Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3134342e302f32312d3234203d3e203231383539.roa
File: 3134302e3135302e3134342e302f32312d3234203d3e203231383539.roa (raw, json)
Hash identifier: Ms4GoLKvUBAqOCAUDtoO17b/S3qNejmnQTV7ZvGEsxU=
Subject key identifier: 8B:B3:79:21:CA:D8:43:33:B8:27:09:67:41:E8:C6:5D:05:4E:A6:66
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 414EA94B827D2AB1A803833AC47E33D9624F9171
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3134342e302f32312d3234203d3e203231383539.roa
Signing time: Mon 08 Jan 2024 04:41:09 +0000
ROA not before: Mon 08 Jan 2024 04:36:09 +0000
ROA not after: Mon 06 Jan 2025 04:41:09 +0000
asID: 21859
IP address blocks: 140.150.144.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4e:a9:4b:82:7d:2a:b1:a8:03:83:3a:c4:7e:33:d9:62:4f:91:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 8 04:36:09 2024 GMT
Not After : Jan 6 04:41:09 2025 GMT
Subject: CN=8BB37921CAD84333B827096741E8C65D054EA666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:45:26:6c:e9:35:f9:99:04:c8:51:71:df:
e8:7d:be:89:16:c7:b7:04:3b:e8:16:43:82:64:ea:
18:31:b5:e7:e6:c4:b3:4a:08:18:ef:f6:a3:73:d2:
3a:7c:05:3b:3b:72:15:96:31:e9:b1:4f:46:e3:53:
d0:b5:a1:f8:02:ad:cc:c8:e4:79:9a:10:bd:9b:32:
67:6a:43:9f:eb:66:54:9c:29:f3:7b:ae:03:f5:5b:
4b:74:05:70:d2:bc:43:7c:34:0f:d9:90:ea:52:cb:
ae:88:86:ca:ad:6b:0d:20:91:ea:2f:9d:75:d7:b6:
a6:bb:ee:c0:ad:4a:14:6d:89:98:c7:95:46:74:3c:
05:bb:b1:58:d7:ef:a0:83:cd:a7:6e:80:07:72:7d:
24:c7:d0:ba:36:4f:92:fd:86:8b:86:88:38:fa:05:
06:df:86:7a:33:82:a6:e6:01:0a:03:dd:ec:bf:72:
56:2f:1a:d2:b1:5a:0e:73:7d:fb:98:8c:d4:f8:1c:
be:ed:65:bc:1c:52:78:cc:b6:13:cd:f7:d2:17:97:
be:7e:42:d8:c0:30:2c:cf:bf:cd:09:d6:31:e6:60:
a8:0c:92:b2:e4:4b:37:d8:33:fb:3e:37:49:49:d0:
0a:d2:ed:f6:5d:2e:88:e5:b8:ed:5b:73:7d:77:42:
f3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B3:79:21:CA:D8:43:33:B8:27:09:67:41:E8:C6:5D:05:4E:A6:66
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3134342e302f32312d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.144.0/21
Signature Algorithm: sha256WithRSAEncryption
93:13:46:82:22:12:46:16:65:e0:53:47:b3:82:e3:96:d5:b8:
ce:9e:c3:36:44:76:78:55:4e:05:33:66:b4:7a:6a:f6:fa:37:
81:24:2c:83:c6:78:60:7b:44:a3:6b:3e:ff:2d:09:a5:cd:40:
6b:8f:1e:88:3f:09:27:20:b5:52:da:8a:52:08:f4:a3:b0:6d:
d8:69:34:a3:a8:f9:5c:88:ed:3b:1f:9a:1a:90:62:95:a5:32:
c4:9d:fd:9e:6c:27:f4:4e:d9:b7:52:fd:b5:f5:42:e9:8a:88:
16:3f:a2:fb:43:b1:71:da:72:a1:56:2e:82:81:e9:01:f6:84:
0f:31:43:9f:cc:95:a6:e7:51:95:71:fb:dd:fc:f5:25:1d:0d:
7f:e1:12:c3:d1:ad:a7:52:32:25:93:62:92:ee:88:c5:c1:bd:
aa:12:4d:bc:a0:15:b6:97:84:c6:f7:17:0b:77:a3:fd:79:cf:
71:d6:21:8a:89:e1:67:af:54:03:91:f9:48:de:15:79:f1:03:
14:e3:9a:80:e8:6c:fa:51:b5:8a:fc:83:24:14:0f:41:72:b0:
12:fc:3b:38:75:9e:58:af:82:f4:f5:db:bf:0d:77:0e:21:34:
f7:23:d8:1e:17:ff:23:b1:af:db:4b:9b:6b:98:cd:b6:2f:8b:
1c:1f:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org