Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e2030.roa
File: 38382e3231382e3230302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: GDMXfHFQz+bNI4+q0l4bXQ0spL7oG23aAS3uKh9TGoM=
Subject key identifier: 10:2B:2E:21:65:70:02:D7:9C:CD:7B:B8:87:CA:1B:35:54:65:65:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 101275703F2A1536792DA649B781FB83FDFD20C4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e2030.roa
Signing time: Fri 20 Oct 2023 13:41:46 +0000
ROA not before: Fri 20 Oct 2023 13:36:46 +0000
ROA not after: Fri 18 Oct 2024 13:41:46 +0000
asID: 0
IP address blocks: 88.218.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:12:75:70:3f:2a:15:36:79:2d:a6:49:b7:81:fb:83:fd:fd:20:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:46 2023 GMT
Not After : Oct 18 13:41:46 2024 GMT
Subject: CN=102B2E21657002D79CCD7BB887CA1B3554656550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:eb:6b:69:8e:6b:d9:0e:0f:b5:5b:80:cf:
db:1c:13:4e:61:bd:09:bc:40:7d:0b:5b:e3:80:2f:
13:92:a2:24:85:09:0d:51:ed:dc:14:d7:1b:05:a4:
78:0a:25:63:97:e0:9a:8d:8e:5f:05:a7:d9:07:ea:
ec:66:2b:5f:db:f2:a0:fa:4f:d4:20:cc:f9:8f:e6:
ca:16:14:49:3a:c4:0b:e3:3c:17:07:58:1d:0b:2b:
9d:ed:39:1f:e2:e1:67:53:c2:63:e2:ad:a5:75:86:
92:d5:0d:d7:5e:b6:7f:89:31:03:08:9c:a5:ff:31:
f3:06:5f:ad:0f:10:0b:5e:ec:bc:2b:7c:5b:ca:8d:
89:a6:30:07:33:6b:0c:56:29:a1:d5:ff:55:f0:90:
af:49:1f:03:b3:ab:45:33:b5:8e:3f:6d:d3:57:02:
c3:9b:ec:1c:b5:5f:2d:55:04:07:21:a2:fd:46:5b:
df:b8:76:bb:b7:a2:57:35:c2:04:be:65:75:77:bf:
4f:1e:6b:51:1a:5b:39:24:8a:19:02:12:fd:c6:3e:
53:6e:e1:02:a4:2e:70:22:1f:94:93:fa:f1:05:78:
aa:30:9f:bf:b7:f4:5e:88:8b:ec:5c:ad:c6:2b:47:
4d:80:ec:76:b8:95:94:a4:f4:1f:e5:87:0c:9d:97:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:2E:21:65:70:02:D7:9C:CD:7B:B8:87:CA:1B:35:54:65:65:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:19:68:10:67:13:36:ed:cb:9d:cd:db:dd:c3:cc:f6:ef:d0:
cb:b4:d3:4f:d1:11:0e:82:8b:81:8e:9d:8d:df:7d:ab:56:20:
07:8d:04:42:85:af:42:59:78:04:a9:09:31:11:f9:7c:49:32:
8d:d8:f5:fd:38:5d:65:d0:dc:63:c5:96:73:66:69:f5:69:5b:
08:6d:a4:6a:b8:60:77:41:a5:6a:72:fa:ea:f1:de:10:cf:35:
f8:c0:57:2b:fb:8b:37:9d:7b:90:d2:df:a5:70:e7:26:f3:57:
7f:46:8d:ef:68:33:f5:07:be:d3:6d:a8:02:30:4c:2e:f0:ae:
cb:3e:9c:17:00:70:ac:1d:90:f8:df:d2:c8:1a:9a:c4:4f:23:
c5:e6:d6:e5:ed:af:8a:d4:62:e2:40:4c:02:bf:17:02:8f:4e:
a7:26:15:ec:79:9d:c4:ed:38:d2:1d:f4:00:a1:36:c4:0d:bf:
3d:d8:52:c3:4b:27:80:03:39:97:06:8f:35:f2:96:bc:b3:0b:
e0:a0:52:69:ad:6e:c9:3c:8a:ae:45:a3:d0:4c:c2:73:d4:ca:
8d:1c:1c:44:3b:ef:8d:12:8c:38:e5:f9:55:54:cd:4a:27:5c:
28:96:10:4e:ab:85:55:73:c6:9b:65:ae:ff:03:df:4e:dc:6a:
04:17:56:4d
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 24 20:23:53 2023 by rpki-client on console-fra.rpki-client.org