Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20383334.roa
File: 38332e3133382e35302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7S0/HXVUYZaIsKTN7mhSLBrMcdg2khIgAf84SSDakT8=
Subject key identifier: 77:3A:9F:3D:70:32:C3:17:53:17:56:A2:DC:C1:9E:92:52:C2:5A:8F
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 606EDA4177B75F315248C790D047109685F1AA3F
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20383334.roa
Signing time: Wed 04 Oct 2023 00:00:06 +0000
ROA not before: Tue 03 Oct 2023 23:55:06 +0000
ROA not after: Wed 02 Oct 2024 00:00:06 +0000
asID: 834
IP address blocks: 83.138.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:6e:da:41:77:b7:5f:31:52:48:c7:90:d0:47:10:96:85:f1:aa:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 3 23:55:06 2023 GMT
Not After : Oct 2 00:00:06 2024 GMT
Subject: CN=773A9F3D7032C317531756A2DCC19E9252C25A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:fc:43:d7:74:63:f8:2b:27:73:71:fb:6a:
3d:8a:fa:d9:92:c8:b0:2d:ca:92:35:f1:b1:6a:19:
af:0f:11:9d:6a:60:62:05:91:5f:de:10:43:ef:cc:
a2:fb:0f:0d:1a:fc:f7:3e:6f:db:0e:b9:b9:20:d8:
1e:7b:40:89:bb:e4:66:89:f9:1d:ff:95:a8:57:5f:
5a:e3:d0:1c:28:7e:ba:54:16:55:f6:01:d2:a1:77:
93:bd:3c:2a:3f:58:b5:3b:66:92:80:81:7f:94:c1:
6f:5f:c5:6a:3a:de:39:14:a2:7e:16:ae:36:35:d3:
40:b7:cd:88:b9:de:02:8d:18:eb:45:34:23:27:a4:
9a:97:85:04:28:c9:99:77:ad:0e:1e:14:26:c0:42:
31:34:d9:c3:e9:e2:d1:f4:a3:f2:72:10:b5:4e:6f:
33:7a:17:4b:8f:89:94:37:00:66:5d:b9:ef:3b:c0:
3a:26:59:cb:63:a1:40:ea:b3:81:63:09:be:32:e2:
37:14:81:b3:64:8c:64:6e:91:b4:29:1a:fa:0d:7d:
51:f0:91:87:39:f4:2e:3b:8c:f0:db:65:8c:65:85:
30:38:ee:29:0f:31:34:8d:6b:59:64:dc:31:a6:83:
41:6c:ef:e9:0e:d2:76:20:11:31:c0:cd:75:a1:f2:
4f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:9F:3D:70:32:C3:17:53:17:56:A2:DC:C1:9E:92:52:C2:5A:8F
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.50.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b7:a1:27:9f:cb:ea:ff:76:c9:07:f3:c5:ea:90:38:65:fe:
71:7e:8a:05:da:13:59:60:70:86:a6:2a:77:4c:e8:24:7e:c3:
7f:39:b9:53:cd:54:14:fc:d0:b6:2a:25:f8:76:fe:33:4d:95:
30:b3:71:df:d8:78:95:b7:b0:f7:13:03:3a:12:5f:c5:cd:54:
e3:2c:1e:8b:dc:aa:3f:88:1d:ba:06:c0:a2:b5:c6:f2:3f:82:
cc:14:6e:7b:51:01:9e:a8:6d:11:3b:4f:5c:15:68:68:24:7a:
35:f3:c6:b4:32:c8:f7:1e:d4:8c:0c:3e:d4:66:66:33:65:35:
66:11:33:9e:e3:96:2c:ee:32:05:30:69:6d:6b:27:23:4e:e6:
39:ec:df:48:e4:0d:76:23:9f:7c:f2:72:7c:6b:8a:b0:4a:b3:
8b:ae:8b:61:27:1b:8f:7e:82:4c:8d:af:06:2b:fc:6d:dc:98:
18:79:75:31:3d:c9:8f:00:bd:fc:ee:26:ad:04:b2:35:4e:75:
62:f6:df:b2:03:ae:d9:63:8d:04:d2:97:4f:0f:3b:a4:c0:20:
6b:e6:b0:00:4e:00:e7:5e:3e:fc:3d:45:23:8c:17:da:9d:de:
e2:cc:2f:77:52:d5:51:39:c1:47:10:a3:54:2a:b6:5e:67:40:
20:7f:81:2b
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUYG7aQXe3XzFSSMeQ0EcQloXxqj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yMzEwMDMyMzU1MDZaFw0yNDEwMDIwMDAwMDZaMDMxMTAvBgNV
BAMTKDc3M0E5RjNENzAzMkMzMTc1MzE3NTZBMkRDQzE5RTkyNTJDMjVBOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ5/xD13Rj+Csnc3H7aj2K+tmS
yLAtypI18bFqGa8PEZ1qYGIFkV/eEEPvzKL7Dw0a/Pc+b9sOubkg2B57QIm75GaJ
+R3/lahXX1rj0BwofrpUFlX2AdKhd5O9PCo/WLU7ZpKAgX+UwW9fxWo63jkUon4W
rjY100C3zYi53gKNGOtFNCMnpJqXhQQoyZl3rQ4eFCbAQjE02cPp4tH0o/JyELVO
bzN6F0uPiZQ3AGZdue87wDomWctjoUDqs4FjCb4y4jcUgbNkjGRukbQpGvoNfVHw
kYc59C47jPDbZYxlhTA47ikPMTSNa1lk3DGmg0Fs7+kO0nYgETHAzXWh8k8VAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUdzqfPXAywxdTF1ai3MGeklLCWo8wHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzgzMzJlMzEzMzM4MmUzNTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4oyMA0G
CSqGSIb3DQEBCwUAA4IBAQCCt6Enn8vq/3bJB/PF6pA4Zf5xfooF2hNZYHCGpip3
TOgkfsN/OblTzVQU/NC2KiX4dv4zTZUws3Hf2HiVt7D3EwM6El/FzVTjLB6L3Ko/
iB26BsCitcbyP4LMFG57UQGeqG0RO09cFWhoJHo188a0Msj3HtSMDD7UZmYzZTVm
ETOe45Ys7jIFMGltaycjTuY57N9I5A12I5988nJ8a4qwSrOLrothJxuPfoJMja8G
K/xt3JgYeXUxPcmPAL387iatBLI1TnVi9t+yA67ZY40E0pdPDzukwCBr5rAATgDn
Xj78PUUjjBfand7izC93UtVROcFHEKNUKrZeZ0Agf4Er
Generated at Mon Oct 9 20:51:39 2023 by rpki-client on console-ams.rpki-client.org