Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3134342e302f32312d3231203d3e203236353438.roa
File: 3134302e3135302e3134342e302f32312d3231203d3e203236353438.roa (raw, json)
Hash identifier: 35f/O8x+md2qIT/IxdGcCgbwffSr7DgdmWjR+s8yv7w=
Subject key identifier: 5F:0E:7D:7E:2E:15:9D:C0:5C:00:E5:10:FF:BE:F2:EB:E3:BB:72:13
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 05DA5C133BFAA8C7400FB8246EF5C743679EF1B2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3134342e302f32312d3231203d3e203236353438.roa
Signing time: Wed 06 Mar 2024 17:13:21 +0000
ROA not before: Wed 06 Mar 2024 17:08:21 +0000
ROA not after: Wed 05 Mar 2025 17:13:21 +0000
asID: 26548
IP address blocks: 140.150.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:da:5c:13:3b:fa:a8:c7:40:0f:b8:24:6e:f5:c7:43:67:9e:f1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 6 17:08:21 2024 GMT
Not After : Mar 5 17:13:21 2025 GMT
Subject: CN=5F0E7D7E2E159DC05C00E510FFBEF2EBE3BB7213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:dd:ad:c6:2d:bb:3b:8b:d5:51:ca:4e:6c:
45:21:98:91:4d:a1:ad:6a:b8:f2:5e:2c:1c:19:a1:
79:11:7f:92:0b:26:72:f9:09:12:df:80:fe:ce:13:
26:60:a1:b6:8d:27:fa:60:67:3e:13:1d:e5:60:72:
63:d9:de:5e:0a:bf:93:80:a6:70:d4:98:55:ef:73:
d8:e9:13:d8:7b:1c:9a:01:83:06:06:6b:82:8a:c6:
18:8f:83:44:60:5b:2e:13:54:94:b6:c7:57:a4:b1:
d7:c3:38:e2:e7:34:e5:c8:c1:24:a4:02:ed:9a:88:
2c:8d:e5:a4:91:6d:30:98:a6:a7:8d:3f:01:7a:3d:
0f:ea:15:fc:8b:a7:c6:e8:40:8d:26:c3:fc:25:e9:
68:5f:88:be:57:b0:4f:e1:e1:90:be:95:39:68:b7:
c4:c0:09:d7:99:55:21:23:5b:7a:44:ec:b1:ab:57:
b0:e4:51:f3:fe:91:a3:36:36:f9:d5:d1:51:67:e5:
0d:88:f4:9a:0b:a6:1d:45:50:ed:61:cf:6f:42:67:
98:9b:5a:e5:ff:aa:bc:a2:5c:7a:03:a4:f1:9f:00:
2b:1c:3d:8d:b3:5c:56:d3:c5:1c:78:05:23:b2:fb:
25:79:f3:39:10:15:9f:7c:40:14:8a:94:38:ae:00:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0E:7D:7E:2E:15:9D:C0:5C:00:E5:10:FF:BE:F2:EB:E3:BB:72:13
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3134342e302f32312d3231203d3e203236353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.144.0/21
Signature Algorithm: sha256WithRSAEncryption
73:00:5b:c6:34:57:c0:fa:0e:b5:ae:22:7d:96:eb:e9:2f:b8:
c6:18:aa:37:75:92:86:18:31:87:d9:f1:80:82:98:38:2a:e8:
3a:5c:4b:a2:c3:43:16:b8:db:c7:f7:97:d8:37:b5:29:1c:98:
db:00:85:67:72:77:1e:a0:d9:94:3e:7b:ab:35:ab:69:09:24:
98:0a:fd:d1:49:79:20:13:e3:17:cf:b2:c4:b0:84:88:c2:bd:
83:f3:42:c6:85:9b:70:21:a8:14:02:8e:93:c6:72:71:9a:2b:
6b:d4:d8:1f:cf:bd:16:8e:3d:ab:fa:cd:2f:e7:60:9a:14:e8:
1a:85:65:5a:aa:26:12:40:5d:6e:df:3d:6e:f4:2f:f9:7c:06:
35:2f:5d:8d:21:73:3a:71:c3:cf:b8:02:e6:24:b7:16:06:2a:
91:9e:11:d0:95:1f:b5:8c:30:4f:87:ee:e5:a5:46:63:48:34:
3e:73:fd:a8:43:e4:eb:06:41:92:9f:f2:a5:34:52:6c:53:88:
f5:00:57:4d:85:dd:b7:7b:80:af:bd:be:77:52:fb:36:88:f2:
45:5b:75:20:f0:52:59:c5:65:43:75:86:4e:64:45:8f:97:0a:
24:05:dd:b5:8f:aa:6c:ab:61:1c:f1:4e:fc:e4:cd:19:5b:db:
a4:08:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org