Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20383334.roa
File: 38322e3131382e32382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8wXWFHJ81PslXHHg2PM6TkebvxojsjS7UpcIGVHUDoo=
Subject key identifier: 64:10:FC:7C:E8:23:33:A9:A1:F8:0C:58:FE:41:04:F4:DE:13:48:4D
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 61AC3570A0449ABAB51B4B4BBB1D2F6E8E5D6105
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20383334.roa
Signing time: Wed 18 Oct 2023 00:00:05 +0000
ROA not before: Tue 17 Oct 2023 23:55:05 +0000
ROA not after: Wed 16 Oct 2024 00:00:05 +0000
asID: 834
IP address blocks: 82.118.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 18:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ac:35:70:a0:44:9a:ba:b5:1b:4b:4b:bb:1d:2f:6e:8e:5d:61:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Oct 17 23:55:05 2023 GMT
Not After : Oct 16 00:00:05 2024 GMT
Subject: CN=6410FC7CE82333A9A1F80C58FE4104F4DE13484D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:92:e2:b3:40:b6:98:6d:7e:91:a0:e1:74:
cd:01:85:5b:e8:03:f8:95:f9:b5:e3:e5:cc:11:a8:
06:c1:7e:23:f7:6a:c8:22:e2:5c:86:f0:1d:4c:9f:
d0:bc:a6:59:94:e8:f4:9d:67:d8:4a:48:a7:0d:65:
76:af:9a:19:20:a5:21:b9:b6:1b:83:96:bd:42:d4:
55:84:a1:d0:04:ab:7d:34:1a:0d:1f:9d:fb:b1:17:
3f:50:96:64:fa:02:61:df:23:15:9a:44:78:a1:86:
fa:4f:14:8d:00:7b:1d:af:b2:c5:6f:92:42:45:81:
a0:a5:a1:cb:67:9b:4c:c7:48:ba:e2:d6:d2:39:e5:
81:50:7c:1f:20:78:64:e3:ee:a9:52:22:6b:53:a0:
14:5b:cd:c1:3f:8e:5f:6d:c5:78:14:9a:0d:6a:ed:
51:2c:4b:08:65:a7:89:27:44:0b:f3:40:72:06:ad:
d0:62:05:91:46:c0:af:90:f1:a7:3a:47:bd:23:70:
a7:e8:29:6f:a6:05:0b:f2:7d:c3:ec:2d:b4:04:41:
76:7b:d9:dc:9d:69:3e:9a:8c:9b:57:27:16:57:3e:
1c:3b:ef:9b:38:04:7c:b5:fb:cf:5e:3b:ef:7c:38:
ae:da:15:f3:f7:f8:6c:62:79:e9:a4:03:af:0c:99:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:FC:7C:E8:23:33:A9:A1:F8:0C:58:FE:41:04:F4:DE:13:48:4D
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:bb:df:c4:ec:bc:b5:4c:66:d4:23:5d:4c:c6:8c:0f:69:54:
05:10:55:83:06:b0:fe:23:69:69:3c:c1:b0:a0:aa:2b:42:3f:
10:ed:8f:a0:5c:5c:b9:55:4c:fc:da:be:d9:e0:d8:28:cd:27:
9d:8c:46:13:ae:4b:8b:e9:17:66:11:53:48:dc:6f:1f:27:a0:
c7:d4:a3:32:02:2a:7b:a3:cd:c1:0e:97:86:61:e0:95:0c:67:
8b:d4:89:30:50:58:cc:ab:0e:a9:01:43:b3:9f:62:be:0f:bf:
1b:e8:a6:35:eb:d9:1c:e9:6e:54:97:ab:bd:4e:8a:9e:a9:03:
1b:99:11:d7:11:f2:fe:0f:88:47:c1:76:8c:1f:4c:e9:f8:7c:
14:60:d4:d9:b0:d9:9b:99:a0:30:84:e9:5d:1a:be:1a:fd:d1:
f5:17:2c:0b:37:5e:e3:0c:35:1a:0a:87:ec:4a:6c:af:54:95:
4f:10:56:d2:83:2e:64:b4:f3:ca:70:a0:f1:d3:de:61:f6:17:
19:4e:10:e4:35:44:a5:8f:14:ab:5c:82:c2:a3:2b:47:47:76:
0d:a2:54:c2:0b:21:5c:1c:51:47:68:a6:7c:0e:63:66:d5:02:
35:c3:3d:19:52:d0:4d:a9:2f:5f:04:ca:77:6b:5f:77:8c:1f:
42:95:c6:cb
-----BEGIN CERTIFICATE-----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Generated at Fri Mar 8 20:58:00 2024 by rpki-client on console-fra.rpki-client.org