Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e20383334.roa
File: 3137312e32322e37392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ADrPtdE+ew32ip0xtp7hIMh0mOGhWPRO9/JVedWrFDE=
Subject key identifier: 8F:48:F7:FA:AB:84:18:38:7D:70:DF:54:51:7B:0F:F5:55:58:22:E3
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 758644C24B904433923E77E1CA8081ADF35B7AB1
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e20383334.roa
Signing time: Sun 18 Aug 2024 00:01:10 +0000
ROA not before: Sat 17 Aug 2024 23:56:10 +0000
ROA not after: Sun 17 Aug 2025 00:01:10 +0000
asID: 834
IP address blocks: 171.22.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 08:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:86:44:c2:4b:90:44:33:92:3e:77:e1:ca:80:81:ad:f3:5b:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 17 23:56:10 2024 GMT
Not After : Aug 17 00:01:10 2025 GMT
Subject: CN=8F48F7FAAB8418387D70DF54517B0FF5555822E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:bc:d5:a1:dd:89:c2:c4:31:7c:e6:b9:5c:
ac:fb:7b:fc:9b:22:7d:a1:48:83:6d:69:d4:62:7b:
ff:d2:1f:7a:04:11:d1:13:12:62:02:a4:53:a7:96:
cc:f0:87:61:e1:a6:fa:fc:1c:d6:8e:77:3b:18:4a:
2a:10:9a:d6:7b:5f:81:bb:a5:78:ed:2e:b9:03:64:
a7:2c:d0:dd:38:e2:18:b3:de:12:8e:a4:81:ae:81:
9d:c6:25:f6:2a:8a:ef:20:69:a0:e6:46:87:c7:b3:
cb:ee:e6:77:dc:09:bf:9c:02:a6:aa:e9:f2:d0:8d:
88:e4:62:1a:fe:52:f6:87:5c:2e:34:b8:02:20:fc:
1e:a3:be:e3:35:bf:c5:3f:a2:bb:a6:24:22:e0:6d:
25:f5:ba:57:85:ce:f9:0d:39:27:a8:17:86:99:8a:
d7:a8:8c:15:f1:03:df:7f:76:23:c5:95:28:4b:ad:
fe:d1:71:ff:69:c6:3e:97:5a:ae:ed:1a:cc:7b:1e:
3a:33:0c:33:f6:e3:7e:3e:d2:76:70:40:2d:a8:1d:
b1:d2:0c:85:51:61:85:44:c2:f3:75:7f:38:58:d0:
db:f0:5f:d8:47:70:4f:10:82:0d:9e:82:69:3b:30:
22:ef:fb:f0:cd:0c:6c:03:f2:79:7c:1f:cc:6d:a9:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:F7:FA:AB:84:18:38:7D:70:DF:54:51:7B:0F:F5:55:58:22:E3
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.79.0/24
Signature Algorithm: sha256WithRSAEncryption
29:79:3b:d3:18:d7:b2:be:db:03:8e:f1:50:20:fe:00:ae:86:
72:70:35:1f:8d:b6:a1:ee:f7:ab:7e:48:a2:1e:9b:ee:01:61:
e6:07:b2:d8:1a:63:0b:de:c3:13:dc:fb:c0:96:9b:10:32:d9:
2a:dd:eb:a6:f3:1a:10:8e:5e:ec:81:48:21:af:97:bc:14:9b:
2e:50:4a:b5:a7:37:b6:23:16:dd:b0:fc:66:4d:12:b6:a9:fc:
bb:6e:bb:3d:ce:67:fe:30:88:93:75:7b:f7:9b:85:15:50:56:
3b:28:d1:a2:a5:6c:e9:a2:df:bf:d1:b5:35:e9:c3:c9:5b:d7:
8a:4a:aa:1f:9f:71:be:a6:4a:36:78:79:1b:2c:24:d4:b4:d0:
2c:13:6a:84:d2:66:c1:27:3b:7f:f0:3c:f2:9c:0d:8b:f5:33:
6f:d8:7b:b4:57:d7:d0:b8:6b:43:02:9c:c8:e3:1d:ac:8e:aa:
8f:02:db:5e:b6:77:8c:f3:2b:fd:63:ec:f4:7f:bc:37:c0:c1:
b0:a7:3c:a2:53:6a:68:6f:00:f3:7d:7a:7a:0b:73:2e:83:47:
0b:69:a1:06:4d:84:bf:60:66:08:90:60:48:41:35:33:be:49:
5f:8d:00:c9:a1:2a:25:80:85:3e:fb:59:4b:36:65:ad:63:46:
aa:67:38:74
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 18 12:32:01 2024 by rpki-client on console-ams.rpki-client.org