Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e203539383935.roa
File: 38322e3131382e32352e302f32342d3234203d3e203539383935.roa (raw, json)
Hash identifier: YX0BoQPeblRnqzsKIp+gerha/90V4TCQ0ivTQLMtJlk=
Subject key identifier: BA:94:08:F4:9D:F5:C9:11:A5:98:AD:05:80:31:39:20:2F:73:02:A8
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 7CF88A2278BB8B0BF626495AAD5F80EB73ED87EE
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e203539383935.roa
Signing time: Sun 25 Feb 2024 18:11:03 +0000
ROA not before: Sun 25 Feb 2024 18:06:03 +0000
ROA not after: Sun 23 Feb 2025 18:11:03 +0000
asID: 59895
IP address blocks: 82.118.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 00:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f8:8a:22:78:bb:8b:0b:f6:26:49:5a:ad:5f:80:eb:73:ed:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 25 18:06:03 2024 GMT
Not After : Feb 23 18:11:03 2025 GMT
Subject: CN=BA9408F49DF5C911A598AD05803139202F7302A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:3d:45:7f:50:36:7f:b4:e6:dd:6b:ee:5b:
f8:e7:2e:c5:8b:f9:76:ba:5c:07:fb:25:20:98:29:
b5:a7:6a:63:f8:6f:d7:f9:60:4b:f5:30:77:d6:97:
b0:de:3f:5a:f2:4e:0c:38:ca:b8:67:6a:d1:ec:b2:
c2:57:46:73:90:b4:3f:e2:8a:53:03:6b:bb:30:18:
b3:2d:66:14:78:c8:71:22:eb:34:9a:3d:19:22:8f:
e1:3e:61:27:e4:a8:dd:34:0e:7e:b3:93:27:00:35:
7b:ce:fb:f9:fe:43:de:02:bd:ac:e2:05:dd:00:41:
ef:54:79:95:ff:99:92:bc:ef:6f:38:75:be:4d:f6:
81:65:17:0f:05:ac:dd:9d:c8:11:4c:96:51:f2:8d:
0f:1e:6f:9e:d6:40:ad:8a:16:88:74:ab:6d:61:a0:
7d:5e:dc:f5:72:2d:ea:d5:9b:1f:08:cf:f8:66:8d:
e3:75:eb:ff:cf:14:9e:f3:cb:1b:c1:19:27:69:62:
83:24:fe:1a:96:b4:22:3f:cc:5c:16:d5:5d:13:1f:
27:26:dd:b7:bf:68:26:4a:47:cf:f6:ca:dd:e0:99:
1d:ee:24:fd:e6:1d:2e:af:d7:d7:df:c4:dc:65:a3:
e4:15:4e:1a:5e:6d:7e:31:cc:63:0b:6c:f0:58:11:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:08:F4:9D:F5:C9:11:A5:98:AD:05:80:31:39:20:2F:73:02:A8
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e203539383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:82:64:00:54:45:4b:cc:d2:86:aa:76:5c:ee:c3:01:32:76:
cb:20:2d:8d:31:45:b1:d8:18:af:ac:28:8f:a0:69:84:c2:9f:
0c:2d:eb:83:32:6f:78:24:31:d1:fa:2a:84:b1:89:fd:49:7f:
0e:a4:52:06:6a:63:8b:a6:1b:1b:f7:18:ae:b6:b5:d5:ab:a7:
62:4d:30:af:8d:8c:95:b1:b8:96:fd:a9:30:e0:99:e2:00:23:
3c:43:8f:e3:4f:47:99:2d:4c:4a:5b:3d:37:ce:4f:ba:5c:8d:
ac:8d:cf:ec:5e:65:45:cc:b6:68:3d:29:23:94:05:7d:d2:af:
44:49:b9:f6:70:ee:df:19:2b:94:9c:62:e5:33:e7:5e:5a:a4:
23:25:75:f5:34:da:13:d7:7a:c8:cc:53:62:5c:25:1f:c6:17:
71:c9:cb:a5:3f:bd:9e:fd:c3:e0:9e:12:c3:df:47:ce:a7:21:
37:4c:5e:f2:9b:95:3e:ed:dc:7e:f2:ef:60:0d:e2:4b:a0:77:
4c:59:6d:49:67:68:fc:16:eb:ca:6b:7f:dd:e9:de:10:63:ca:
1f:2c:5b:79:3f:f7:19:7a:f2:c4:15:18:25:39:7c:01:c6:04:
01:ca:32:75:c6:ed:f1:9a:83:7d:15:79:30:9a:18:ac:c2:8e:
cd:1a:d6:8e
-----BEGIN CERTIFICATE-----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Generated at Mon Mar 25 02:29:57 2024 by rpki-client on console-ams.rpki-client.org