Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3137362e302f32312d3234203d3e20383334.roa
File: 3134302e3135302e3137362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: 9GN6rOlNbTcUcz6AksNM0GGGbXqIMSGJTaQ/HugUlag=
Subject key identifier: 5D:8B:39:11:1D:2A:1D:AF:08:46:CE:FA:E6:30:32:3B:D8:72:22:FE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7513F2C2F4106626382848750C3FB74655DDF9F7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3137362e302f32312d3234203d3e20383334.roa
Signing time: Mon 15 Jan 2024 00:00:09 +0000
ROA not before: Sun 14 Jan 2024 23:55:09 +0000
ROA not after: Mon 13 Jan 2025 00:00:09 +0000
asID: 834
IP address blocks: 140.150.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 17:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:13:f2:c2:f4:10:66:26:38:28:48:75:0c:3f:b7:46:55:dd:f9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 14 23:55:09 2024 GMT
Not After : Jan 13 00:00:09 2025 GMT
Subject: CN=5D8B39111D2A1DAF0846CEFAE630323BD87222FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:12:cf:65:7b:21:1c:d7:ba:ba:15:8b:8b:
8c:cc:81:ce:9c:73:71:49:5c:da:14:d6:26:7b:b5:
62:76:76:f7:f6:de:c8:6b:0d:e0:ef:46:f1:d6:28:
06:7f:23:e3:fe:eb:95:12:59:bd:cd:b6:c2:c0:8d:
7d:a6:ec:63:f6:23:1d:8e:95:3c:2b:af:a0:bf:4c:
59:86:12:d3:ee:2e:83:56:a4:36:55:81:b3:97:3f:
c1:8a:85:9c:f9:3e:3b:24:99:d3:b7:e1:ee:fd:95:
d9:6c:24:e5:f1:5a:8c:0e:76:58:5e:9b:47:55:9c:
53:af:e0:c9:b2:2e:f1:55:00:83:ce:f7:f7:13:25:
7d:56:d5:cd:e7:74:ea:f7:90:74:32:7e:87:b5:7d:
54:1a:24:c1:43:97:57:20:2a:64:4f:8a:a1:3c:14:
b4:f5:d6:41:87:0c:a2:92:71:27:f4:9d:3d:68:a1:
e6:8b:35:b3:2a:de:4f:f4:4f:d2:95:d6:8c:da:4b:
63:bc:53:6f:e3:a6:3f:bf:5d:94:8f:1d:29:84:19:
dc:17:b2:ef:a8:ea:f3:db:ea:69:8e:ee:06:58:2b:
ae:5f:74:59:53:a6:7e:86:df:76:50:86:9f:8e:57:
5d:5f:13:a5:38:55:5e:27:d4:02:ee:ad:0e:09:14:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8B:39:11:1D:2A:1D:AF:08:46:CE:FA:E6:30:32:3B:D8:72:22:FE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3137362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.176.0/21
Signature Algorithm: sha256WithRSAEncryption
56:cc:1b:87:b1:83:19:8a:65:65:39:b1:81:61:f2:74:ec:1a:
c9:c7:da:49:a5:c7:9c:89:a3:93:71:eb:42:73:6e:ae:f3:af:
af:0c:e6:57:16:68:24:06:00:d8:20:6b:c0:41:eb:16:4a:44:
b7:b6:db:7b:a9:83:f1:a8:51:b7:18:0d:e7:0f:1e:ac:48:11:
3b:ab:fb:76:a1:58:f2:2c:2c:32:4a:a4:fd:c8:96:9a:03:1b:
6c:3c:c6:b9:ed:40:dc:d6:bb:63:47:e5:0a:17:99:d7:d9:0b:
96:0a:cd:4c:e1:8d:1b:4e:2f:2b:2a:73:cc:78:f3:80:19:b4:
fc:a6:7e:e4:99:ec:d4:71:7f:d7:ff:0d:a1:29:78:d8:c9:34:
78:de:06:01:5f:e5:f2:95:e2:73:37:aa:79:3d:57:2c:71:51:
4d:ea:b0:04:76:2d:c1:a1:d2:7a:cd:ca:9a:49:96:c2:61:a8:
47:37:b3:47:39:81:38:c7:60:86:cf:86:70:52:92:59:91:65:
e9:b0:f7:d8:fc:b9:46:60:5b:89:bc:4b:4f:5d:0d:db:38:6a:
27:7b:ea:0c:4f:fa:b0:ca:19:d3:1a:65:ea:22:88:7d:be:b1:
eb:8d:92:f0:97:66:72:68:f4:14:27:94:7d:ec:f2:8d:23:02:
00:fc:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org