Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/322e35382e37342e302f32342d3234203d3e203432333636.roa
File: 322e35382e37342e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: nytc/TOkdSLOcbSfBSutkSGfzVAt0ujrFcxcYleV+po=
Subject key identifier: 02:33:DD:5E:98:DA:B6:91:81:3E:46:58:F0:97:28:2B:3A:B9:71:94
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 2686116E60B37E72BD9CB734993CA2F9F097DB47
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/322e35382e37342e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:20:15 +0000
ROA not before: Mon 10 Apr 2023 08:15:15 +0000
ROA not after: Mon 08 Apr 2024 08:20:15 +0000
asID: 42366
IP address blocks: 2.58.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:86:11:6e:60:b3:7e:72:bd:9c:b7:34:99:3c:a2:f9:f0:97:db:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:15:15 2023 GMT
Not After : Apr 8 08:20:15 2024 GMT
Subject: CN=0233DD5E98DAB691813E4658F097282B3AB97194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:34:be:06:bc:c7:6b:09:ef:36:70:38:4f:
61:fb:76:df:03:d6:2b:fe:ac:29:ad:eb:cd:c3:86:
d2:68:30:84:fe:5f:9c:4c:54:93:f9:d2:b5:8c:f9:
ba:08:6c:67:8a:87:2a:2e:3f:e3:41:e4:0c:86:10:
be:25:76:be:e7:84:8a:2c:93:b2:7a:e7:42:67:6b:
6b:08:c1:c4:af:50:85:0d:e7:e0:fa:43:20:d6:ad:
f9:3d:68:35:ed:e0:66:b7:b4:e3:aa:93:04:27:ce:
f4:48:81:91:d7:8e:b1:85:b3:98:ae:80:e3:a2:d1:
8d:42:48:f6:c6:0f:f3:ef:1f:6f:ce:c0:9d:ed:0f:
cd:4d:c3:bc:63:53:15:0b:fa:63:be:36:4a:94:40:
e3:db:3c:2c:05:6e:35:6d:e1:07:4f:ae:73:ec:11:
1b:3e:d7:89:9b:89:87:49:7f:49:0e:2d:34:25:60:
7d:78:28:18:ee:c3:bc:86:ec:40:4c:2b:12:bf:54:
4a:5b:a8:2e:98:ce:8d:ef:77:87:6c:4f:af:b3:c4:
bc:a1:54:97:80:5f:6a:b7:0c:3f:bb:bc:a4:8c:c3:
8b:16:4b:30:0e:d9:f1:ed:fb:1b:70:59:f3:cb:95:
17:d8:87:2f:1b:46:f2:9b:85:56:2b:28:8d:24:b7:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:33:DD:5E:98:DA:B6:91:81:3E:46:58:F0:97:28:2B:3A:B9:71:94
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/322e35382e37342e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.74.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:69:35:40:7a:fe:5c:8f:be:45:a6:52:3a:eb:89:a2:a9:ad:
6f:6e:05:75:49:c5:f5:76:93:9f:a0:fd:53:ff:1f:97:bd:48:
3b:bc:e7:98:e1:ea:af:dd:b4:ce:67:8a:fd:5d:aa:8c:bc:d2:
a6:73:e2:54:a6:fc:f2:af:14:c7:1c:b4:32:31:dd:ad:77:87:
9f:67:db:08:9a:15:8a:33:16:cc:86:fe:50:5b:af:d1:a6:08:
dd:85:09:27:41:15:ba:19:4c:e5:4c:4e:93:76:f7:bb:d7:15:
de:23:9c:81:60:ee:74:9d:71:b2:11:2b:56:6d:9a:e6:59:de:
a3:32:b0:dd:86:30:1f:3f:82:37:93:de:ad:13:a8:8d:43:19:
1b:cf:2b:42:ac:57:6c:bc:cb:e1:ba:d2:cf:61:ad:2a:54:b0:
38:17:ba:83:8a:c9:80:4b:a4:da:cf:5a:c5:45:61:e4:f1:ce:
5f:76:70:7a:5f:41:36:7a:96:a7:f5:40:ff:55:73:48:f2:b5:
d3:8d:ad:5c:b3:3a:a9:21:92:f6:be:7f:bd:c0:58:49:57:77:
18:02:80:31:62:6e:f7:75:c6:65:59:2c:08:a8:34:34:37:53:
7c:5c:cf:eb:ff:10:d4:2c:5a:1f:0e:38:76:27:16:f9:2e:f9:
0d:39:f9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org