Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3137362e302f32302d3234203d3e20383334.roa
File: 3134302e3233332e3137362e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: 4o/QU2Jp4064zN48heOY+GyY5FA7omExiuaXs9Vq1Ms=
Subject key identifier: 17:62:28:86:E4:63:F8:6C:9E:45:BA:E6:7A:1D:5A:59:F0:2A:84:FE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2132EF99748995B28CA176D65AF262B9258D7932
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3137362e302f32302d3234203d3e20383334.roa
Signing time: Mon 12 Feb 2024 11:11:58 +0000
ROA not before: Mon 12 Feb 2024 11:06:58 +0000
ROA not after: Mon 10 Feb 2025 11:11:58 +0000
asID: 834
IP address blocks: 140.233.176.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 10:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:32:ef:99:74:89:95:b2:8c:a1:76:d6:5a:f2:62:b9:25:8d:79:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 12 11:06:58 2024 GMT
Not After : Feb 10 11:11:58 2025 GMT
Subject: CN=17622886E463F86C9E45BAE67A1D5A59F02A84FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:a4:93:ef:42:da:41:df:99:3c:3c:d0:88:
e6:4b:e0:f1:f4:c4:7d:02:11:90:d2:85:a7:1e:61:
ad:97:c8:fc:b8:39:ab:f4:59:8e:25:a0:ec:f0:d1:
1d:53:31:32:fb:32:3e:29:93:ed:88:65:23:9e:b5:
07:38:eb:1b:33:48:66:d9:20:9b:71:0d:83:a3:34:
7b:82:26:55:2b:5b:82:18:a1:59:12:24:86:7a:32:
6f:fd:1e:66:8b:ca:49:da:b9:53:99:37:23:2c:53:
84:3e:d2:48:d5:ca:13:2e:9b:67:7f:65:be:14:be:
3e:a4:5b:e0:23:1c:04:7e:97:21:0c:8a:a7:0c:3a:
17:d8:59:c3:89:eb:3b:57:55:37:ca:24:e2:f6:4f:
5a:58:92:a8:2e:e3:98:1f:a9:46:be:f6:02:3a:a1:
80:78:ed:d0:28:2e:1f:79:44:6d:52:fc:b9:5a:c9:
f2:a3:01:b9:35:47:24:2a:ab:fc:91:3e:a5:62:9d:
74:e4:6e:f2:95:e3:df:2e:e2:58:1f:ae:f0:71:9f:
56:47:27:2f:58:53:13:38:0a:c1:17:47:50:50:f2:
aa:2b:19:4f:97:1b:47:0c:05:0f:cd:43:63:48:02:
c2:11:35:23:b9:93:61:87:69:65:97:a4:f3:82:d9:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:28:86:E4:63:F8:6C:9E:45:BA:E6:7A:1D:5A:59:F0:2A:84:FE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3137362e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.176.0/20
Signature Algorithm: sha256WithRSAEncryption
81:b1:56:a9:e1:f5:37:45:e7:7a:c2:10:5c:ca:5e:0e:38:cb:
13:34:f7:b6:4b:82:b1:4d:ae:50:3a:ad:1f:9b:9a:76:05:06:
e0:80:51:0f:74:8f:08:fc:e8:10:ca:bb:29:44:f6:4b:e1:0d:
29:7d:ff:5b:a4:3d:57:f3:14:30:1e:dc:43:5d:2f:a6:a8:be:
fb:24:61:f3:1b:ca:6b:8e:ab:99:78:64:99:44:07:b7:0a:1e:
77:d4:ef:3f:6b:86:77:a4:c3:ef:b2:59:8b:6b:b8:de:c4:43:
ec:da:84:53:f5:bd:10:e5:e8:81:de:ca:6d:f9:61:62:27:95:
c9:61:a1:7a:74:da:b4:43:7b:ba:80:40:44:a8:39:b5:5d:ee:
ec:6f:8e:f6:67:6f:0f:b6:12:1a:9a:61:6c:54:27:99:4b:f9:
f4:f2:44:c3:cf:58:56:ec:0f:87:cc:5a:5e:91:f9:f7:b7:d8:
89:43:dd:b4:77:b7:d1:c3:2e:1f:89:b7:e3:76:74:15:c4:78:
10:6f:ed:d7:a2:8d:2f:53:2c:b3:35:56:ad:a2:20:6a:5a:c5:
b0:f0:bc:79:62:20:65:2e:40:c7:be:d0:65:54:62:50:1c:ae:
30:a5:24:d9:c7:24:80:73:03:33:c9:3e:93:4e:e6:05:23:86:
84:e9:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org