Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e20383334.roa
File: 39322e3131342e342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: yqIL48loHLFQ9QTTEb29VDE3w6y+1y59RU+p8ju57bE=
Subject key identifier: C6:8F:30:5A:0B:AB:DF:9B:81:09:7C:18:89:FA:DE:AE:6C:7C:DF:22
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 589E7328B0A0A9E7CE3EABC9229A418FEBFC5515
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e20383334.roa
Signing time: Mon 01 Jan 2024 00:00:05 +0000
ROA not before: Sun 31 Dec 2023 23:55:05 +0000
ROA not after: Mon 30 Dec 2024 00:00:05 +0000
asID: 834
IP address blocks: 92.114.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9e:73:28:b0:a0:a9:e7:ce:3e:ab:c9:22:9a:41:8f:eb:fc:55:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Dec 31 23:55:05 2023 GMT
Not After : Dec 30 00:00:05 2024 GMT
Subject: CN=C68F305A0BABDF9B81097C1889FADEAE6C7CDF22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:73:99:75:9d:29:84:e0:6a:5c:7c:98:29:
19:33:73:3b:25:aa:86:ad:4f:4a:90:5a:37:a3:23:
71:a4:ff:a0:78:20:5b:a0:70:93:2c:3b:9f:b3:0e:
d4:6f:6e:00:89:41:63:3b:64:2f:c0:7d:63:5b:89:
bb:29:ec:04:af:d8:a0:5c:c3:60:c3:84:84:1c:3d:
38:f3:5a:49:d0:2c:65:fc:b6:b1:49:3e:5f:a1:d9:
c6:3e:8e:62:25:f2:c3:04:4d:cd:a2:f4:28:f2:7c:
0e:72:c4:73:91:30:ac:ed:2d:27:db:30:13:9e:1c:
68:5e:ca:fc:2b:48:40:a3:a0:7f:c0:7d:cb:d8:0d:
69:3a:07:20:1f:64:58:e3:ca:3f:06:d3:f5:5c:06:
c9:e7:63:90:58:b3:f6:c7:16:39:08:6a:eb:ae:d7:
9a:e4:65:69:a0:48:3c:fe:69:c0:59:30:8b:51:a5:
de:36:98:92:99:31:25:5b:1c:c5:2e:c4:3b:fe:cc:
f6:bc:fa:d1:b9:84:a9:b1:09:55:f5:05:fe:7a:ac:
f2:53:b7:f2:f9:31:da:a9:33:07:9b:50:21:c2:37:
40:f0:0b:4d:65:93:0e:29:fa:6b:c8:67:ea:d2:37:
5f:6a:f9:39:da:7c:14:9f:04:4a:2a:c6:7c:ce:34:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8F:30:5A:0B:AB:DF:9B:81:09:7C:18:89:FA:DE:AE:6C:7C:DF:22
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.4.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7c:da:76:bc:34:cb:56:f2:5e:27:c0:b3:30:5a:f6:81:e7:
cc:c4:8c:31:ac:d1:69:0c:38:be:e3:84:53:74:fe:ab:f8:f2:
40:6c:17:80:13:d4:5d:2e:6a:c5:d8:2e:88:4c:94:2b:07:39:
13:29:18:b0:55:99:3e:1f:35:95:f7:3f:19:e4:3d:ba:fa:d0:
11:1f:bd:d4:5f:0f:f9:1e:89:dc:52:8e:29:1a:66:ee:7b:34:
87:54:04:39:1f:29:42:9d:45:d4:92:da:6e:74:d6:61:09:bb:
8a:8f:90:d5:b4:8d:69:3c:74:32:3a:99:be:21:e4:77:58:40:
bf:0d:8c:a5:a9:d0:22:8c:40:3c:dd:88:5a:ec:e4:2c:41:c3:
f0:a1:64:b5:8d:88:be:4c:ae:4e:c4:a6:fe:d2:38:e4:a7:85:
89:14:eb:ad:54:5b:59:79:12:4e:ef:16:b5:ad:da:c5:21:5f:
d7:e4:3a:18:78:45:5b:28:fb:d4:4a:6d:a4:a3:63:d6:42:78:
90:d1:f6:ac:13:31:00:80:66:58:ae:ee:9f:32:91:59:46:f2:
d8:6f:36:d1:ae:d9:91:84:70:0a:cc:0a:68:c5:70:ef:3c:aa:
b3:d7:f8:ae:45:4e:fa:9a:41:f8:66:b4:ee:e9:63:35:65:a6:
47:84:ef:35
-----BEGIN CERTIFICATE-----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Generated at Thu Jan 4 16:00:14 2024 by rpki-client on console-ams.rpki-client.org