Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3132382e302f32312d3231203d3e203236353438.roa
File: 3134302e3135302e3132382e302f32312d3231203d3e203236353438.roa (raw, json)
Hash identifier: 4jGt96/yFVDObK0T+HqtVdfbacnmHe7lmPMtIYvgWa4=
Subject key identifier: 6C:BE:AF:40:E0:C6:92:3D:B3:B5:F3:BD:5E:38:88:66:D3:BE:1A:25
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 659B2C1BE657DFF7812E2048D88FADC2659074EC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3132382e302f32312d3231203d3e203236353438.roa
Signing time: Wed 06 Mar 2024 17:13:22 +0000
ROA not before: Wed 06 Mar 2024 17:08:22 +0000
ROA not after: Wed 05 Mar 2025 17:13:22 +0000
asID: 26548
IP address blocks: 140.150.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9b:2c:1b:e6:57:df:f7:81:2e:20:48:d8:8f:ad:c2:65:90:74:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 6 17:08:22 2024 GMT
Not After : Mar 5 17:13:22 2025 GMT
Subject: CN=6CBEAF40E0C6923DB3B5F3BD5E388866D3BE1A25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0f:76:6e:20:d4:05:3a:1d:ca:a3:0b:97:d7:
4b:8f:93:bd:28:96:15:9d:76:20:65:a4:50:39:7a:
a6:e2:1a:36:b0:1e:6c:90:70:38:76:b6:b1:1a:7f:
32:ac:55:6e:12:db:63:5a:84:55:23:45:a6:82:f7:
d0:e6:9c:24:c9:96:e4:11:b5:43:3a:2e:0f:08:89:
dd:a5:d2:e9:36:65:1c:b0:2d:62:f7:58:f9:94:60:
c4:65:56:0d:23:67:f6:f0:7a:47:be:f0:a9:a7:0b:
25:dd:fa:5e:08:1f:81:08:4b:f5:a1:ca:66:59:17:
c2:78:a5:9d:5a:55:9b:8c:19:d1:20:d3:a4:9b:2f:
88:a9:ca:09:7e:52:da:7f:f8:c1:d4:f1:c7:af:fd:
be:f7:f5:b2:8b:c4:98:40:ba:24:c8:2d:6f:aa:30:
2a:a3:8e:55:c4:1e:9b:4b:fb:5d:c8:45:9f:c6:fb:
3a:da:3e:c4:ab:74:7b:7f:33:2c:04:cd:3b:d6:84:
be:ed:34:73:89:b2:ab:28:ec:f6:6e:12:00:f2:65:
2f:4f:68:4d:6a:bc:b0:5d:72:27:f8:e5:22:df:8f:
4a:0d:d9:ba:6f:1d:e1:20:3f:89:cb:39:ba:99:25:
84:06:b9:56:77:a7:01:74:c6:6f:04:51:64:eb:1b:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BE:AF:40:E0:C6:92:3D:B3:B5:F3:BD:5E:38:88:66:D3:BE:1A:25
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3132382e302f32312d3231203d3e203236353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.128.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:75:3d:3b:83:e9:44:ca:dc:de:be:d3:32:00:20:d7:bc:84:
f3:0d:66:71:06:b8:e7:78:c6:93:16:b8:fc:1e:06:14:8c:a4:
02:77:24:0c:3c:f6:e8:c7:1e:fa:77:0a:f5:99:99:85:f6:3c:
09:e1:7f:99:b1:c5:96:fe:ee:9c:c2:58:b3:b4:1b:85:24:f4:
36:a2:87:ee:06:a0:5c:a7:3b:5a:d0:0f:8a:99:b5:95:c5:0d:
9c:cc:b0:c6:d2:b9:76:b3:77:62:e0:d6:cd:5c:b8:01:7c:ed:
8b:e9:44:22:39:9e:cc:68:8f:67:7c:ae:84:65:39:50:f7:98:
c5:75:19:ec:ee:8c:25:fd:65:63:83:fd:94:b9:ce:63:9e:da:
6a:dd:91:1e:98:a5:64:09:a1:f7:c3:ef:b2:61:a9:d0:50:bc:
cf:71:3a:c9:6a:7c:c8:d6:1c:84:79:98:77:60:eb:91:29:c7:
be:8f:65:fa:bc:76:37:15:57:ba:cc:d3:24:cd:80:af:c5:27:
23:1d:58:9f:c4:89:88:83:6a:eb:4f:44:08:11:df:e0:b4:3f:
8d:6f:99:02:23:54:1e:ec:64:fc:dd:bd:8a:1e:5c:a1:dd:95:
fc:c3:aa:be:ec:64:5e:59:52:71:bc:92:c4:35:8f:26:ea:56:
04:49:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org