Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e20323132323338.roa
File: 38322e3131382e32352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: svM7d34p6K9rkHrkSKIm8YbGBqlUD5ryAGyEf8d2p08=
Subject key identifier: 48:63:27:51:AA:F5:EF:D7:42:C4:7A:3C:AF:5B:A1:33:5C:57:26:78
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 60462A81227203B22FD6EEA21DA7AF4EB7A7B504
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 16 Oct 2023 09:17:16 +0000
ROA not before: Mon 16 Oct 2023 09:12:16 +0000
ROA not after: Mon 14 Oct 2024 09:17:16 +0000
asID: 212238
IP address blocks: 82.118.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:46:2a:81:22:72:03:b2:2f:d6:ee:a2:1d:a7:af:4e:b7:a7:b5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Oct 16 09:12:16 2023 GMT
Not After : Oct 14 09:17:16 2024 GMT
Subject: CN=48632751AAF5EFD742C47A3CAF5BA1335C572678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:c9:af:31:e2:71:a6:93:66:d6:68:e7:f1:
de:3d:33:d7:64:08:6f:13:32:64:50:dd:38:f5:e3:
fe:74:2b:09:46:09:26:e6:09:51:d4:7d:0d:8b:19:
30:b1:0e:bd:e6:57:0e:51:0f:60:75:05:dd:9d:4a:
59:fe:b1:e0:9f:57:51:9f:34:b5:fe:92:03:65:db:
74:e2:fb:3e:84:11:fc:e3:e9:f5:e1:5b:da:cf:90:
25:59:04:a9:64:6e:d7:70:73:7e:67:a0:b7:65:16:
63:c8:c6:6d:65:b9:f7:40:52:ae:4c:c0:b8:bc:0b:
e0:c2:2d:0f:18:6f:aa:ea:1f:40:76:25:03:c7:55:
7c:70:81:cf:d2:28:6b:cd:23:9b:dd:69:c8:4e:7f:
16:66:29:b4:bc:0f:4c:2e:d2:ef:20:fe:4b:12:7c:
15:35:ce:ba:5b:d4:28:a7:19:71:5f:fd:56:aa:e7:
8d:f6:21:37:b2:94:62:24:87:96:85:cb:be:21:33:
ff:b9:c9:90:29:8d:69:fc:70:4d:67:fc:89:6b:df:
c6:96:bd:a2:d4:1b:2e:aa:32:c9:fb:e9:ed:0d:ac:
22:72:1d:03:f9:67:f0:83:13:7e:bd:fd:30:c2:ec:
98:1f:78:68:02:c4:eb:46:6b:06:94:87:93:9d:53:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:63:27:51:AA:F5:EF:D7:42:C4:7A:3C:AF:5B:A1:33:5C:57:26:78
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ac:af:d8:51:c0:59:b6:2c:a0:8e:c8:5c:d6:c6:01:92:b3:
36:b8:d2:5b:6d:a3:12:a1:02:c8:13:3b:79:2b:49:2d:7d:89:
06:ce:d3:f3:df:c5:37:2b:10:0c:78:aa:b0:28:39:48:51:3c:
27:95:af:98:f3:f1:2d:f9:9b:37:77:e1:6d:63:02:f3:e0:8f:
60:d0:c7:0f:0a:1e:00:e5:c4:f8:7a:a2:b6:c6:92:d5:f5:b8:
1a:85:48:2c:5d:e8:ae:35:bc:89:8a:c4:11:7c:9a:f7:ee:18:
aa:d8:c1:81:0e:40:21:7e:36:b9:14:f4:ab:ba:1f:1f:c6:86:
09:b6:bb:92:db:aa:86:98:af:7d:cf:c8:30:d0:40:3a:a6:9f:
38:46:87:c1:2d:6b:f9:c8:09:b1:89:d3:23:42:6b:b2:04:58:
6f:57:d4:d1:fc:99:59:64:32:ce:90:1b:7d:99:10:39:64:2d:
38:c3:bb:95:09:c8:0c:cc:53:f6:c9:ec:40:55:49:2d:4a:d5:
d2:87:5d:ea:73:ac:20:81:f8:a7:43:dc:b4:8e:4e:88:4d:2b:
11:0c:9c:57:ba:73:3e:34:30:0d:d7:09:59:16:46:56:d9:61:
5a:74:7a:d4:da:4d:cb:6a:b3:dc:4a:76:0b:d9:ea:c6:c7:3c:
19:df:9b:93
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUYEYqgSJyA7Iv1u6iHaevTrentQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yMzEwMTYwOTEyMTZaFw0yNDEwMTQwOTE3MTZaMDMxMTAvBgNV
BAMTKDQ4NjMyNzUxQUFGNUVGRDc0MkM0N0EzQ0FGNUJBMTMzNUM1NzI2NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSzsmvMeJxppNm1mjn8d49M9dk
CG8TMmRQ3Tj14/50KwlGCSbmCVHUfQ2LGTCxDr3mVw5RD2B1Bd2dSln+seCfV1Gf
NLX+kgNl23Ti+z6EEfzj6fXhW9rPkCVZBKlkbtdwc35noLdlFmPIxm1lufdAUq5M
wLi8C+DCLQ8Yb6rqH0B2JQPHVXxwgc/SKGvNI5vdachOfxZmKbS8D0wu0u8g/ksS
fBU1zrpb1CinGXFf/Vaq5432ITeylGIkh5aFy74hM/+5yZApjWn8cE1n/Ilr38aW
vaLUGy6qMsn76e0NrCJyHQP5Z/CDE369/TDC7JgfeGgCxOtGawaUh5OdU765AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUSGMnUar179dCxHo8r1uhM1xXJngwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzgzMjJlMzEzMTM4MmUzMjM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UnYZMA0GCSqGSIb3DQEBCwUAA4IBAQBdrK/YUcBZtiygjshc1sYBkrM2uNJbbaMS
oQLIEzt5K0ktfYkGztPz38U3KxAMeKqwKDlIUTwnla+Y8/Et+Zs3d+FtYwLz4I9g
0McPCh4A5cT4eqK2xpLV9bgahUgsXeiuNbyJisQRfJr37hiq2MGBDkAhfja5FPSr
uh8fxoYJtruS26qGmK99z8gw0EA6pp84RofBLWv5yAmxidMjQmuyBFhvV9TR/JlZ
ZDLOkBt9mRA5ZC04w7uVCcgMzFP2yexAVUktStXSh13qc6wggfinQ9y0jk6ITSsR
DJxXunM+NDAN1wlZFkZW2WFadHrU2k3LarPcSnYL2erGxzwZ35uT
Generated at Sat Dec 16 00:56:26 2023 by rpki-client on console-ams.rpki-client.org