Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e203434393031.roa
File: 38322e3131382e32352e302f32342d3234203d3e203434393031.roa (raw, json)
Hash identifier: zuMjcYy0hqbuALZf8l1XU7q6SG0nrqWaaWa5TDKv+OM=
Subject key identifier: 2F:A8:DB:E2:EA:67:58:CF:BE:20:65:CD:9D:50:90:F2:83:F7:EF:29
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 6251A1D16519B46EF4F49425E19045AAC89DFCCA
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e203434393031.roa
Signing time: Sat 23 Dec 2023 09:49:24 +0000
ROA not before: Sat 23 Dec 2023 09:44:24 +0000
ROA not after: Sat 21 Dec 2024 09:49:24 +0000
asID: 44901
IP address blocks: 82.118.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 00:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:51:a1:d1:65:19:b4:6e:f4:f4:94:25:e1:90:45:aa:c8:9d:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Dec 23 09:44:24 2023 GMT
Not After : Dec 21 09:49:24 2024 GMT
Subject: CN=2FA8DBE2EA6758CFBE2065CD9D5090F283F7EF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:39:c4:3f:e1:f1:d5:50:7a:d9:a1:dd:ff:
b5:48:21:5b:59:b8:69:79:e6:55:95:a4:7f:0e:a2:
57:9d:1c:8d:20:b9:a5:8e:a3:52:d7:92:1d:5f:28:
43:9b:70:36:ff:c5:ce:d0:77:79:99:6a:84:9f:3b:
59:3e:e0:fe:3a:98:e7:6b:7a:51:a2:1d:3d:ad:74:
f2:ba:e6:95:21:dd:ec:54:13:18:78:3a:5d:bf:97:
1d:c5:44:b0:7c:d2:6d:7e:e6:1f:b9:09:1a:8c:67:
91:70:59:fd:a3:ab:63:98:ac:3a:7f:20:df:76:1a:
36:e5:45:5e:90:76:e0:33:f7:87:95:60:39:a0:06:
5a:99:37:97:05:da:77:0f:5e:7a:cd:a5:58:a0:03:
ce:0a:44:f0:ff:40:d7:3d:d1:40:f9:72:41:80:b6:
ca:38:d3:3e:99:5c:9b:ab:e2:6e:25:3d:67:31:2f:
0b:6e:02:6c:7d:5f:a6:8e:60:46:4b:a4:72:a0:14:
23:6f:7c:78:52:7c:aa:75:ef:99:42:7c:14:8c:d9:
22:ae:73:2c:a8:90:b3:66:92:43:7a:30:42:b9:6d:
b9:d4:a9:2f:52:70:42:a0:32:56:38:80:5a:9c:4b:
8a:e3:38:ae:15:58:e8:34:11:a6:d5:c1:a1:7b:06:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A8:DB:E2:EA:67:58:CF:BE:20:65:CD:9D:50:90:F2:83:F7:EF:29
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e203434393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.25.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a2:04:fd:55:e0:ee:51:47:73:b7:3b:03:4a:14:9d:2f:7f:
54:44:76:82:85:a1:3c:3a:25:9c:a9:a4:cf:21:25:b3:7c:09:
23:f7:4b:ba:9d:d1:45:0a:9f:d9:48:1a:ca:ca:38:8d:e2:34:
ac:55:04:03:be:bc:46:db:28:31:8b:a5:6e:d5:03:2f:aa:c3:
ed:2e:c7:95:17:cd:8b:77:16:79:ec:c8:5c:d4:5d:b9:93:a9:
ab:4b:cf:0e:4b:f1:ed:b2:a7:1e:62:4a:34:bc:3b:3c:8e:c8:
cb:e2:14:0c:d0:15:07:1e:42:aa:e7:81:3c:4b:bb:ed:09:cb:
54:be:d4:25:a6:6d:a3:55:d2:d3:fb:91:64:b2:46:a5:ca:b4:
1b:79:7e:7d:ba:b1:9f:42:2b:9e:24:04:78:e3:e9:fb:0e:15:
61:8a:6b:60:c3:13:0a:53:0d:c1:b5:4d:67:f1:cf:ff:2a:ce:
6f:f2:44:af:5d:23:12:66:2e:0c:49:61:ba:14:6e:df:c6:d3:
05:c4:ed:a3:e3:0b:28:b1:74:e4:e1:41:e3:62:68:c0:bc:b7:
b8:58:56:8a:b7:bf:8c:ff:db:b4:ad:bc:c4:4e:dd:9a:1a:e8:
77:d9:51:c1:32:3a:3b:6f:7e:c1:17:07:5d:c8:f3:74:4e:04:
14:c0:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org