Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e20383334.roa
File: 38322e3131382e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: quNjsqTAbAeJfpLuCZU/EULLEuCYVpbIXoDUnNvgOpA=
Subject key identifier: 8B:2D:6F:3D:51:C2:1E:EC:23:D5:27:59:FF:45:A8:59:F8:D4:E9:06
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 0D02CCAFDBC02664820E40F160BDC75A16D02FBF
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e20383334.roa
Signing time: Thu 04 Apr 2024 00:01:01 +0000
ROA not before: Wed 03 Apr 2024 23:56:01 +0000
ROA not after: Thu 03 Apr 2025 00:01:01 +0000
asID: 834
IP address blocks: 82.118.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 14:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:02:cc:af:db:c0:26:64:82:0e:40:f1:60:bd:c7:5a:16:d0:2f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Apr 3 23:56:01 2024 GMT
Not After : Apr 3 00:01:01 2025 GMT
Subject: CN=8B2D6F3D51C21EEC23D52759FF45A859F8D4E906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:82:90:6a:05:26:3c:4d:f6:9c:d6:c5:2f:
b6:43:a7:c7:11:d4:51:0b:34:b9:38:e0:84:5b:de:
ea:c8:d8:b7:ec:d7:36:c0:73:1b:a8:4c:55:34:de:
0a:30:77:77:dc:50:d3:da:53:12:2f:e4:bb:53:f2:
b1:1c:2c:77:1f:94:62:ad:29:be:b3:6e:0c:7e:6e:
14:2c:f2:43:40:91:e6:47:09:17:e2:64:70:cf:9e:
2e:b7:a1:94:55:ce:eb:fe:4f:55:2f:69:e2:28:05:
0e:6a:1f:83:e8:0f:26:19:ee:ff:a6:b1:2a:aa:9f:
1a:9e:6c:e6:cf:2b:ed:1b:51:52:35:b6:7b:cf:49:
63:0e:19:2a:72:fa:a7:a0:a1:79:73:51:c8:8f:83:
9b:71:90:5f:64:2b:87:37:c7:59:66:6e:92:ce:bd:
8e:b3:6f:c3:58:a8:95:2f:63:87:6c:78:9e:30:da:
6e:01:af:b5:df:cf:d3:57:d4:5c:98:71:e7:6b:a5:
5f:14:7f:af:47:25:ee:fa:ed:71:70:03:7b:92:cd:
81:6c:f4:03:ce:9c:49:90:fe:d1:d0:e2:a0:ba:5e:
ee:19:b1:76:73:7f:c6:9d:fc:fe:66:95:e6:c0:1d:
ff:f1:2d:94:32:eb:ec:11:33:0e:7e:5c:6b:9f:7f:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2D:6F:3D:51:C2:1E:EC:23:D5:27:59:FF:45:A8:59:F8:D4:E9:06
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.27.0/24
Signature Algorithm: sha256WithRSAEncryption
43:df:d3:90:03:f3:1e:d6:9e:28:6f:31:fa:d9:32:c4:46:40:
b4:2c:b9:4e:8a:0c:17:ee:a2:bd:be:29:d0:c8:c0:ab:17:7d:
19:e5:b1:ae:28:1b:72:8d:c5:5a:ba:26:e3:90:78:c1:a3:fd:
54:e3:12:fb:21:61:cc:60:38:c4:c1:2d:9f:e2:bb:75:6b:47:
2a:99:eb:f7:8a:02:bd:5a:15:16:e3:c9:37:16:a6:bc:a2:83:
89:96:6a:63:b4:fa:9f:77:03:86:33:37:c5:86:71:b1:43:d9:
7a:9a:ec:57:18:f1:44:fa:26:70:4d:1a:fb:20:dc:6a:6f:bb:
7a:bd:ce:6f:4c:38:af:df:19:0d:da:4f:3b:9d:a7:36:97:39:
d9:74:11:c9:ff:3d:b8:60:f6:47:a3:f5:95:eb:82:40:d9:ad:
e2:d6:03:c3:47:b8:8e:80:50:fc:8f:ec:2e:59:d4:8f:27:53:
bd:3a:a2:ca:c1:12:72:a7:33:66:1a:0d:db:7b:61:be:4f:8a:
3c:24:66:1f:90:09:7d:8f:0c:21:3a:87:ee:78:37:1d:7d:8d:
c9:56:c2:93:d1:5e:e6:9d:77:0a:4c:2f:b5:0a:aa:46:b6:a2:
d5:07:22:c2:0e:48:5d:73:d9:65:94:ad:69:ae:43:fa:28:0a:
84:49:df:95
-----BEGIN CERTIFICATE-----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Generated at Thu Apr 4 17:26:17 2024 by rpki-client on console-ams.rpki-client.org