Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3234203d3e20333939303733.roa
File: 3134302e3135302e3233362e302f32322d3234203d3e20333939303733.roa (raw, json)
Hash identifier: tg2zEVaDvtIbQSE5x+lfAL9wwUc9SOse4NR2xyYFyt4=
Subject key identifier: F6:03:F1:8F:49:A3:77:18:DB:D9:B3:B4:C5:57:1E:B9:44:56:7E:B4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3CF424BA1F4FB5AB6E9A7665A2F93A989F84EE7B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3234203d3e20333939303733.roa
Signing time: Tue 29 Aug 2023 14:06:35 +0000
ROA not before: Tue 29 Aug 2023 14:01:35 +0000
ROA not after: Tue 27 Aug 2024 14:06:35 +0000
asID: 399073
IP address blocks: 140.150.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f4:24:ba:1f:4f:b5:ab:6e:9a:76:65:a2:f9:3a:98:9f:84:ee:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 29 14:01:35 2023 GMT
Not After : Aug 27 14:06:35 2024 GMT
Subject: CN=F603F18F49A37718DBD9B3B4C5571EB944567EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:47:ce:77:bc:52:cc:09:d0:60:b6:5f:36:
5f:87:30:db:5c:b6:1d:f9:1e:59:cc:e5:62:c1:80:
be:22:2d:49:91:62:ed:80:c8:e8:cf:96:bc:2f:f9:
95:c7:f9:90:bf:99:20:73:f3:a7:2e:ba:93:67:22:
99:a7:71:96:f4:72:7a:be:d6:a0:68:71:cc:09:7d:
ff:74:ee:4c:cc:0c:1f:e0:b2:03:d2:bb:72:00:b9:
32:c9:25:fd:6f:c0:6f:c2:7e:5b:f7:d2:9b:77:2a:
85:64:86:be:56:da:5b:12:bd:7e:d9:36:6f:0b:69:
2c:22:f0:1d:0e:0f:92:26:dd:50:a2:ac:99:cb:b2:
e5:7b:6d:1f:ae:27:0a:39:0c:51:aa:d5:3f:b6:c7:
4d:ba:8a:de:d3:90:d8:df:20:49:f3:35:46:c1:06:
7d:e3:2f:d9:41:58:e9:d6:8c:2d:78:49:8c:e0:77:
68:52:12:f3:83:dd:f7:4f:88:37:4b:bf:a0:ce:e9:
42:e1:06:44:d3:42:90:5b:bc:40:8c:bc:5c:23:aa:
74:84:04:21:87:dc:37:ac:55:f6:22:90:03:3c:c8:
08:36:9f:0c:fb:15:0d:71:ab:b3:b3:b8:27:17:af:
6a:2a:0e:b9:53:90:05:ef:34:33:35:20:68:73:07:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:F1:8F:49:A3:77:18:DB:D9:B3:B4:C5:57:1E:B9:44:56:7E:B4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:63:bf:53:79:14:55:ab:29:d3:bd:21:97:0b:56:48:50:37:
59:0b:91:96:00:4d:52:36:2c:85:b6:5b:7e:44:ad:a0:3c:c6:
72:48:26:f6:ec:2b:39:3e:57:04:7d:a3:2c:0d:c6:10:da:6a:
bb:8f:79:64:c1:0f:f1:1b:c6:4f:7f:95:94:d0:0a:5b:1f:e7:
17:df:16:1c:28:c2:24:8e:fd:42:74:95:24:d9:23:5f:4f:1d:
50:8f:ed:ea:93:55:74:84:b9:69:02:2e:74:59:f9:6c:b2:72:
dc:a4:41:79:e3:f6:d5:b7:4c:8b:c2:a8:39:49:e8:5d:fd:cc:
93:ae:08:9c:53:8e:4b:c6:cb:11:60:b9:a5:e2:43:6c:57:25:
62:b6:c9:b3:0a:15:19:c1:c6:d2:aa:9f:59:a3:15:05:42:52:
89:8a:6d:96:7a:79:2a:1f:69:8f:08:58:20:3e:e5:95:3b:32:
cb:d7:02:5d:a4:3d:9f:81:18:8e:25:c6:c7:77:e9:35:53:62:
db:90:b3:8a:b2:c2:2d:25:d2:f5:15:23:27:fc:c0:1a:6f:e6:
60:e3:05:29:36:fe:d1:f5:75:44:94:af:de:8b:48:94:2d:57:
86:89:ce:09:83:b3:75:6b:23:c7:f7:fc:da:69:fd:9e:96:01:
97:53:ad:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org