Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS32489.roa
File: AS32489.roa (raw, json)
Hash identifier: pzLrsaBeslrJyMdhvAruOvbUzm3OzYSUf7lD2i4wnUE=
Subject key identifier: 11:C0:73:21:DD:37:5F:E9:F0:7B:57:8C:72:76:C0:1F:D4:AF:52:50
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7D8203C8A9466A397258068D659F036F236028E1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS32489.roa
Signing time: Fri 01 Nov 2024 18:09:59 +0000
ROA not before: Fri 01 Nov 2024 18:04:59 +0000
ROA not after: Fri 31 Oct 2025 18:09:59 +0000
asID: 32489
IP address blocks: 92.113.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 03:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:82:03:c8:a9:46:6a:39:72:58:06:8d:65:9f:03:6f:23:60:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 1 18:04:59 2024 GMT
Not After : Oct 31 18:09:59 2025 GMT
Subject: CN=11C07321DD375FE9F07B578C7276C01FD4AF5250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:e2:f0:4c:65:71:3b:3a:e2:27:76:dd:5e:
5e:b0:79:c9:14:fc:9b:ea:5e:be:f1:57:c4:ba:6c:
97:41:1a:dd:af:f3:d7:11:6e:5f:f0:5b:a3:fd:b8:
14:38:e0:44:42:cb:d4:db:46:ac:ad:be:20:c6:59:
5d:b0:54:47:0b:98:a0:6e:5b:8e:ef:72:d2:51:c2:
5d:4e:73:d3:da:43:74:f6:29:af:26:5e:75:14:a8:
57:34:3a:b7:92:7d:54:bf:11:c2:a2:5d:c6:74:47:
f5:31:ea:2a:11:0b:cd:81:0b:55:b1:03:45:d9:36:
e8:ba:cc:92:41:91:f5:df:4a:ca:00:b8:3f:ef:c4:
7c:42:27:05:f7:7e:fe:b7:de:4e:9e:32:f4:d6:ea:
57:f4:a2:dd:0a:62:6c:ff:4d:47:c0:b2:0e:1d:b7:
a6:d0:2b:31:5d:cb:f7:ef:62:8b:0a:09:ae:cb:7e:
23:c6:6f:fa:ea:d2:91:bd:b9:83:c0:33:48:d2:6c:
ca:5e:e1:80:5f:5a:f6:04:ce:eb:3b:1d:e1:17:41:
3d:c1:dd:58:37:24:d9:a0:04:0b:7c:1d:16:49:d6:
99:39:b2:56:d6:4c:12:a7:58:5a:1b:17:2f:0a:3d:
c7:b0:97:51:61:6a:4b:df:6f:af:e2:27:f8:c2:91:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:73:21:DD:37:5F:E9:F0:7B:57:8C:72:76:C0:1F:D4:AF:52:50
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS32489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.91.0/24
Signature Algorithm: sha256WithRSAEncryption
66:cc:c5:c3:76:58:89:53:7e:72:da:89:8a:ff:2a:9f:58:c5:
a4:87:3c:3e:be:52:cf:f2:37:e8:88:7b:e7:5f:27:da:dc:09:
7d:e9:12:9c:20:3b:b7:ce:63:62:43:b2:4d:df:a2:65:1a:7a:
3b:b4:c8:f4:f1:b7:68:63:46:5c:61:3b:c2:7c:73:e2:e8:46:
f6:77:03:52:1b:0c:af:66:33:1d:53:a4:f7:76:b2:0e:41:77:
bc:8e:73:4d:fc:7e:c8:0d:e2:8a:65:46:9d:9b:c5:fd:95:5c:
5a:04:bb:18:f8:f1:de:8f:e5:f2:82:43:80:73:0a:97:74:0e:
88:d6:ce:dc:8d:c7:ea:18:7e:b6:10:ee:b5:6e:e4:a0:06:1d:
39:3f:e8:d9:42:6e:bd:31:f3:c0:3d:50:d6:01:dc:32:a1:69:
6f:4e:f0:4e:e2:ab:4c:d3:58:bf:f3:12:38:1d:a0:b9:1e:44:
10:72:06:a4:49:f9:b1:30:56:48:dc:6f:24:06:0f:1d:e5:f4:
bf:96:aa:61:b0:bc:4d:f5:29:96:e8:42:4d:fc:e2:6d:cc:a9:
70:c5:7b:7d:eb:ab:53:c5:0e:1b:40:63:bd:83:9a:8b:53:c6:
a1:fd:bc:75:e0:64:d0:0a:b3:a0:2d:19:9f:e2:7e:10:01:2f:
1c:e7:b9:a2
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 9 06:50:46 2024 by rpki-client on console-ams.rpki-client.org