Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2036303739.roa
File: 3134302e3233332e3139322e302f31382d3234203d3e2036303739.roa (raw, json)
Hash identifier: Vs9PFEfZRfpKTb1H7d04IUJSM0nLljoWT07/L88eNUQ=
Subject key identifier: F6:88:6A:B4:E5:F6:80:12:66:44:63:64:08:BD:E5:53:21:1C:32:3F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 61AAFB0A600BED85476C2487DF816C0A09B89A0F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2036303739.roa
Signing time: Thu 08 Feb 2024 14:01:03 +0000
ROA not before: Thu 08 Feb 2024 13:56:03 +0000
ROA not after: Thu 06 Feb 2025 14:01:03 +0000
asID: 6079
IP address blocks: 140.233.192.0/18 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:aa:fb:0a:60:0b:ed:85:47:6c:24:87:df:81:6c:0a:09:b8:9a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 8 13:56:03 2024 GMT
Not After : Feb 6 14:01:03 2025 GMT
Subject: CN=F6886AB4E5F680126644636408BDE553211C323F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:a6:ec:b4:c3:a1:0a:31:82:13:ae:3d:af:
50:11:d8:3b:e8:c8:96:b1:79:85:f0:d3:48:4e:df:
02:f6:70:7c:04:15:af:01:f3:db:fa:fd:44:1e:3f:
ef:d4:6b:63:b2:57:43:99:89:0e:e7:9b:37:fa:ee:
12:4a:3d:e3:5e:23:a1:7b:5f:cb:cd:53:24:5d:15:
29:ff:0d:fe:7b:ef:1a:98:dd:be:7e:ba:b5:e9:2d:
fd:5d:ae:2e:4e:3c:15:8f:14:af:bb:26:25:c3:e2:
38:a9:53:61:f7:32:bf:e7:b9:92:d7:20:45:ff:6e:
2d:bb:be:ff:f5:2b:d2:ef:23:e7:95:ed:29:d0:d9:
e9:d1:4e:52:20:af:f1:b7:de:0e:f8:05:01:06:34:
af:f4:0b:c2:95:22:cc:a0:fe:ea:da:ef:97:17:be:
10:ed:6c:07:15:42:b8:2e:7f:02:55:08:05:5c:2e:
bf:cb:1c:5d:a4:29:80:47:5d:62:af:9f:7d:e9:36:
4c:90:7b:eb:32:dc:d7:f9:c1:5a:74:68:0b:9e:6d:
9e:b3:16:12:eb:6c:96:8d:4b:a3:91:a8:45:43:5d:
bd:20:4e:22:e0:fe:b7:26:2a:5a:e8:76:0f:97:6b:
43:0f:e9:c6:d9:dd:68:3b:06:88:7e:8b:64:6a:0c:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:88:6A:B4:E5:F6:80:12:66:44:63:64:08:BD:E5:53:21:1C:32:3F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
Signature Algorithm: sha256WithRSAEncryption
98:6a:41:70:86:bc:24:e0:36:31:ed:a1:dc:05:7c:05:1b:df:
4e:d7:d2:f2:79:b9:30:21:df:43:92:ec:0e:84:61:33:75:1b:
ad:03:75:2b:c1:0b:c9:13:2f:d1:a4:92:8b:d6:73:09:1a:c2:
2d:5d:cc:52:5c:fa:a2:b8:b6:5d:e3:d9:ff:3f:96:f7:36:6f:
27:ee:58:5b:99:bd:1f:bb:6b:f5:43:d4:a7:10:a5:4e:77:83:
b2:c1:ce:35:bb:29:5c:01:54:f2:8e:be:9d:90:8d:59:cc:32:
14:3d:1c:57:a6:dc:56:28:50:3c:1d:c8:99:48:f9:d3:5c:26:
d1:ee:ec:f1:1f:79:b9:0f:45:21:a1:c0:d1:e6:b1:18:19:e6:
81:fc:b0:5c:8c:15:a9:b3:3f:bd:2d:ff:1b:62:fc:64:6b:fc:
33:8c:24:a5:04:14:33:7e:ed:59:3a:91:d6:12:1a:75:97:e0:
b6:de:0d:ed:e8:9b:ed:ea:50:ea:44:c6:17:a7:2b:d3:fe:0c:
a4:33:ac:9d:71:d6:51:a8:c3:99:77:68:54:c4:f0:dc:5c:6a:
0b:1c:3a:a5:b0:64:a3:17:53:5a:8c:d0:4b:37:4b:89:98:cd:
9d:49:3d:63:e2:dc:ba:c1:4b:16:36:01:b4:09:87:d6:06:1f:
c2:33:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:06 2024 by rpki-client on console-ams.rpki-client.org