Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3232203d3e20323132323338.roa
File: 3134302e3135302e3233362e302f32322d3232203d3e20323132323338.roa (raw, json)
Hash identifier: /dQfV9Pxl9yM6TjjT0K81gBLvF4Z47yZ5JeolY4plbg=
Subject key identifier: 1F:5A:1E:E3:FD:54:60:88:43:79:92:06:DF:ED:DA:8B:7D:F6:DD:41
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4EE32B9C01324BF538D3C30A0F5E006BD04F7745
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3232203d3e20323132323338.roa
Signing time: Tue 07 Nov 2023 05:39:57 +0000
ROA not before: Tue 07 Nov 2023 05:34:57 +0000
ROA not after: Tue 05 Nov 2024 05:39:57 +0000
asID: 212238
IP address blocks: 140.150.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 07 Feb 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e3:2b:9c:01:32:4b:f5:38:d3:c3:0a:0f:5e:00:6b:d0:4f:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 7 05:34:57 2023 GMT
Not After : Nov 5 05:39:57 2024 GMT
Subject: CN=1F5A1EE3FD54608843799206DFEDDA8B7DF6DD41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:a9:ff:1a:a1:c7:12:ac:3a:df:21:e5:15:
83:98:14:03:8a:87:07:63:18:78:b6:8b:ce:15:9f:
b8:57:9e:63:6c:07:a3:26:24:f4:ce:c6:9e:88:c8:
53:48:c6:22:19:30:23:d8:ab:99:f1:e5:a6:fb:bb:
27:32:f5:06:f6:53:5a:b4:47:d5:e0:58:9f:bf:3c:
16:ad:8b:4d:b9:ff:64:74:b0:9b:c3:ec:3e:4b:ee:
16:d8:df:45:dc:5f:bb:17:4c:59:62:06:21:97:07:
66:a7:01:6a:cf:74:9a:3d:a2:1c:a9:1f:2d:6b:7b:
1f:f0:47:38:b3:82:2a:b8:f6:31:e0:e7:cb:f7:cc:
b2:f8:2e:16:ed:8a:9c:b2:3b:ce:4a:d7:38:52:16:
2a:f5:26:66:8e:1e:06:bd:00:7c:22:a0:f0:4c:96:
1c:3d:22:55:a5:be:c5:fb:bf:36:b8:28:eb:a8:ea:
d8:82:06:e8:8d:ee:a5:30:a9:cc:22:53:4b:d1:5d:
43:b5:e7:9c:c7:62:89:f2:09:1f:d8:de:67:ba:13:
31:06:72:42:35:2f:63:0c:f8:00:5a:05:88:9f:06:
53:56:97:64:ef:fb:5e:7e:42:8b:79:c6:d8:5f:ba:
0c:e5:da:26:16:df:ca:f0:d1:54:af:58:bf:43:4a:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5A:1E:E3:FD:54:60:88:43:79:92:06:DF:ED:DA:8B:7D:F6:DD:41
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3232203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:ec:de:05:cc:a3:98:aa:a7:83:c9:c1:5c:0a:0a:25:48:07:
a0:60:3f:60:a9:5d:56:ca:fe:a6:9c:5e:b0:1f:79:5b:35:e6:
ee:0f:0e:13:02:f3:de:c9:21:1d:5e:b1:0c:6e:e5:4b:f8:ae:
ca:33:92:3b:26:6a:dc:08:fd:f2:26:44:96:10:92:a5:17:1d:
7d:99:b2:63:f2:8b:b5:7c:c3:e1:6e:70:2e:06:b6:93:3e:6d:
7a:17:e5:08:b3:28:31:e4:d6:84:15:14:e9:3e:17:9b:9d:41:
a3:b0:51:31:a8:04:c5:02:ec:6c:d4:49:6b:9b:9c:dd:9a:19:
2a:4e:88:20:cf:cf:c8:35:33:37:55:66:35:c1:ca:1c:da:90:
cc:5c:ae:e0:90:fd:a6:b3:f0:25:be:16:88:19:7c:da:fc:11:
0b:7e:dc:42:f7:51:f7:6e:6e:f1:b6:db:5f:75:b6:cd:af:d6:
10:fb:e6:84:0d:46:af:52:5a:68:31:07:51:db:af:22:07:25:
e3:d1:71:14:c6:ca:c6:91:e1:6d:a0:bf:fb:5d:31:ed:b2:43:
b1:fc:88:08:be:35:57:05:ce:b4:a4:81:d1:46:ec:34:32:7d:
be:3a:72:59:3c:e5:92:14:78:97:13:66:fd:40:2a:48:33:6b:
b6:29:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org