Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3132382e302f31392d3139203d3e203136353039.roa
File: 3134302e3233332e3132382e302f31392d3139203d3e203136353039.roa (raw, json)
Hash identifier: 68u87tgsT9t0lJt02R6ly+s5ii8sfX924PiubOkKUmc=
Subject key identifier: 3E:2F:50:9B:14:1D:31:56:87:6D:F1:19:42:FB:9B:22:67:38:79:D6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3AB2CDFA643925A05FCA06BC2B21C76E6DF561DE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3132382e302f31392d3139203d3e203136353039.roa
Signing time: Mon 12 Feb 2024 05:23:05 +0000
ROA not before: Mon 12 Feb 2024 05:18:05 +0000
ROA not after: Mon 10 Feb 2025 05:23:05 +0000
asID: 16509
IP address blocks: 140.233.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 14 Feb 2024 11:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b2:cd:fa:64:39:25:a0:5f:ca:06:bc:2b:21:c7:6e:6d:f5:61:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 12 05:18:05 2024 GMT
Not After : Feb 10 05:23:05 2025 GMT
Subject: CN=3E2F509B141D3156876DF11942FB9B22673879D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:f5:02:6d:47:52:c5:9a:2e:95:ee:5e:af:
e8:1f:9d:9d:27:46:66:55:ec:3e:7e:36:2e:9b:21:
86:c2:0e:4a:c9:9c:61:7e:09:4a:a1:d4:07:2a:af:
d2:5d:d7:82:67:fe:89:ac:5b:23:0f:25:8a:6d:b7:
93:2c:8e:61:14:b2:6e:51:3d:ee:a4:3d:9f:2a:00:
54:ae:f3:ce:48:5c:e6:d3:a0:a9:bd:83:72:bb:35:
bc:3c:6e:3a:9d:1e:39:3c:3e:3a:52:f9:0e:23:c7:
93:eb:86:3f:c4:46:05:14:f9:13:21:76:58:7f:6a:
83:3d:4b:fd:24:f4:c7:2e:a1:97:97:38:d7:d3:de:
54:39:48:59:b7:b4:df:cd:e7:52:0c:62:92:0e:fc:
c5:c0:b5:66:f6:5b:85:d4:d3:95:d6:c9:e9:16:c7:
e2:67:9c:b8:5e:f1:62:8e:b5:6f:b1:8c:30:29:b1:
1a:8f:a4:74:41:99:b8:05:a6:4d:8f:ca:58:1f:7b:
c7:cd:57:40:84:15:49:90:5d:fa:53:cb:e9:f8:9d:
43:ef:3a:4a:bc:73:65:a7:ce:5c:21:e1:b5:4d:a7:
7e:c9:30:7a:88:63:39:f2:71:a2:96:d5:24:15:26:
8a:0f:64:ed:c9:5f:bc:a2:9a:db:d2:57:b7:af:b6:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:50:9B:14:1D:31:56:87:6D:F1:19:42:FB:9B:22:67:38:79:D6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3132382e302f31392d3139203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.128.0/19
Signature Algorithm: sha256WithRSAEncryption
22:ee:0b:f0:5a:e7:80:5b:c1:0c:20:5b:6e:95:ef:13:e8:9c:
73:06:44:47:d0:70:a3:4b:79:fa:5d:53:ed:40:1f:0d:d4:19:
64:dc:b5:7a:95:ae:63:7f:8e:74:b8:09:98:11:4e:de:d1:42:
03:97:42:02:f9:61:26:a7:b9:29:97:69:18:50:71:92:84:05:
84:7d:7e:de:b1:fb:08:83:80:ae:a2:2f:e8:e5:8a:6b:a8:c2:
9f:ef:c6:41:27:79:2e:24:8c:b8:58:a1:4b:2d:b1:48:6f:b1:
ce:09:d8:ff:3f:73:b5:bb:26:96:46:df:39:d0:b5:e7:d6:f6:
58:00:83:79:eb:4c:56:78:86:22:0a:d9:85:fa:6c:0e:2d:d9:
dd:3e:36:27:81:83:f8:02:f3:4b:0f:af:4f:81:56:c0:a1:c6:
91:50:dd:92:5c:d7:00:d8:31:d5:64:90:a3:d8:89:2f:fb:e0:
94:15:81:90:c9:bc:bd:ec:88:61:a4:2a:26:dc:75:0c:fc:5b:
a4:4e:42:61:20:b3:93:96:5c:f0:f3:91:f4:ef:1a:8e:c7:ac:
8a:21:93:05:18:9f:4f:fd:d4:dd:2f:50:b9:08:a2:57:e8:31:
6e:12:7e:af:7c:bd:f4:63:2a:6b:85:35:fc:4e:33:34:a3:24:
54:03:bb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 15:12:38 2024 by rpki-client on console-fra.rpki-client.org