Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030303230.roa
File: 38322e3131382e32362e302f32342d3234203d3e20323030303230.roa (raw, json)
Hash identifier: DFwmWdSOXnunzct2ScOwecy0NOL0QcQTcwHQ5LrQHOc=
Subject key identifier: E4:D7:C7:9B:21:BB:10:42:ED:3D:52:2B:F4:EF:F1:FB:B6:6B:55:FE
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 69F85EDF433E84AA6E6C008416C08E49919FFDED
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030303230.roa
Signing time: Mon 26 Jun 2023 07:15:18 +0000
ROA not before: Mon 26 Jun 2023 07:10:18 +0000
ROA not after: Mon 24 Jun 2024 07:15:18 +0000
asID: 200020
IP address blocks: 82.118.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f8:5e:df:43:3e:84:aa:6e:6c:00:84:16:c0:8e:49:91:9f:fd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jun 26 07:10:18 2023 GMT
Not After : Jun 24 07:15:18 2024 GMT
Subject: CN=E4D7C79B21BB1042ED3D522BF4EFF1FBB66B55FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:67:ae:45:2d:98:b3:d0:09:39:7c:72:5c:
a7:7d:18:55:8e:22:46:c8:39:c8:fc:b6:03:3f:d0:
cb:33:87:69:02:85:46:2d:b7:df:54:09:5d:a6:5b:
32:16:70:78:60:37:53:b3:3c:90:e3:d0:79:b5:b9:
9e:ed:a9:ed:06:14:c7:2d:55:4f:65:34:3a:df:8a:
24:8a:c9:38:e5:75:82:98:49:5b:c8:3c:89:6b:31:
fd:87:61:e3:09:22:9d:a1:10:9d:80:c5:4c:72:93:
d0:c8:93:07:1b:d5:f5:d1:71:aa:f2:f6:3a:59:64:
83:36:61:19:11:d6:e8:06:38:a0:1d:78:3e:78:d0:
d5:f0:82:19:d7:e2:32:af:72:b8:04:37:af:63:a4:
fa:c0:b3:50:4d:b9:4b:fb:da:b7:38:fc:4b:68:a8:
5f:a5:c3:fb:29:f4:c4:98:1f:77:0e:f1:ae:5b:9f:
44:33:34:fa:55:e6:5f:df:00:81:4d:e5:34:8d:90:
d8:fc:72:81:d2:41:50:c6:e2:fb:60:3c:86:e4:fa:
c7:11:54:23:38:45:f9:96:71:5c:f9:8c:99:81:3b:
3e:f6:91:ea:7b:f1:79:6a:cf:cc:b1:76:ae:90:99:
c2:7d:a1:b3:60:98:cf:ff:d7:61:32:5a:4d:94:b7:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D7:C7:9B:21:BB:10:42:ED:3D:52:2B:F4:EF:F1:FB:B6:6B:55:FE
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:dd:62:e3:82:79:f3:4b:8b:2c:4b:a2:99:e9:e2:5b:72:04:
fd:c7:d6:df:3f:b8:39:e3:57:82:c9:ca:3f:9e:a8:1b:8a:65:
34:7e:14:7f:cd:51:a3:54:8e:12:72:02:42:19:2d:03:88:e6:
0b:2a:65:c3:b4:0d:80:5b:5f:53:0c:f5:36:3a:b6:c5:63:c3:
1c:f7:8a:b0:77:5c:8b:56:65:88:19:d2:b4:7e:58:f5:0e:57:
59:97:d6:6a:00:73:57:2b:47:41:13:f3:3f:ac:4e:d4:be:29:
69:68:93:4d:d7:e6:a8:83:d0:3f:92:de:df:a5:8c:29:3f:c3:
41:fc:a1:39:e3:67:e1:42:19:50:34:9e:80:7b:31:d4:d7:4c:
ff:fa:6a:03:fb:21:0c:27:e0:ef:3a:ca:1c:0a:a7:5b:b1:31:
cc:61:1e:cf:f1:09:66:18:e5:b8:6c:31:af:2e:1c:06:91:c6:
b3:7a:4f:d4:11:ac:a8:cf:ac:15:7c:b3:fc:40:f4:07:5e:a4:
c9:79:a5:56:45:17:2f:ff:bb:e6:ba:58:88:00:4a:c4:dc:dc:
36:b2:e4:c7:2d:a5:c0:4c:43:be:42:c6:0a:c7:c0:ff:d5:41:
ba:8a:b6:e2:9b:2b:ef:1d:31:b0:5e:76:4a:79:12:fa:95:91:
23:1d:a9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:51 2023 by rpki-client on console-ams.rpki-client.org