Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3132382e302f32312d3234203d3e20383334.roa
File: 3134302e3135302e3132382e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: rD1RHaEA4TSHCBW+W30S89tFPCHFhnFI156MMxlZhJI=
Subject key identifier: 02:BB:90:9A:F4:8C:40:45:23:97:6E:A5:8C:50:89:06:78:D2:35:28
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2E4599C971C72BBB2CA00C7DF7901095EB715D61
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3132382e302f32312d3234203d3e20383334.roa
Signing time: Mon 15 Jan 2024 00:00:09 +0000
ROA not before: Sun 14 Jan 2024 23:55:09 +0000
ROA not after: Mon 13 Jan 2025 00:00:09 +0000
asID: 834
IP address blocks: 140.150.128.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:45:99:c9:71:c7:2b:bb:2c:a0:0c:7d:f7:90:10:95:eb:71:5d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 14 23:55:09 2024 GMT
Not After : Jan 13 00:00:09 2025 GMT
Subject: CN=02BB909AF48C404523976EA58C50890678D23528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:0a:85:da:49:e4:01:52:c2:45:f5:aa:aa:
f6:ec:fc:d3:5d:59:49:da:54:ca:6b:54:19:ab:39:
cf:23:30:af:3b:57:48:fd:cf:41:82:d9:3c:89:7c:
08:50:ea:c9:19:90:26:a3:bb:97:38:9c:12:d9:9f:
9d:3c:c5:87:6e:68:2f:4b:a8:fe:30:8d:d5:44:54:
31:f5:f6:14:d9:62:62:80:f9:a0:15:7a:96:0d:db:
6a:34:75:11:2b:62:4b:65:5b:b7:b4:cf:dd:2a:54:
ea:14:b6:ca:73:6f:95:b4:50:49:cf:e3:2e:23:f8:
56:42:f5:25:3a:d8:d3:ac:27:bb:68:76:a6:bc:14:
01:48:cb:26:60:53:1d:0a:d1:64:eb:da:5f:bb:eb:
b8:69:20:5c:65:8c:11:49:43:f9:04:de:1b:f1:af:
3f:65:08:41:6a:40:9b:ae:71:3a:d4:61:8b:0b:44:
e0:6d:45:fc:8b:59:74:b9:15:a0:e8:d0:db:10:75:
39:2a:2c:ff:0c:2b:f4:f3:ae:cd:d2:5c:33:84:10:
6f:35:86:22:ac:1f:fa:d2:ab:b8:9d:6f:31:e3:08:
16:8f:a3:0f:a7:5c:8b:d1:b5:52:22:53:0b:c3:c0:
d2:c4:8c:35:15:b5:10:0e:b3:72:d4:01:43:24:66:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BB:90:9A:F4:8C:40:45:23:97:6E:A5:8C:50:89:06:78:D2:35:28
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3132382e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.128.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:15:52:0d:ee:bc:c3:ad:13:39:42:46:2b:81:3d:eb:f8:7e:
9a:11:73:a5:d5:90:e2:f7:6d:29:3a:b6:3a:20:6f:06:84:69:
96:33:33:7a:bc:b3:3c:c2:94:32:88:78:3e:39:b6:ce:8d:d9:
4b:94:4b:0a:5d:f8:ef:a4:00:0f:73:9d:53:77:44:19:3d:d1:
74:d7:a3:c9:80:8d:fc:b2:ec:69:7b:83:d2:07:24:75:6c:82:
71:bc:2b:2b:6d:f0:4e:d9:cd:5c:4f:36:c7:0c:ad:1d:ec:2b:
7b:95:a3:37:04:88:48:eb:17:32:4c:4e:98:59:db:b7:42:4a:
5b:1f:61:59:98:f5:9a:16:cf:ca:c9:b1:10:f7:63:01:af:6e:
7c:1c:fc:32:59:37:1b:31:8d:0e:ca:c8:4e:10:52:f8:69:37:
ca:35:5c:be:c5:7a:8a:01:e9:2a:6d:2d:a5:32:8f:47:d8:d3:
b2:0d:01:7b:b8:64:0b:94:06:d5:e9:a4:40:8c:04:07:ca:2d:
d3:99:83:bd:92:76:2b:84:47:fe:e2:f1:74:e1:ee:07:31:f0:
d9:be:52:55:35:d7:26:e5:46:ba:62:2d:d5:86:46:21:bd:55:
2e:28:c8:0a:ed:1f:17:fb:18:e5:67:65:e5:f7:0d:44:e6:63:
03:90:43:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org