Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e20383334.roa
File: 38352e3230392e31372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zkLQqmGE51Gyi8VJ6289ni1Bs0Z7A5o8DvQsAcW49DU=
Subject key identifier: A8:AB:26:38:3B:A4:0D:47:14:F2:22:89:F0:4A:7A:F9:6C:69:35:69
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 77F7C7C29D0469FB1CE56CC0AA2F4DB94EEECE01
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e20383334.roa
Signing time: Thu 07 Sep 2023 00:00:06 +0000
ROA not before: Wed 06 Sep 2023 23:55:06 +0000
ROA not after: Thu 05 Sep 2024 00:00:06 +0000
asID: 834
IP address blocks: 85.209.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f7:c7:c2:9d:04:69:fb:1c:e5:6c:c0:aa:2f:4d:b9:4e:ee:ce:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Sep 6 23:55:06 2023 GMT
Not After : Sep 5 00:00:06 2024 GMT
Subject: CN=A8AB26383BA40D4714F22289F04A7AF96C693569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:44:b5:80:63:33:57:06:da:0c:14:3c:88:
11:2c:44:f8:f8:fa:80:ab:e3:ab:68:0a:4c:f5:f8:
26:e6:db:41:0d:28:bf:ab:86:7b:56:1f:58:bb:15:
39:bb:ef:d2:3d:bc:6a:a8:03:75:63:b1:a0:14:65:
76:74:20:19:86:81:20:f4:2d:c8:48:60:13:de:1e:
1a:ce:53:69:e0:76:da:26:b6:aa:e8:38:33:e9:d6:
35:0e:36:3a:12:5c:6c:ea:ad:4d:c2:d3:8a:6e:c9:
52:55:2f:ab:69:79:25:f3:f8:22:4a:1d:86:84:a9:
54:e4:15:a8:aa:d9:31:6b:65:72:4a:3b:29:ba:5a:
bf:d9:73:83:6d:9c:16:a3:70:76:3b:28:0c:cb:19:
87:6d:d0:dd:6d:7e:42:59:e3:01:73:04:06:f6:60:
ae:54:80:19:97:c0:59:2c:71:a3:fa:e5:35:68:15:
46:50:53:66:54:99:4f:ab:ba:a0:87:aa:9e:49:33:
42:20:a3:9a:d8:22:dc:db:b2:9c:73:79:b8:fa:e5:
e3:90:18:76:03:2e:a8:f6:f0:21:66:92:10:8b:34:
c6:dd:8e:6f:35:ed:c1:71:c4:73:02:ea:fc:67:eb:
1f:e9:21:b1:3f:6d:98:03:38:c5:45:b4:f2:93:4a:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AB:26:38:3B:A4:0D:47:14:F2:22:89:F0:4A:7A:F9:6C:69:35:69
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.17.0/24
Signature Algorithm: sha256WithRSAEncryption
15:17:d2:c4:92:c8:c6:c8:db:54:92:99:9b:93:c1:02:68:f9:
74:3e:ef:5d:a4:57:c2:e9:27:4f:ef:d0:e1:b0:6d:30:ae:34:
ef:e7:93:67:7c:63:79:35:91:07:c3:40:91:22:60:10:48:53:
65:dc:23:e2:38:33:82:a2:ab:82:6c:1f:bc:e9:13:13:de:6f:
3e:c7:dd:5d:dd:3b:a3:33:5f:86:5e:13:6b:7c:e6:07:ee:48:
56:53:17:e0:5d:27:9a:bb:3d:7b:68:ac:5d:d7:14:38:cc:16:
c6:20:5e:21:0a:06:46:48:d2:a0:7a:e2:c6:38:49:f5:b5:5b:
87:ed:be:f3:31:cc:40:67:38:f3:a1:b1:d3:98:88:47:f8:36:
69:e1:2b:a6:bf:52:23:a7:50:58:12:4b:a9:aa:82:ac:da:d1:
74:59:e4:96:bd:72:80:c5:06:57:ab:fb:c6:ae:12:24:15:91:
a1:ca:b7:70:38:25:aa:e1:21:bd:c8:ef:29:1c:3e:93:25:71:
08:33:a3:e0:fa:03:50:dc:da:d8:14:56:2f:6d:15:e5:62:42:
0a:00:16:60:cc:d8:16:84:62:7e:98:88:7c:4b:9e:ab:7f:28:
aa:02:7b:e9:5e:56:03:a1:ae:f2:10:43:f2:f7:21:a0:a7:4d:
df:06:ef:fd
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 17 04:52:12 2023 by rpki-client on console-ams.rpki-client.org