Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2037393232.roa
File: 3134302e3233332e3139322e302f31382d3234203d3e2037393232.roa (raw, json)
Hash identifier: QZI2Da6BfjJDDtkJ1w6GT1KjkkdIQ1vLPckGpmzK46k=
Subject key identifier: CB:0A:18:A8:0F:1F:F1:B9:24:89:E1:3B:EF:D6:16:6F:7D:01:41:44
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 389E56C50EC09165B07BB905509C75D37E4E675C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2037393232.roa
Signing time: Thu 08 Feb 2024 14:01:03 +0000
ROA not before: Thu 08 Feb 2024 13:56:03 +0000
ROA not after: Thu 06 Feb 2025 14:01:03 +0000
asID: 7922
IP address blocks: 140.233.192.0/18 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:9e:56:c5:0e:c0:91:65:b0:7b:b9:05:50:9c:75:d3:7e:4e:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 8 13:56:03 2024 GMT
Not After : Feb 6 14:01:03 2025 GMT
Subject: CN=CB0A18A80F1FF1B92489E13BEFD6166F7D014144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:64:9d:6b:99:c0:6b:64:49:83:2f:2a:bd:
c3:38:5d:26:22:4f:86:b7:e3:8d:da:89:c2:60:72:
ca:f4:85:ac:3a:4a:39:db:85:e1:5d:a0:fd:d6:20:
6b:3c:1c:f5:98:9a:36:0a:85:30:97:46:2e:26:60:
42:b6:20:8c:39:8a:ac:e8:bc:40:a8:22:ee:6a:e6:
63:49:ee:dc:86:40:6e:d9:eb:84:20:dc:61:ba:95:
6a:95:97:3e:c0:d5:7c:a9:dd:59:a1:95:47:3e:b0:
f8:50:32:a5:54:29:64:ee:c7:07:b5:a0:e1:06:00:
5e:10:0a:87:ee:f1:77:99:2d:91:96:f8:37:a9:2b:
25:88:33:6b:91:f6:70:37:2f:b5:54:b4:25:01:70:
ed:30:14:39:2c:cf:98:68:b2:8f:57:19:02:e5:9e:
70:c4:b1:f8:c1:45:52:5b:7b:05:a7:e7:08:0e:56:
f6:e6:f8:aa:a1:9a:41:66:ab:bf:b9:73:89:52:e2:
38:20:79:ae:41:2c:f4:f9:6e:9a:bc:56:b2:6a:ea:
54:ef:c8:d8:39:77:a7:81:f0:8e:23:d5:48:1f:d1:
a9:41:73:de:b3:43:65:8d:da:f4:5e:7f:90:b3:92:
46:b5:40:08:13:4e:87:41:85:10:a3:ef:6d:24:f6:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:18:A8:0F:1F:F1:B9:24:89:E1:3B:EF:D6:16:6F:7D:01:41:44
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e2037393232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
Signature Algorithm: sha256WithRSAEncryption
05:d8:b3:ac:46:c1:e6:1d:df:61:5f:3c:d7:1a:0b:02:71:0b:
fb:06:af:40:c5:03:a8:38:50:20:1b:ff:fd:7c:dd:d8:3a:13:
ce:cf:5d:df:29:b4:c3:2e:00:3d:4d:93:65:0e:f7:cf:22:42:
4c:95:11:fc:17:bb:1a:fc:81:5d:c4:b7:86:ab:43:76:6c:87:
95:2a:a4:d2:e2:14:43:31:67:6f:07:49:a2:54:73:c2:77:06:
33:52:1f:c0:03:58:b4:e1:8f:4d:9a:f5:58:a9:8f:d6:d4:c7:
db:f9:11:35:a6:ca:6e:41:c4:59:86:c2:32:ab:49:c8:14:5f:
d7:11:4d:94:94:f9:6e:47:cb:37:78:37:39:9b:7f:10:25:95:
f2:f2:6e:ec:1f:20:33:0f:9a:bd:b5:26:ec:22:88:94:bd:b6:
00:00:80:9a:37:18:dd:9a:ef:15:dc:d4:72:62:b0:6a:3e:f2:
6d:42:aa:69:40:da:0e:93:59:4a:5a:ff:93:cc:09:df:ca:03:
91:b0:8e:c3:d6:cf:7e:55:1a:be:19:20:32:3b:cb:a7:68:b5:
a6:98:63:ee:14:4b:2d:bd:ef:b3:2d:83:1d:12:40:10:d3:53:
43:ad:c5:5f:cd:3d:e3:2f:cb:7e:71:95:cc:35:64:a6:be:d6:
87:a2:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org