Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32322d3234203d3e203432333636.roa
File: 39322e3131392e38302e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: hbPgRRzw+ioJEB4DYOTyw+3ojMvOe4LeXPqFfn2hJ70=
Subject key identifier: F5:07:AA:F2:69:3B:CF:63:EE:23:31:3B:72:F0:E9:73:7A:11:DE:66
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 35FF61EAAD3BD00606820F1A97ED9134B879AC1C
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32322d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:24:13 +0000
ROA not before: Mon 17 Apr 2023 11:19:13 +0000
ROA not after: Mon 15 Apr 2024 11:24:13 +0000
asID: 42366
IP address blocks: 92.119.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ff:61:ea:ad:3b:d0:06:06:82:0f:1a:97:ed:91:34:b8:79:ac:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:19:13 2023 GMT
Not After : Apr 15 11:24:13 2024 GMT
Subject: CN=F507AAF2693BCF63EE23313B72F0E9737A11DE66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:df:d8:3c:8c:81:76:ca:46:a6:25:b7:b8:
e6:db:9e:b2:cc:59:9c:78:4e:8e:8d:8e:a4:14:ad:
dc:a8:18:b2:2b:8b:ef:ca:35:c1:5a:6c:75:23:18:
1f:e8:5b:96:a1:e7:29:eb:56:8b:1b:13:98:23:b8:
15:79:f8:ba:32:0f:55:81:0f:26:4f:00:bb:e6:db:
c6:d6:ce:0b:a1:aa:df:f5:5e:88:73:bf:19:26:e3:
c4:0d:20:2e:97:19:50:b9:aa:c0:8f:66:6d:10:97:
c3:12:a8:c7:9b:6d:2e:44:20:e9:16:20:6f:80:ee:
cc:4f:73:f4:88:25:b7:d4:38:29:3e:65:61:b4:07:
b2:85:f5:7e:91:a6:f7:57:dc:c7:e4:c7:69:31:33:
ff:c5:52:74:e4:81:5a:4f:61:52:4c:0b:e6:37:a3:
c1:e3:83:f3:87:2b:0b:56:a8:4a:bf:ae:a6:3c:35:
3a:6b:94:a6:77:3a:bd:16:28:e7:8f:6a:57:df:c8:
32:13:75:3e:be:bc:b3:11:c0:72:9d:d1:cb:d1:ad:
d3:62:17:75:6b:57:4b:7d:34:cb:c6:db:6f:e2:e3:
f6:60:0d:46:22:5f:31:63:31:ce:7e:40:57:be:a2:
27:3b:02:e6:5c:7a:45:3c:f8:84:24:94:2c:85:a5:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:AA:F2:69:3B:CF:63:EE:23:31:3B:72:F0:E9:73:7A:11:DE:66
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.80.0/22
Signature Algorithm: sha256WithRSAEncryption
14:ff:6b:79:89:83:ef:7a:72:20:7b:d1:80:62:fa:ab:d1:09:
b1:1c:05:04:d4:96:eb:02:48:08:c1:a2:c8:af:b5:44:80:78:
9c:a7:6d:a1:4c:4b:5b:ec:d8:61:8b:7d:b7:98:09:cf:63:ad:
a9:71:d1:b8:6e:d3:bc:f4:54:5f:1e:1d:b3:8d:75:46:37:60:
c2:41:06:55:bc:f1:1a:db:66:a8:80:94:94:8e:e9:d3:d6:c1:
cd:84:af:1c:b5:a9:d0:af:77:d5:f0:a6:66:5f:31:ff:61:81:
f5:a7:c5:bd:e4:ce:3a:f2:01:19:e0:6b:a3:7b:05:11:de:93:
bc:2b:ea:50:6b:c0:71:f9:18:9c:5c:11:59:8e:05:77:c5:67:
cb:f7:d5:23:8a:39:34:f5:75:c0:5c:c1:01:40:2d:b7:49:95:
d3:5f:51:5d:ff:37:22:33:52:ca:3d:f7:f3:bc:b8:4e:8e:38:
82:ac:c1:40:81:8c:88:8c:fd:92:10:43:07:db:0a:36:87:23:
82:66:0d:b0:2c:f4:a3:e9:64:88:f7:1e:31:b5:44:f6:c3:09:
1d:c9:05:c6:2b:e1:84:74:12:ee:e3:c6:55:a0:4a:4b:25:a1:
01:ac:79:4d:11:8a:67:c3:43:80:f5:5a:7f:ec:05:8a:2a:4d:
0b:f9:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 17:55:36 2024 by rpki-client on console-ams.rpki-client.org