Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3232342e302f32322d3234203d3e203436343530.roa
File: 3134302e3135302e3232342e302f32322d3234203d3e203436343530.roa (raw, json)
Hash identifier: eM8asyzshkY6xSYy+FIfk0aQvgEzOKWPB/1wOnHeTrI=
Subject key identifier: 18:A4:58:6C:5A:3D:46:89:03:C8:49:C7:3D:5C:13:62:D1:90:BF:B3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5D6DEBB2411CF9BCEF3E826B7D058442BABF8C2C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3232342e302f32322d3234203d3e203436343530.roa
Signing time: Mon 01 Jan 2024 18:08:12 +0000
ROA not before: Mon 01 Jan 2024 18:03:12 +0000
ROA not after: Mon 30 Dec 2024 18:08:12 +0000
asID: 46450
IP address blocks: 140.150.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:6d:eb:b2:41:1c:f9:bc:ef:3e:82:6b:7d:05:84:42:ba:bf:8c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 1 18:03:12 2024 GMT
Not After : Dec 30 18:08:12 2024 GMT
Subject: CN=18A4586C5A3D468903C849C73D5C1362D190BFB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:4a:74:5d:1b:8c:51:ba:66:84:e1:0e:02:
43:a8:e7:64:43:89:68:77:09:ab:94:ae:e2:69:2d:
dd:19:83:7b:3c:88:e6:2d:69:b3:a3:1b:d7:ab:e4:
08:f4:de:ab:d8:8e:24:8d:bf:cb:8a:87:18:e4:e4:
1f:59:46:78:2e:d6:51:a9:0e:79:90:91:59:b9:86:
f9:87:fc:2e:20:37:12:d6:2b:02:ad:49:95:df:cd:
d7:13:48:b6:9f:3a:c5:36:7e:8a:da:cd:55:d9:d9:
1b:e0:cc:78:e9:e0:bc:64:88:9d:eb:d9:20:3c:d5:
c3:fe:d2:66:0e:7f:48:c8:19:bd:b0:ec:e2:80:1d:
00:d1:37:39:a2:1c:ea:77:b0:7c:ed:a1:52:b0:56:
e4:3b:49:0c:72:5b:8e:3b:1e:c9:e3:2e:71:88:e4:
6c:44:fd:f3:b3:14:79:e7:90:be:48:46:ef:94:e9:
34:f4:71:07:ad:b9:88:6b:c3:9d:dc:60:49:ab:ca:
be:3c:62:f9:4d:2a:50:9c:6a:e0:90:e5:4b:32:1a:
e2:7b:c5:87:29:89:bf:89:de:95:f3:7a:81:fe:e8:
2a:33:46:bb:52:29:ff:6c:c4:fe:64:e6:01:e8:e2:
ff:03:56:34:7d:8e:1c:69:35:c6:59:90:82:42:a3:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A4:58:6C:5A:3D:46:89:03:C8:49:C7:3D:5C:13:62:D1:90:BF:B3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3232342e302f32322d3234203d3e203436343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.224.0/22
Signature Algorithm: sha256WithRSAEncryption
83:e5:8e:8a:a3:a2:62:0e:d8:48:86:14:ff:d1:3b:93:1d:40:
e8:2d:78:e5:e6:37:98:c5:e0:1f:bc:03:06:67:11:a2:ca:7b:
2f:f9:15:db:da:3a:55:58:49:4f:0f:b4:e8:76:3f:22:cb:f8:
02:3d:09:e6:36:65:e8:3e:f3:e9:bd:91:90:c6:a5:e1:09:81:
c7:cd:74:cf:db:65:40:69:3a:32:c7:2e:1b:b8:4e:c3:00:31:
6f:ba:46:c6:b3:5d:cd:5c:d4:a1:0c:14:91:33:3b:fe:80:d5:
26:32:42:02:49:ea:5f:a0:f2:4f:08:d0:88:af:36:ac:9c:fa:
73:44:44:44:63:b0:60:89:75:67:12:25:87:37:2e:9d:46:dd:
8a:7b:70:57:53:a8:de:65:d0:5d:5f:ef:17:b8:cc:7b:a2:9c:
7e:f2:24:c2:d0:ae:46:9e:e5:34:15:e9:c7:f5:fe:cf:be:4d:
ca:26:71:ca:52:80:74:6b:8b:5a:cd:d8:0c:54:f9:8e:b8:e4:
00:58:dd:08:7d:c2:ac:ba:d9:6c:74:d2:a4:28:4f:9b:97:7b:
3f:bf:95:6d:8b:28:34:10:ad:54:8d:32:46:5a:3d:2b:3c:f6:
23:ff:6a:9b:3e:88:dc:77:24:9e:5d:60:ee:cf:86:57:e2:dc:
75:f5:fa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org