Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2037303239.roa
File: 3134302e3233332e3139322e302f31382d3234203d3e2037303239.roa (raw, json)
Hash identifier: cuX559GEbgV+J1GgBA644GDT+o2OcPrZ1Adix9Gux5Y=
Subject key identifier: 59:95:25:8C:A3:2E:1A:1B:A7:7E:43:D6:7E:27:C5:96:9A:A5:8F:B2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 25D1261C47D6730B43783E59DA0007CF36083981
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2037303239.roa
Signing time: Thu 08 Feb 2024 14:01:03 +0000
ROA not before: Thu 08 Feb 2024 13:56:03 +0000
ROA not after: Thu 06 Feb 2025 14:01:03 +0000
asID: 7029
IP address blocks: 140.233.192.0/18 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d1:26:1c:47:d6:73:0b:43:78:3e:59:da:00:07:cf:36:08:39:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 8 13:56:03 2024 GMT
Not After : Feb 6 14:01:03 2025 GMT
Subject: CN=5995258CA32E1A1BA77E43D67E27C5969AA58FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:57:8e:93:f4:5a:33:09:ca:9f:88:4f:36:
6f:06:f8:c2:b2:4b:10:c6:11:92:b9:9c:50:ca:35:
7e:fe:69:f3:52:c4:1a:c0:9b:be:76:d1:89:c6:65:
b2:95:b2:49:fd:88:03:f8:f2:9e:2a:eb:e7:ff:b9:
ab:ca:92:43:0b:d1:f6:c0:d4:90:c5:66:29:36:04:
4b:d1:06:64:f3:4a:3e:e5:5c:f4:8d:54:cd:4b:58:
e4:27:e2:99:db:7a:9d:f3:17:51:79:a0:f6:15:d8:
0a:c3:53:91:4b:b5:a6:bd:b7:e9:cb:be:26:66:9b:
b3:e6:24:0a:50:f9:cb:af:47:0c:9a:be:b1:a5:71:
28:11:47:f4:85:98:48:9a:a7:ea:c3:0b:fb:fa:e1:
c5:13:d8:a9:ba:d0:2c:18:f8:7d:35:42:5b:96:ce:
07:b1:c1:75:02:13:80:91:4c:6c:f4:eb:82:9e:70:
d2:cc:16:43:05:ea:3c:d6:a5:dd:59:d7:90:c2:06:
7f:6c:2c:8c:54:aa:61:f0:72:2f:b5:9a:f7:15:d5:
92:21:cf:89:be:1e:3f:4c:66:9c:1e:a1:07:ef:5d:
f2:bc:0c:f7:c1:73:bb:de:df:f2:2b:7a:2c:a9:d8:
f6:85:77:17:ea:e5:81:f0:e9:ee:6c:2f:3c:7c:7a:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:25:8C:A3:2E:1A:1B:A7:7E:43:D6:7E:27:C5:96:9A:A5:8F:B2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:42:00:44:86:da:9f:29:90:76:e9:ea:0c:9d:54:22:b5:8d:
4b:91:ec:e0:f4:39:29:f8:43:12:f2:35:4e:bf:60:e1:4c:ac:
c5:f3:c7:74:c8:9f:56:5f:4c:ce:17:80:05:54:e3:97:93:9c:
e7:c1:16:70:94:8f:5a:d8:ce:21:39:15:5e:42:62:a7:b7:ef:
32:5e:57:e2:ac:f2:71:86:c9:46:a5:d2:82:66:03:b5:b5:6d:
12:af:a4:bc:dd:5d:d7:eb:76:1b:eb:5a:02:9c:bd:1e:cb:9b:
68:23:e9:a4:9f:31:0a:6b:1e:f4:23:c7:fb:5a:1b:ef:8d:c1:
20:52:07:c5:7d:84:2a:de:ed:67:7d:db:1e:bb:2c:b3:23:de:
3c:59:ae:85:14:4c:fe:da:a8:8b:8b:84:fa:f7:fb:df:1c:7f:
b7:46:a9:6e:6f:f2:d0:fe:7c:11:d3:ed:53:93:7b:8f:9f:b3:
6d:b7:50:0c:81:d3:cf:dd:a1:34:4f:3c:f8:3c:41:cc:cb:9d:
27:8c:88:39:e1:0b:db:a3:54:e2:0e:5c:94:fd:d3:68:92:40:
0d:db:15:12:2a:17:54:99:bf:38:83:6b:2b:d6:4a:9a:08:36:
69:e5:76:f7:3d:8e:e9:8f:44:8d:32:5b:ed:45:b9:37:56:eb:
01:f6:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org