Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37372e302f32342d3234203d3e20383334.roa
File: 3137312e32322e37372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qQ/O7r4nYzh9jsYLFXBFZKvtNrvmkPj/Sti+cKQOQz4=
Subject key identifier: E8:5F:2A:57:59:56:92:50:1B:7F:70:78:EB:D1:B1:F5:92:40:78:13
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 3846EF9E4FA7FDB474A8ABFA5B3E790E22B06E65
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37372e302f32342d3234203d3e20383334.roa
Signing time: Sun 23 Jul 2023 00:00:09 +0000
ROA not before: Sat 22 Jul 2023 23:55:09 +0000
ROA not after: Sun 21 Jul 2024 00:00:09 +0000
asID: 834
IP address blocks: 171.22.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:46:ef:9e:4f:a7:fd:b4:74:a8:ab:fa:5b:3e:79:0e:22:b0:6e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 22 23:55:09 2023 GMT
Not After : Jul 21 00:00:09 2024 GMT
Subject: CN=E85F2A57595692501B7F7078EBD1B1F592407813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:8f:32:0a:ce:62:d9:00:58:1a:d4:3d:fe:
58:c7:85:58:c3:e1:7d:3e:61:bb:f9:86:43:71:7e:
37:9d:85:e6:4e:00:1c:c6:1d:6d:ce:34:99:7b:a1:
a4:2f:ea:e4:12:76:07:d4:03:23:ea:0f:64:2f:d6:
ad:d6:9b:65:b8:cd:f8:3a:7e:b4:f8:8b:00:19:17:
d3:4a:61:27:9c:19:e1:1f:49:83:75:ef:0c:57:5a:
18:45:89:51:ba:dc:27:1e:4a:ad:e2:df:09:56:21:
e4:49:fd:8c:95:e3:80:11:b2:e6:fe:f0:f0:73:f5:
2b:3e:2d:02:ef:77:aa:00:83:41:f4:b8:4d:14:85:
02:dc:ac:27:06:68:0a:a9:83:22:dc:b4:ac:90:51:
f5:cc:a9:c4:71:ec:5f:3d:3a:89:7f:7e:41:d3:ab:
52:2f:d1:54:ba:96:ad:53:07:f5:4e:a0:a8:af:1a:
44:a7:34:05:25:56:1c:74:b3:d5:d7:6e:95:c2:f2:
ea:c4:df:e5:72:3a:17:b0:7a:70:a7:2a:c3:a0:44:
96:0a:1a:d2:b9:3c:88:0a:94:7d:1a:02:6b:5e:07:
c0:34:af:a6:37:cc:8f:3a:cc:5b:af:30:1a:65:eb:
46:ff:9d:fa:87:a3:6f:aa:ea:0d:97:2c:d5:41:e7:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:2A:57:59:56:92:50:1B:7F:70:78:EB:D1:B1:F5:92:40:78:13
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e3:2f:a3:55:8a:5f:e7:d2:db:91:d0:3d:a7:14:bb:d8:e9:
e2:ef:d3:54:ca:ee:1e:63:87:de:40:02:35:da:a4:50:ca:71:
66:c5:33:3e:41:42:f0:ff:39:c3:78:8f:d0:2a:2f:79:b2:a2:
32:6f:d9:00:a4:c9:15:21:79:3f:f9:b9:45:b4:85:42:0c:1c:
5f:ff:ec:56:f3:74:84:70:91:0b:e5:87:6b:6d:c9:6c:a0:25:
98:00:a4:c3:05:fd:08:73:b6:3b:47:2c:b7:94:b1:dc:af:4c:
98:a2:b0:2c:44:85:c9:fc:93:1b:03:fd:96:73:2c:8d:d2:e9:
af:fb:b0:8c:7c:a4:1e:3e:c3:ad:ce:7f:39:bd:52:f1:8f:ef:
51:55:b2:41:45:f9:4c:b5:25:a2:4b:06:2f:07:db:34:2d:a6:
95:1b:03:83:6a:46:1f:8c:a4:f7:fb:d3:1f:2e:8f:30:84:27:
ea:b6:b0:7c:28:66:18:46:0d:ce:d9:e4:e5:e1:67:8c:33:8a:
58:8a:46:18:48:82:77:7d:f9:45:b3:64:cc:6a:7c:e2:c2:8d:
00:82:5e:32:a4:6c:34:e8:ae:5d:b5:b0:c4:8e:6f:68:14:84:
12:1a:6e:4c:cc:75:cd:3d:87:47:fb:6a:25:85:a4:88:a6:ee:
65:f9:96:a7
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 1 15:22:50 2023 by rpki-client on console-ams.rpki-client.org