Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3232342e302f32322d3234203d3e20383334.roa
File: 3134302e3135302e3232342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: ac1VpVSQ20QHJfjVNTjbFvzyw1foPcpDn79JHl9AUNg=
Subject key identifier: C5:5C:21:54:96:F4:11:AE:5E:68:C4:CE:80:CC:BC:09:21:B9:79:E4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1E0298B7AC32FE9CDDEECDEDFCCC096D2AE8E49D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3232342e302f32322d3234203d3e20383334.roa
Signing time: Thu 04 Apr 2024 00:01:01 +0000
ROA not before: Wed 03 Apr 2024 23:56:01 +0000
ROA not after: Thu 03 Apr 2025 00:01:01 +0000
asID: 834
IP address blocks: 140.150.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:02:98:b7:ac:32:fe:9c:dd:ee:cd:ed:fc:cc:09:6d:2a:e8:e4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 3 23:56:01 2024 GMT
Not After : Apr 3 00:01:01 2025 GMT
Subject: CN=C55C215496F411AE5E68C4CE80CCBC0921B979E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:65:09:af:bc:52:20:ab:08:3c:d9:45:b2:
e4:c6:6e:11:ce:db:ef:fe:fa:4f:39:7c:f0:e2:eb:
78:91:b8:f0:38:de:16:8f:a0:33:57:f2:9b:75:2f:
c7:9f:37:73:46:91:c9:2a:ce:a6:0f:5a:70:6c:fa:
cf:aa:be:91:19:08:52:ce:23:84:b2:91:3b:68:d4:
55:c2:37:ed:a7:a8:de:4d:95:81:ee:24:69:07:15:
69:65:21:82:f6:40:ea:d3:f9:03:f3:a7:51:f5:4d:
85:33:36:08:9d:de:4b:2a:eb:a3:87:11:2e:c5:4f:
b4:c0:94:f6:2b:f3:3c:ba:6d:2a:31:46:d2:98:cf:
4e:d3:c8:fe:2c:e1:a8:03:29:26:41:35:95:4d:18:
04:8a:c9:64:16:26:e7:77:b3:8c:21:7a:c9:d1:57:
36:2f:d8:7e:cf:a5:9f:c3:9d:4c:18:de:b8:06:66:
23:dc:e8:97:07:64:79:ee:62:90:85:09:3a:f5:28:
c0:31:7f:24:c4:e2:82:f0:f1:9b:1b:84:50:a4:f7:
6f:ff:7b:3a:c6:81:79:e9:7b:0e:53:21:5c:c7:b5:
af:55:48:c7:69:8d:b2:6d:e2:5e:a1:af:c1:00:c6:
61:d4:af:eb:42:8f:6e:1b:5a:4c:e7:22:4d:81:40:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5C:21:54:96:F4:11:AE:5E:68:C4:CE:80:CC:BC:09:21:B9:79:E4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3232342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.224.0/22
Signature Algorithm: sha256WithRSAEncryption
67:6d:48:70:91:1b:59:23:c3:93:3c:49:c9:44:15:77:dd:07:
2c:c0:17:4c:60:e2:72:6d:91:76:a5:08:ec:9f:76:4d:74:95:
f5:74:56:17:f6:de:5b:94:5c:6d:40:9f:ea:74:e9:d0:95:84:
6f:b9:96:17:67:d0:b8:01:d7:4d:a0:56:9f:3d:4a:cf:77:e5:
f3:89:19:f5:56:22:63:05:c4:36:5b:ec:d2:23:7f:b5:f3:a9:
59:38:7a:64:cb:51:74:6c:a8:89:8b:fe:2e:4f:b9:4c:df:13:
60:cd:4b:38:6f:bb:2c:3f:d9:e4:23:1d:db:18:1e:f3:25:db:
89:bf:02:1f:43:27:7e:a2:39:a0:40:ec:1e:15:ad:9e:62:d6:
4b:78:0b:77:98:7a:b7:55:ee:9b:8f:b2:02:44:60:06:c9:95:
05:dc:3c:93:92:0f:03:9a:6e:7d:de:dd:01:14:f6:b4:a1:cb:
5f:d3:07:c6:39:47:ee:b2:7a:8c:51:71:da:85:6c:2d:c6:a4:
75:b1:4c:6d:e0:6f:1f:45:fc:46:78:19:c9:43:54:0a:f1:0a:
98:04:d4:de:80:4d:5e:cb:85:f0:e8:c5:1d:3d:0f:e7:35:70:
32:09:f1:16:28:89:26:4e:c8:d4:a6:b6:a9:36:56:4c:0e:b0:
fa:0e:dd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org