Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e20383334.roa
File: 3139342e3135302e3230342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: t4hJJFqBB/fSkFXzyTiyj/jlANIuP48qPMrDNx6jwj0=
Subject key identifier: CF:87:73:4D:3E:9A:58:6B:DF:12:1F:FE:35:25:08:E6:6F:77:9A:37
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6DA78AB3543300A1C52D0B8996B07AF894B231F1
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e20383334.roa
Signing time: Fri 15 Mar 2024 00:02:08 +0000
ROA not before: Thu 14 Mar 2024 23:57:08 +0000
ROA not after: Fri 14 Mar 2025 00:02:08 +0000
asID: 834
IP address blocks: 194.150.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 04:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a7:8a:b3:54:33:00:a1:c5:2d:0b:89:96:b0:7a:f8:94:b2:31:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 14 23:57:08 2024 GMT
Not After : Mar 14 00:02:08 2025 GMT
Subject: CN=CF87734D3E9A586BDF121FFE352508E66F779A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:56:5e:3c:d3:17:4b:85:8e:2d:b3:a0:2f:
67:70:eb:3a:31:d9:76:93:15:ad:19:44:86:05:96:
98:07:9a:ad:21:e2:6f:44:85:64:ce:e6:93:0c:66:
b7:14:aa:82:dd:ce:41:ec:6d:e6:d2:b0:24:3b:a0:
5a:45:da:c3:38:88:c9:7e:54:6b:5e:f9:de:dd:20:
f8:38:85:27:d0:5f:60:23:b4:34:95:cc:c3:42:7d:
53:83:ce:a7:a9:c2:19:dc:e0:2b:f5:4c:1b:10:ef:
57:2f:43:2f:62:10:7d:2e:5f:84:ca:30:03:0b:52:
50:91:a2:0c:4c:2e:4b:7f:f5:e0:68:1c:e8:46:d4:
36:1b:13:ff:a0:aa:79:b2:ea:cb:a3:88:81:81:32:
45:38:1a:83:70:7e:6c:85:24:af:4e:c6:ed:a6:62:
b3:2a:dd:5a:c8:1d:1d:7b:ab:10:54:82:e4:53:0d:
b3:4f:2f:f2:86:8f:24:dd:d1:d3:15:9a:ee:ca:df:
9a:e8:40:c6:97:91:69:f9:88:cb:c6:42:df:f9:ae:
62:89:15:76:e4:d9:26:1b:32:55:57:68:e9:71:c0:
96:03:c2:be:af:3d:37:fa:36:7f:f9:f8:92:3c:c3:
e2:ab:b5:10:c6:bf:d3:15:d7:ae:fb:39:26:a0:58:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:87:73:4D:3E:9A:58:6B:DF:12:1F:FE:35:25:08:E6:6F:77:9A:37
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.204.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:77:b2:96:aa:46:8c:29:7f:19:0d:cb:6e:eb:ce:59:5a:79:
55:e7:de:66:6d:95:9a:72:b6:41:5d:58:a3:d5:5e:4d:ae:7e:
ff:ad:aa:57:77:95:37:f5:28:74:6f:43:9d:d3:a6:4b:cc:61:
c5:06:e0:fc:10:86:90:08:87:49:97:5d:7d:58:df:01:14:b9:
dc:bd:58:cf:51:43:0f:8a:ae:f9:d0:ae:e1:02:33:0a:34:fc:
f3:05:31:32:25:0d:4b:ba:70:33:0d:2d:45:26:b2:0e:25:4c:
3f:3c:58:69:12:15:9e:65:61:c5:26:17:85:54:31:ad:28:0d:
8c:bf:3c:94:42:dc:8f:8c:ac:e8:ed:12:22:20:7a:c4:b3:fb:
96:53:6f:4c:15:6a:0f:c3:36:39:94:0f:0a:ed:05:e1:7b:e6:
e5:26:1f:2a:fe:f0:b2:18:a6:58:70:63:0c:29:6c:2d:72:6f:
83:40:81:28:a2:78:20:38:ce:89:77:1d:09:11:b8:5c:80:1e:
dd:a6:8e:58:79:db:ab:57:5f:77:33:d6:a1:3c:b4:75:4a:ce:
3f:8a:01:07:8c:11:90:c0:da:3d:9c:c0:dc:db:85:9c:51:6f:
52:06:3d:ee:84:27:32:48:71:92:b0:f5:f2:65:9e:64:40:59:
35:3b:32:46
-----BEGIN CERTIFICATE-----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Generated at Thu Apr 18 04:34:27 2024 by rpki-client on console-fra.rpki-client.org