Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36302e302f32332d3234203d3e2030.roa
File: 39322e3131382e36302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: U30mqk4nuFTNmA3j7T6nAPPdnA9FEXyuJS6hCE6rcU8=
Subject key identifier: EA:53:7B:CD:C3:36:54:B6:A5:87:D5:0B:D2:4E:CA:6C:DB:FF:1F:5B
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 48B55882716F7FBB05BC7B5722DB2A9DC64D4A50
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36302e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:27 +0000
ROA not before: Mon 27 Mar 2023 08:22:27 +0000
ROA not after: Mon 25 Mar 2024 08:27:27 +0000
asID: 0
IP address blocks: 92.118.60.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b5:58:82:71:6f:7f:bb:05:bc:7b:57:22:db:2a:9d:c6:4d:4a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:27 2023 GMT
Not After : Mar 25 08:27:27 2024 GMT
Subject: CN=EA537BCDC33654B6A587D50BD24ECA6CDBFF1F5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:92:96:36:8b:6d:cd:d5:e7:ff:31:a0:4f:
b9:0e:0f:ac:34:2f:7d:7a:f7:36:54:25:b5:63:7f:
b3:ab:f0:33:d4:f5:56:6d:c5:b4:f6:ac:77:66:23:
a3:69:61:d3:19:3e:fd:e3:7e:10:2e:81:78:36:ff:
d0:78:5d:46:ed:34:10:8d:8b:d3:4d:f2:fa:8e:2c:
fe:c9:48:a9:b8:d0:d6:41:c3:9f:27:c5:21:0c:6e:
94:89:4d:b1:29:80:b4:2d:63:ea:6d:ca:d6:3e:b8:
ba:e3:5a:4a:a8:8d:fc:02:fd:56:64:32:cd:1b:45:
5e:18:8b:d4:88:9f:87:c9:aa:e5:98:fc:ae:51:2a:
5c:d8:36:59:f8:66:7c:49:04:22:61:f7:34:df:60:
78:a3:62:ed:4c:8f:cd:46:d6:e6:76:ab:b1:a0:ae:
8c:76:46:bc:a5:e6:e2:a6:00:56:07:ee:2c:87:fe:
73:9a:14:64:cf:ee:0c:2a:57:a5:97:7a:cf:bd:0e:
c8:f1:61:b3:d9:dd:72:d9:45:d0:3a:a2:3f:fc:16:
84:eb:41:54:ad:b2:bc:87:99:9b:1d:8e:26:a5:56:
b1:1e:3d:e6:6a:5b:1f:64:4c:22:f1:56:d5:0d:1a:
b0:5a:b3:67:ad:d2:90:78:35:72:0f:43:94:69:bc:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:53:7B:CD:C3:36:54:B6:A5:87:D5:0B:D2:4E:CA:6C:DB:FF:1F:5B
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36302e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.60.0/23
Signature Algorithm: sha256WithRSAEncryption
70:12:33:c3:f8:26:42:b5:df:70:bc:40:ab:da:8c:a9:b9:52:
87:e9:40:f9:52:c1:b3:34:9a:ac:c8:49:13:c0:f2:7c:2a:93:
4d:be:ab:6f:60:25:f5:87:ef:01:42:3f:c7:42:91:6e:14:83:
8b:6e:cd:6b:87:b4:1d:ec:d9:9b:7c:7d:99:77:3a:31:b5:f5:
f0:02:19:6d:83:8c:fe:53:b6:58:fc:a3:83:2e:f1:c5:21:a7:
80:48:2b:1d:55:c1:5d:cf:b3:03:6c:9a:c1:23:65:a4:af:38:
49:9d:87:cb:1c:bb:b8:62:c3:24:3b:ef:4b:b3:7c:f2:f7:e5:
aa:a3:2d:8d:4e:82:0e:30:05:62:b9:fd:db:23:49:eb:3f:f6:
c3:d6:70:96:79:75:b9:2f:15:02:ff:d9:be:d7:a1:58:d7:cd:
2c:b1:92:36:f7:73:ee:3d:5c:9a:4b:7e:30:33:29:0d:a1:6d:
2f:51:ef:60:7c:3b:2b:26:ef:12:07:b6:85:b9:8f:3b:e3:59:
e6:8a:ed:66:33:84:c2:bf:a9:5b:45:54:6a:43:88:44:96:bd:
e6:2f:4c:8b:8b:57:30:05:94:2e:f5:5f:b8:39:ed:f0:3c:59:
ac:04:78:52:90:6c:e4:02:5b:24:7b:4d:db:2e:70:3b:4e:23:
97:e5:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org