Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e203432333033.roa
File: 38322e3131382e32382e302f32342d3234203d3e203432333033.roa (raw, json)
Hash identifier: VdlExnE52jpWmZZT+/ULWoMc++OQhQH98eO7SE6MBWE=
Subject key identifier: 90:38:32:3A:E4:18:F3:7D:B2:A7:AC:3F:74:BE:85:A4:65:DA:1B:32
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 6BA128E1D87637819B0BE34C2A7E19C4EBCA05AE
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e203432333033.roa
Signing time: Fri 12 Apr 2024 15:57:07 +0000
ROA not before: Fri 12 Apr 2024 15:52:07 +0000
ROA not after: Fri 11 Apr 2025 15:57:07 +0000
asID: 42303
IP address blocks: 82.118.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 13:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a1:28:e1:d8:76:37:81:9b:0b:e3:4c:2a:7e:19:c4:eb:ca:05:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Apr 12 15:52:07 2024 GMT
Not After : Apr 11 15:57:07 2025 GMT
Subject: CN=9038323AE418F37DB2A7AC3F74BE85A465DA1B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:79:c8:21:42:bf:b7:b6:16:77:ea:a4:45:
5b:02:14:5b:82:fd:e8:c1:a6:f4:ce:dc:f8:b5:35:
8c:fa:94:9b:24:dd:b9:a3:e8:46:3d:66:86:32:8c:
e1:28:06:32:b0:9e:c1:d1:92:f0:7a:c5:fe:48:c6:
38:9e:6f:80:03:50:dc:c4:c8:6f:b2:4b:35:84:95:
bf:2c:03:45:d2:96:48:57:da:6f:fc:76:a4:d8:e9:
88:85:ac:fe:dc:fd:7e:37:59:7f:6f:98:29:4f:10:
e0:5f:25:7c:77:fa:5a:59:2e:f9:d0:fb:5e:de:c3:
ce:59:72:36:dd:7e:19:65:10:f1:97:82:09:76:b7:
f8:5c:81:17:b6:0c:65:e1:90:8f:18:81:b6:cc:26:
9f:f5:bc:16:a0:95:9c:9b:32:ba:bd:3b:c7:6b:7e:
74:53:2a:33:cf:6b:bb:04:34:13:85:aa:c5:8e:31:
f9:3f:26:f7:99:f0:c6:c8:ee:6b:86:6e:a9:33:9e:
90:3f:d1:db:27:70:d4:d0:d3:d2:5c:59:76:10:e7:
1a:01:64:1b:a4:76:81:f4:a5:72:88:42:a0:8e:0b:
7d:f8:98:0c:b8:d8:9b:f0:3b:b4:d0:98:08:3b:71:
3f:0c:5c:aa:80:40:d8:fc:fe:db:e4:cd:4e:19:bb:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:38:32:3A:E4:18:F3:7D:B2:A7:AC:3F:74:BE:85:A4:65:DA:1B:32
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e203432333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
04:68:fa:5a:94:bf:25:85:2b:93:c8:0f:70:75:40:da:74:29:
df:87:eb:9d:a3:40:81:55:b8:5d:ba:c6:43:b7:ff:e5:39:4e:
47:3d:2b:0d:6e:b6:20:97:4a:d8:67:56:36:0a:79:78:56:71:
18:48:3a:97:67:7d:7a:46:98:f6:77:aa:6e:9c:76:5f:b7:0a:
5f:2b:06:61:06:92:d3:bf:dd:fd:78:e2:bb:b0:01:93:27:e6:
05:8f:b6:03:f3:83:0b:56:c0:df:85:2d:87:f4:54:b4:0b:2d:
7f:35:90:8d:e2:31:a6:ef:c9:20:0c:45:65:9c:f3:6d:62:88:
01:0d:04:ea:c6:22:9b:d9:a7:f7:da:3e:ae:f9:2c:f0:c7:83:
dc:67:45:7a:58:93:37:19:4f:0e:b5:70:dc:b2:b7:2c:01:97:
e8:61:37:25:65:d0:7b:9d:4f:e5:ce:d6:8f:11:b4:0e:36:33:
f8:da:2a:68:fa:33:c8:39:70:0a:ba:60:a0:5b:a9:7a:0f:b1:
b9:3b:cc:41:32:a6:42:fc:0e:ac:95:e1:4d:32:aa:d1:99:64:
73:34:d5:5d:f7:49:14:a5:d2:e5:4f:6d:f3:b6:69:e5:ac:65:
2c:78:77:63:33:ed:ad:80:87:17:8c:92:be:b5:05:48:06:04:
d5:0c:b6:0b
-----BEGIN CERTIFICATE-----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Generated at Tue Apr 16 16:50:22 2024 by rpki-client on console-ams.rpki-client.org