Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e203439393831.roa
File: 38322e3131382e32362e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: CbvdgQfJ7qFIqOZR8/2G7JesapFi0N8TQlgdw2iSXdc=
Subject key identifier: 23:11:6C:A0:BA:E4:5C:92:82:79:E1:3A:14:CA:2E:F0:E7:6A:16:48
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 5FD29BAD40D1BD3AA70FDFE2196A9DA421A2D5BF
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e203439393831.roa
Signing time: Sat 29 Jul 2023 10:36:00 +0000
ROA not before: Sat 29 Jul 2023 10:31:00 +0000
ROA not after: Sat 27 Jul 2024 10:36:00 +0000
asID: 49981
IP address blocks: 82.118.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:d2:9b:ad:40:d1:bd:3a:a7:0f:df:e2:19:6a:9d:a4:21:a2:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jul 29 10:31:00 2023 GMT
Not After : Jul 27 10:36:00 2024 GMT
Subject: CN=23116CA0BAE45C928279E13A14CA2EF0E76A1648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:50:af:d4:eb:41:71:d2:9a:6c:87:c6:ce:
89:e4:1f:1d:3d:57:e0:ec:1d:ad:06:72:11:34:57:
09:8b:f6:51:89:d2:51:2a:50:b4:9a:a8:7f:52:ed:
86:bf:5e:f5:24:b1:be:54:29:ee:94:36:9b:c9:05:
53:3e:e5:96:9d:09:59:7f:fb:af:80:49:8b:fe:81:
73:f0:43:43:85:0f:63:8b:e6:e7:d9:d6:2d:78:cf:
5c:78:fa:29:3d:70:54:34:ba:2d:32:21:8f:5a:49:
89:f1:9c:23:51:ce:6e:3b:34:e8:75:7d:75:5e:a9:
81:28:a8:7f:89:f6:5b:66:b1:31:70:31:64:e3:f1:
3f:72:37:a3:63:8f:b1:e7:71:26:d0:24:c2:54:64:
9b:52:6c:7e:65:65:3f:e6:d7:7a:5a:57:14:55:6d:
b0:fc:e4:41:7e:e2:b4:e5:06:56:60:01:e5:d5:da:
39:91:63:71:61:82:bd:ae:05:ee:d4:a8:e4:84:b1:
83:3d:1f:aa:55:fa:e7:ce:28:8b:1e:38:51:70:ed:
6d:1c:74:92:0e:5f:e2:44:90:d6:fe:46:03:d7:a4:
e4:29:35:8c:ac:f2:f3:61:b2:f9:e9:3e:72:32:ce:
cd:79:72:bf:90:23:f4:76:58:31:ff:13:ff:36:c4:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:6C:A0:BA:E4:5C:92:82:79:E1:3A:14:CA:2E:F0:E7:6A:16:48
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/24
Signature Algorithm: sha256WithRSAEncryption
25:02:d4:83:4a:1c:fe:88:d1:04:92:e6:54:63:df:68:1f:00:
0a:77:35:d1:ae:ab:1b:1b:d8:11:08:1a:20:42:d9:f1:5d:24:
53:1c:47:3d:a4:90:66:4e:db:33:b9:5b:4d:06:03:89:de:69:
5e:d9:6c:8f:9b:26:b5:0f:c1:d3:5e:3b:94:d0:f4:bb:90:03:
52:99:e9:9b:9c:81:0c:80:e9:a9:bd:d6:b0:99:9b:31:05:e8:
06:0c:17:da:15:3b:de:a4:05:36:58:7f:e7:97:01:6a:3b:3b:
8e:e7:20:01:0a:a0:1e:bf:19:fc:98:42:f2:51:10:9f:a3:72:
0f:5f:80:77:be:f9:e4:bf:59:64:bc:e0:eb:2d:ff:2a:58:ba:
b0:ac:b3:26:12:21:18:d8:66:93:47:ce:00:f9:a3:9a:39:c7:
f5:23:b0:cf:a8:23:98:9f:08:15:c6:d6:00:f0:d0:86:26:a1:
64:05:df:25:ae:f4:13:4a:a2:33:fb:b1:3f:84:8c:5c:ab:59:
89:c1:fa:7e:11:87:2b:dd:ee:cf:be:1b:3a:80:2f:b9:a2:b8:
e6:d2:c3:55:ae:bf:5b:56:dd:75:bb:8f:86:c0:96:01:0e:73:
d8:05:d8:71:d8:2a:b6:58:55:fa:5d:a8:c9:71:ec:69:82:dd:
19:52:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org