Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36332e302f32342d3234203d3e203432333636.roa
File: 39322e3131382e36332e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: ujLlvNUpKZ3RR/NnJw24pF84MnL9Ueuo2ugOhtviXCE=
Subject key identifier: CD:C3:9E:FE:CF:EC:B7:43:4B:B3:F3:7E:37:A8:EC:07:C5:8D:BF:9F
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 17AD4894FD615C8E7464EFED4897BC98721DA2F8
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36332e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:20:02 +0000
ROA not before: Mon 10 Apr 2023 08:15:02 +0000
ROA not after: Mon 08 Apr 2024 08:20:02 +0000
asID: 42366
IP address blocks: 92.118.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ad:48:94:fd:61:5c:8e:74:64:ef:ed:48:97:bc:98:72:1d:a2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:15:02 2023 GMT
Not After : Apr 8 08:20:02 2024 GMT
Subject: CN=CDC39EFECFECB7434BB3F37E37A8EC07C58DBF9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:22:b8:8b:f2:6f:1f:f1:5e:d7:5f:5f:bf:
2b:2e:9c:e7:52:06:62:0f:58:70:5f:b8:fc:a4:87:
08:d1:24:04:95:df:72:87:b9:03:50:e8:2b:62:1f:
b4:69:e0:27:c3:e7:29:49:6c:a1:3e:84:82:20:8e:
47:3e:07:c9:7c:61:df:0c:37:32:ca:a1:16:48:8a:
65:8e:48:5b:79:c7:20:e1:73:b7:ba:1e:55:67:29:
4d:cb:d9:6b:00:b9:08:15:1b:2b:9e:ed:13:ed:80:
1a:9a:e3:c1:eb:91:a7:56:2b:03:59:e8:73:3b:5e:
6e:39:e4:1b:bd:ba:ac:31:f9:d5:2a:8b:7f:ae:b4:
82:6a:15:d4:32:c5:71:3a:1c:6e:40:de:c0:72:9c:
fd:7b:51:c4:74:a3:26:00:16:52:f1:0a:d2:66:47:
53:42:a9:42:43:db:3e:4b:7d:cc:0c:38:f7:b4:56:
69:99:eb:ab:3b:e8:11:d9:89:94:ea:5f:2a:88:8f:
6a:a8:6e:70:ad:29:f3:43:8a:f1:72:96:fa:bc:89:
7d:f3:e0:0f:30:7d:98:88:09:27:9f:04:bf:80:00:
3c:64:aa:4a:24:db:e1:72:02:0b:71:2a:2d:eb:01:
db:fb:86:28:67:d1:79:62:23:1f:15:bb:b8:19:96:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C3:9E:FE:CF:EC:B7:43:4B:B3:F3:7E:37:A8:EC:07:C5:8D:BF:9F
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36332e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e5:7c:73:c4:3b:8b:6d:57:0b:a7:87:3f:64:a2:a5:30:2f:
a2:6b:e4:22:f7:5f:3a:f3:f7:c1:a3:d6:e9:d4:bd:dc:b7:0f:
bb:45:4b:57:b6:6d:59:70:4e:ce:f0:4c:25:9b:17:74:a0:2d:
94:d7:ce:9b:d0:3c:c8:34:4e:a3:64:24:85:66:51:1a:c4:70:
65:22:3a:b4:fe:f8:ca:a9:cf:8a:1b:38:b9:ec:42:fd:61:b8:
10:b5:44:78:cf:ff:43:30:ba:5f:69:d4:d1:0e:99:b2:a7:00:
1d:f1:42:9b:66:da:6a:f5:d2:1e:7a:cb:89:37:10:1e:b9:5b:
88:02:c0:67:a6:50:39:b1:bf:dd:73:f5:fd:37:f6:a6:ec:51:
a7:e1:30:f9:a0:2c:b4:5a:3d:4e:1b:c3:48:e7:91:7a:54:41:
75:96:b1:20:53:a6:91:7e:45:b4:9e:3e:f4:7e:df:42:f8:5b:
f6:97:90:49:f3:2a:86:8b:20:e8:cd:47:16:dc:a3:12:bd:c9:
a3:3d:3f:93:00:26:dd:c8:cc:c5:21:a0:b2:db:07:99:61:bf:
c9:6f:92:27:b5:1e:76:30:ef:b1:57:c5:47:da:03:9e:98:ce:
6f:e1:f2:9c:5d:a2:eb:97:25:99:b7:bc:04:e4:16:d7:74:0b:
45:df:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:52 2023 by rpki-client on console-ams.rpki-client.org