Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e38362e302f32342d3234203d3e20323031353735.roa
File: 3134362e31392e38362e302f32342d3234203d3e20323031353735.roa (raw, json)
Hash identifier: Ts8SMibqrdo6oK9S9lTkUfKi+wOX0cAEyYImZjWD8Ss=
Subject key identifier: 46:56:33:D2:25:6E:2D:4C:7B:DC:17:CD:A4:53:54:9E:10:B6:76:96
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6751F7276F328E3A72EFA86657B7F6330FA828B3
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e38362e302f32342d3234203d3e20323031353735.roa
Signing time: Mon 22 Jan 2024 07:41:27 +0000
ROA not before: Mon 22 Jan 2024 07:36:27 +0000
ROA not after: Mon 20 Jan 2025 07:41:27 +0000
asID: 201575
IP address blocks: 146.19.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 12:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:51:f7:27:6f:32:8e:3a:72:ef:a8:66:57:b7:f6:33:0f:a8:28:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jan 22 07:36:27 2024 GMT
Not After : Jan 20 07:41:27 2025 GMT
Subject: CN=465633D2256E2D4C7BDC17CDA453549E10B67696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:de:c7:15:13:eb:16:12:55:6b:d0:b7:82:
e0:24:f4:4c:02:56:d6:ef:9d:7d:3e:f6:32:e7:14:
0c:72:03:dc:78:02:02:9c:5f:b8:ae:45:0d:86:4a:
59:36:04:77:7a:30:bb:0a:9d:f2:d0:d7:88:07:bf:
37:5e:2a:62:19:90:8a:e8:1e:6d:2d:d7:64:89:90:
3c:5b:72:bc:ff:86:e6:78:be:ff:4e:fc:a2:d0:b8:
56:9d:ad:54:d8:c8:54:92:00:87:68:c3:1e:e9:10:
db:09:30:52:6d:90:44:d0:84:eb:ad:18:7a:42:27:
01:58:c3:0f:30:10:5c:6c:84:3f:61:ac:b4:17:0e:
0b:c1:65:b1:46:4c:24:95:fb:02:1b:c4:24:0c:70:
f9:df:fc:e3:4e:58:29:bd:fd:1b:56:f5:2f:56:c2:
e2:77:37:85:32:dd:66:39:73:29:fc:86:ac:83:74:
12:a2:ba:06:63:ed:77:fc:6d:f8:c8:17:3b:61:53:
85:94:e3:5c:d9:c9:52:2d:7b:58:ac:56:43:2d:fa:
d3:8b:32:3f:79:6e:3d:47:3b:b1:ad:21:8f:47:99:
da:0d:32:69:83:3b:fa:4a:22:a5:43:40:65:78:a0:
ca:80:a3:1d:0a:5c:3f:3f:fe:b9:2e:45:27:e8:79:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:33:D2:25:6E:2D:4C:7B:DC:17:CD:A4:53:54:9E:10:B6:76:96
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e38362e302f32342d3234203d3e20323031353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.86.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e3:c3:be:f5:ba:a1:23:ca:bd:a4:58:a2:72:c8:83:e0:29:
64:be:d2:79:49:bd:a3:ac:c0:be:d4:e5:5f:db:4e:f1:20:3a:
ed:86:d9:90:ba:a9:0e:32:14:0a:c9:ae:4a:92:cb:22:d2:fe:
80:75:ad:8c:1d:12:a2:5e:8b:81:33:2b:d5:09:e1:d6:ba:4a:
ae:4a:02:0b:2d:1e:d3:48:cb:ed:3d:38:e6:71:8c:75:df:b5:
ba:34:65:3f:fe:63:93:c6:65:e6:18:96:72:d3:92:07:1a:98:
5d:c3:b6:4c:17:ca:32:26:fe:fe:36:de:99:56:c5:33:f7:59:
f1:a3:39:c7:27:98:b4:1b:43:36:15:39:da:78:08:b8:70:b0:
a0:60:51:a4:35:86:2b:9b:5c:75:41:74:57:7a:0c:e4:05:15:
e9:1c:c8:30:36:5e:db:e3:aa:ff:76:36:f0:3a:e9:83:f2:fb:
6f:17:ca:5a:cc:61:3a:6c:60:80:78:13:4e:29:6b:f4:72:65:
7e:b7:01:aa:ab:ba:57:49:d2:f9:91:a0:7e:fa:92:33:f1:81:
b3:f5:5a:7f:72:26:1a:47:60:79:8d:ac:96:90:d3:48:f7:d8:
c2:8c:fd:ce:26:cd:67:af:0f:64:70:1e:9d:bc:15:3d:6f:d4:
8b:d3:a2:7c
-----BEGIN CERTIFICATE-----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Generated at Tue Jan 23 17:52:33 2024 by rpki-client on console-ams.rpki-client.org