Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030303139.roa
File: 38322e3131382e32362e302f32342d3234203d3e20323030303139.roa (raw, json)
Hash identifier: OsGS+OlT9cpMq0ltGRi1NIeMEX3rhST3DmosZW2hfec=
Subject key identifier: 27:E0:1D:25:D4:84:C9:37:F8:EE:8C:B7:F1:AA:60:12:2B:B9:DE:EA
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 0CDAAFE8B6B6A465F05CA28D10D3BC9F4C764962
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030303139.roa
Signing time: Tue 27 Jun 2023 08:17:09 +0000
ROA not before: Tue 27 Jun 2023 08:12:09 +0000
ROA not after: Tue 25 Jun 2024 08:17:09 +0000
asID: 200019
IP address blocks: 82.118.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:da:af:e8:b6:b6:a4:65:f0:5c:a2:8d:10:d3:bc:9f:4c:76:49:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jun 27 08:12:09 2023 GMT
Not After : Jun 25 08:17:09 2024 GMT
Subject: CN=27E01D25D484C937F8EE8CB7F1AA60122BB9DEEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:f5:2b:76:f8:4a:00:f1:1f:02:a1:b6:41:
1f:9f:ee:6a:fe:4d:94:a2:d4:d1:fa:1f:97:2b:32:
6a:32:db:88:18:d7:95:4b:7f:ef:e2:14:34:bb:4e:
4d:18:89:3f:f2:4f:f8:10:78:0e:9a:01:62:d2:59:
5d:d8:aa:0e:d6:e3:2f:1d:00:b7:1a:64:71:0d:d5:
28:9f:68:27:53:63:de:5c:49:e1:34:6c:2c:7a:ac:
55:51:b0:ff:fc:0e:62:b6:ac:67:99:47:e6:85:c1:
16:04:51:de:0c:5d:ff:f7:26:fb:a2:ab:09:2a:f3:
76:fe:26:df:4e:d0:5c:ca:8d:3b:d9:82:14:39:96:
66:df:e4:9d:e8:fa:8b:90:12:cb:68:e5:ec:42:14:
db:81:f8:77:17:86:17:ab:f0:a6:59:56:39:00:c5:
65:cd:09:c8:53:f7:07:56:6c:b8:d0:07:01:22:fd:
f1:1d:d1:3a:c1:82:30:ed:03:8e:57:2f:78:f7:ee:
72:b9:39:27:a0:b6:c0:75:c4:d0:2c:3c:19:ef:8c:
21:65:bd:31:cb:83:47:4f:f8:02:35:28:9b:72:54:
03:96:98:e3:28:d2:67:4a:e8:e7:58:ef:d9:d5:1a:
11:38:7c:b4:43:84:15:24:63:c4:85:7c:cf:d8:6e:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:1D:25:D4:84:C9:37:F8:EE:8C:B7:F1:AA:60:12:2B:B9:DE:EA
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4d:8f:d3:43:8f:02:56:ca:5a:42:78:ef:be:47:5c:57:d4:
79:74:d9:4b:b8:b3:23:f6:df:eb:e9:3d:db:6a:c9:0b:b6:9a:
7b:9f:04:c7:57:b2:46:30:bd:51:6d:c2:ea:b7:8b:8d:0c:3a:
8c:11:e8:3d:95:ea:ca:19:99:fb:fd:e9:b8:75:1e:4c:83:ca:
c6:d8:70:76:08:5e:8e:3b:57:b8:89:99:f8:d7:18:e5:f3:21:
dd:f6:b9:f6:6d:d9:f3:67:7f:ef:a3:25:d5:af:fe:8b:24:46:
55:d1:66:f3:00:31:8f:87:49:c1:cb:a2:ca:80:5a:05:2d:bc:
62:c3:34:44:31:60:e6:56:06:65:5f:20:00:ef:80:c7:f9:de:
ff:be:99:be:46:69:86:9a:55:4a:9c:e9:8b:3c:9c:51:d1:1e:
0f:56:81:b2:a5:c8:13:c5:e0:47:0b:07:a6:b5:bc:ec:b9:c6:
5d:68:43:fa:3c:e1:8c:a8:86:41:e1:dc:69:37:45:08:93:04:
97:9f:bf:78:32:74:fb:ca:f1:1d:a8:83:a6:e5:a6:d5:6c:af:
49:21:a3:35:cb:c5:55:56:28:cf:0d:37:3f:95:c4:02:7a:53:
5a:37:d9:a1:e2:02:69:04:37:f5:8a:a9:50:0f:e6:51:6a:39:
8a:a8:05:94
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 26 00:42:20 2023 by rpki-client on console-ams.rpki-client.org