7:49:d1:f0:36:
85:0a:53:01:f0:6e:be:70:49:3d:c9:7d:41:5c:ae:64:ca:45:
fd:a6:f5:26:bd:66:2c:13:0a:46:4a:5b:97:8a:28:2f:13:02:
fa:88:d0:42:31:a0:d6:d1:ed:19:32:36:2e:15:db:da:38:fe:
32:2d:bc:c7:eb:a1:88:82:53:e7:7b:37:4d:3d:23:a1:50:e0:
34:df:80:a9:90:ad:ad:a9:c5:74:34:68:8f:63:f9:42:3d:15:
9d:8a:2f:6d:9d:ad:47:82:c9:87:55:e0:64:1e:7f:a4:de:7f:
6e:73:fe:53:c6:90:72:21:05:71:76:4c:e4:11:32:cf:c7:6f:
8a:3e:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 01:26:28 2024 by rpki-client on console-ams.rpki-client.org