Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3234203d3e203339363030.roa
File: 3134302e3135302e3233362e302f32322d3234203d3e203339363030.roa (raw, json)
Hash identifier: 1XJrvG3zDf5E+GuAf5eXL03b9eV1CBdTQfxqglubu9w=
Subject key identifier: 09:74:92:3E:7A:91:E2:8C:CE:8E:79:DF:A8:23:FE:25:79:3B:2C:C7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4D3E8C75FAEDE394E5735CACF4B72CC4525A2FD0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3234203d3e203339363030.roa
Signing time: Fri 06 Oct 2023 15:18:42 +0000
ROA not before: Fri 06 Oct 2023 15:13:42 +0000
ROA not after: Fri 04 Oct 2024 15:18:42 +0000
asID: 39600
IP address blocks: 140.150.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:3e:8c:75:fa:ed:e3:94:e5:73:5c:ac:f4:b7:2c:c4:52:5a:2f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 6 15:13:42 2023 GMT
Not After : Oct 4 15:18:42 2024 GMT
Subject: CN=0974923E7A91E28CCE8E79DFA823FE25793B2CC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3c:74:71:c4:98:44:4f:ee:85:65:86:2d:a7:
3e:8e:92:6e:71:21:24:ba:34:a2:5f:48:35:0a:ea:
95:9e:3a:c1:55:ff:94:e5:82:9e:cf:78:0a:42:2f:
07:dd:68:9a:b1:04:ad:9a:42:4a:07:51:6c:ef:7a:
fe:59:ac:a0:fb:fd:97:f6:d7:70:ff:89:d1:0b:b1:
ac:16:ea:9d:8b:ab:52:87:32:63:b0:18:c0:49:46:
7f:c2:8f:39:e1:8f:dd:22:84:fd:42:00:d2:b3:78:
06:0c:09:99:59:d0:3b:44:ab:4f:29:c7:7f:56:75:
ef:28:fb:84:4c:22:cd:4e:cb:14:2b:b5:54:d0:07:
21:f1:1a:4e:af:08:b8:8d:b0:b1:ab:e2:3d:f8:7e:
0c:a3:a9:28:aa:d5:73:9b:88:27:71:35:c3:9e:47:
01:16:49:35:fc:6e:fd:88:1e:9e:ff:98:08:cd:66:
83:70:7c:f8:e9:3e:21:e7:e0:84:6a:58:19:c9:a0:
08:89:ab:7d:ed:25:50:8c:29:04:3d:fc:fa:7e:08:
09:98:cc:d9:e9:ce:f5:57:d5:f7:06:01:cd:c4:a6:
5c:a5:1c:ee:67:ab:44:55:6b:be:4c:c7:10:c0:e1:
d8:3c:21:f3:d7:d3:85:09:32:a1:9b:48:54:cc:16:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:74:92:3E:7A:91:E2:8C:CE:8E:79:DF:A8:23:FE:25:79:3B:2C:C7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3234203d3e203339363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:59:08:ad:8b:21:d9:78:c9:13:bb:3d:16:47:c8:17:a4:99:
84:e3:84:8b:39:6c:da:f5:09:46:4c:d9:a7:e2:70:7a:86:bf:
d0:cf:ce:e1:cd:4b:4f:83:55:f5:6d:69:c1:0f:51:a5:9b:04:
36:d6:cd:df:ae:be:b2:8d:0d:e3:3c:15:29:8e:28:42:d7:c1:
95:fc:7c:27:dd:64:52:2a:20:89:60:0e:d7:45:12:3c:5d:b6:
8c:2c:8c:d4:72:43:f5:19:10:28:1e:75:ce:b5:5b:a0:d6:26:
71:c3:7f:4f:83:bc:7f:3a:37:ba:97:9f:f3:46:bf:6d:d4:33:
95:40:0d:6a:0e:96:45:b0:63:0f:7a:c3:33:1e:b0:51:04:5f:
8d:03:a3:b1:0e:46:dc:85:e8:53:3e:0b:ce:c1:83:08:c5:7e:
6a:7e:58:fc:c3:04:a3:81:b3:8f:5d:b6:6c:89:bc:11:6a:e7:
4e:29:be:cc:e2:24:29:cb:1d:4b:5b:0a:75:a3:cc:eb:f2:83:
04:bf:15:ba:81:be:18:7b:76:15:f8:e8:9c:f2:e2:d0:dd:73:
ba:be:72:84:68:5a:b1:db:dc:60:67:b0:42:9e:f2:84:1b:35:
32:f5:bc:21:87:7d:d2:35:97:27:f0:26:5a:94:21:50:9a:52:
6a:65:e9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org