Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2033333230.roa
File: 3134302e3233332e3139322e302f31382d3234203d3e2033333230.roa (raw, json)
Hash identifier: L0hgQjx4ZufVq5+VOYqPIvN6VQzJRes61mFjqryzsV8=
Subject key identifier: 34:2F:67:EB:84:0E:C0:D8:20:DB:B3:23:02:8C:A5:67:7F:B6:1E:22
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5A6A33A73F5312374F2AF0D9756363AE807B8F96
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2033333230.roa
Signing time: Thu 08 Feb 2024 14:01:03 +0000
ROA not before: Thu 08 Feb 2024 13:56:03 +0000
ROA not after: Thu 06 Feb 2025 14:01:03 +0000
asID: 3320
IP address blocks: 140.233.192.0/18 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6a:33:a7:3f:53:12:37:4f:2a:f0:d9:75:63:63:ae:80:7b:8f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 8 13:56:03 2024 GMT
Not After : Feb 6 14:01:03 2025 GMT
Subject: CN=342F67EB840EC0D820DBB323028CA5677FB61E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:03:5c:d9:bf:91:5b:08:8e:21:e7:db:db:
d4:cd:b5:72:b0:f4:67:4b:d2:9c:e0:2e:4e:46:c5:
bd:1e:8f:1d:2a:9f:37:1b:c9:d2:b2:9f:db:b7:a9:
83:f0:39:ba:41:32:73:26:95:8f:8d:05:59:e1:d0:
8b:6b:fa:74:d2:76:9b:98:ba:43:a6:99:8a:21:78:
c3:45:00:5d:d6:d5:bc:f4:95:df:dd:03:ea:d1:f0:
ff:b6:10:b1:d5:c0:cb:f1:d3:5b:e9:f6:92:6a:89:
7a:f2:a0:5d:e3:eb:9a:c8:ec:c0:8b:7b:61:cd:d5:
78:ed:e3:68:5b:6f:cf:fe:b8:8a:fc:e1:14:d7:85:
4e:c8:62:0f:20:68:e7:a3:63:e2:97:0b:aa:26:a2:
08:3a:82:02:3c:60:d6:78:9c:46:e8:ba:37:49:c1:
cc:71:93:51:7f:2e:21:55:2b:81:ae:b3:c1:1f:56:
cf:c7:a0:97:8c:dd:89:eb:59:4b:67:75:59:27:95:
67:29:70:5d:0f:d4:39:01:88:b2:fb:ab:e2:13:0f:
d9:49:d5:c1:63:18:4e:01:48:f7:d8:a1:02:61:f1:
47:9a:a1:33:55:fe:4c:6b:d0:40:29:e2:b8:78:60:
55:a6:43:5a:15:05:6b:52:b0:c4:0f:10:ec:18:07:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2F:67:EB:84:0E:C0:D8:20:DB:B3:23:02:8C:A5:67:7F:B6:1E:22
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4b:32:28:1c:f1:49:b6:12:21:79:f2:fd:5f:42:af:b1:b3:1d:
3c:d4:f1:67:8f:21:23:e5:46:d6:9b:ea:36:e3:59:d2:20:f0:
67:98:ef:c4:81:b2:3b:11:3e:b0:8b:b8:08:8a:da:2b:6e:1a:
76:e9:2c:c1:2b:78:74:d3:e9:d8:2d:3d:a8:a3:65:c6:d7:17:
33:ea:e8:d0:1e:18:8b:6b:09:7a:f1:20:7f:dd:38:7d:c6:f0:
c4:fd:cd:2f:c3:30:0a:2c:cd:78:83:9b:e3:51:22:b6:c0:f4:
80:bc:af:2c:03:d8:ed:fd:5a:4a:25:28:c9:bc:67:13:e8:6a:
f0:1a:c8:30:7e:5e:58:36:6d:c3:c1:7b:97:94:00:90:77:2e:
59:36:7f:04:9a:44:42:90:c1:34:9e:8c:84:83:e7:0f:dd:16:
f0:a3:47:08:2e:d6:d6:d8:d6:72:9b:7a:e6:ee:cc:c6:fe:1f:
93:82:42:29:d6:0e:fa:9c:dc:ca:13:0c:86:00:5b:18:66:a0:
33:e5:1d:1d:15:fa:82:e7:cf:9d:41:7b:50:92:57:b6:d8:6b:
74:23:8d:5f:47:fa:02:59:51:39:14:b7:0f:d2:3a:57:eb:b0:
a4:d4:4e:7b:25:8e:6a:5e:90:51:fd:73:40:ec:4c:0c:4f:0a:
43:ae:58:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:06 2024 by rpki-client on console-ams.rpki-client.org