Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e302e302f32322d3232203d3e20313734.roa
File: 3134362e3130332e302e302f32322d3232203d3e20313734.roa (raw, json)
Hash identifier: 78uWqMLxViQT6Z+AjNjVosiCW9n5i/N+TZfgP/rN1qg=
Subject key identifier: CF:1B:4C:6B:D1:12:93:52:0C:58:4B:51:8A:F4:49:8A:EE:20:7E:0C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 049FF63CA9326BC5BE12C8142BE6717A717A27C5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e302e302f32322d3232203d3e20313734.roa
Signing time: Wed 13 Mar 2024 13:46:45 +0000
ROA not before: Wed 13 Mar 2024 13:41:45 +0000
ROA not after: Wed 12 Mar 2025 13:46:45 +0000
asID: 174
IP address blocks: 146.103.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:9f:f6:3c:a9:32:6b:c5:be:12:c8:14:2b:e6:71:7a:71:7a:27:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 13 13:41:45 2024 GMT
Not After : Mar 12 13:46:45 2025 GMT
Subject: CN=CF1B4C6BD11293520C584B518AF4498AEE207E0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:86:f1:4b:c4:06:b4:ec:f9:6a:89:26:9e:
d0:44:53:6b:0e:36:f7:5b:72:61:25:34:0d:02:02:
7c:14:23:d2:95:2d:14:7b:a8:7d:6b:c6:0b:d3:e1:
86:91:11:47:35:3f:f3:3e:f3:2d:41:11:4e:01:f9:
c1:c2:58:03:7e:ef:46:b8:ee:8d:e6:24:55:1f:cb:
a3:33:cc:19:36:ba:76:39:a0:72:a3:c9:79:4b:23:
df:52:d2:8c:98:c1:a7:b7:36:ce:c0:29:d4:12:50:
f8:1e:25:dc:14:5d:82:e0:99:1d:77:29:dc:0b:93:
c8:b6:0e:4b:40:88:eb:5a:bf:c2:54:3c:33:80:ea:
79:9f:be:b1:a6:6e:da:c9:fd:7e:67:e6:81:b4:65:
25:56:36:3b:37:75:87:23:1d:e8:72:00:8d:9b:b4:
ab:69:65:5f:82:2c:12:9d:d2:8f:c0:e9:2c:36:8d:
f6:c9:e2:13:40:bf:27:f9:7f:76:e4:b6:9a:fe:58:
a7:df:05:1d:aa:6f:2a:21:36:78:86:4a:fb:ce:47:
76:3e:3b:f1:2a:79:ce:e0:5e:ed:29:bc:84:6e:17:
e6:8b:11:10:17:d9:2a:d8:af:f9:11:b2:94:e1:bc:
c3:a3:a0:21:01:20:6f:cb:c9:bf:5b:a0:85:67:d7:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1B:4C:6B:D1:12:93:52:0C:58:4B:51:8A:F4:49:8A:EE:20:7E:0C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e302e302f32322d3232203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:35:0e:99:74:f9:f9:74:7b:1b:d9:03:77:25:9c:fb:75:04:
72:d7:08:d6:72:d0:33:0c:47:28:45:71:65:47:eb:49:79:de:
09:18:3f:0a:2c:95:a9:d3:1d:f9:d8:a0:cb:14:76:50:22:4a:
88:13:9e:bb:61:0b:75:8b:5d:51:75:bb:54:3a:2f:5b:11:6d:
63:1d:3e:4f:ed:34:ce:17:75:4c:f9:cb:2d:23:d6:6b:f6:2f:
9c:b3:87:8d:64:98:1f:4b:8f:b2:ab:4b:45:82:0f:d8:f7:14:
c6:e8:7c:0e:66:51:22:1e:26:67:32:9a:c3:39:45:83:a8:74:
2e:e5:da:12:43:c3:12:2c:2b:01:ef:17:b1:18:fb:da:da:c5:
ea:4a:83:56:4c:ee:48:3d:4d:30:4f:2a:57:ef:76:fc:04:70:
82:4b:c6:b1:12:8f:3c:a4:75:f9:c1:b8:51:39:2a:1a:ce:a2:
7a:ac:24:46:1e:14:3b:da:4c:51:b6:fe:19:62:6d:f5:10:c3:
3e:d3:47:6a:69:26:82:dc:0d:4f:65:62:68:a5:27:f6:fb:2c:
cb:60:1f:e4:e4:83:90:a7:3a:1b:b6:94:ab:a5:dd:f3:84:d6:
a9:32:33:49:6c:0b:c9:11:4a:4c:2f:8a:5c:49:e4:d9:55:4f:
69:2b:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 12:13:37 2024 by rpki-client on console-fra.rpki-client.org