Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31302e302f32332d3234203d3e20383334.roa
File: 3134362e3130332e31302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: uMCC0Sjkvg8WphYYpJYu4/eMph8OLQIu6RRYaT+CkjE=
Subject key identifier: 51:C3:CB:DE:7E:85:1B:C5:E6:93:FC:D3:81:E1:FB:5C:39:A8:44:FB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5D8F0F3BEC09CFA7681BC36159861A164A114EB1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31302e302f32332d3234203d3e20383334.roa
Signing time: Sun 24 Mar 2024 21:48:31 +0000
ROA not before: Sun 24 Mar 2024 21:43:31 +0000
ROA not after: Sun 23 Mar 2025 21:48:31 +0000
asID: 834
IP address blocks: 146.103.10.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 13:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8f:0f:3b:ec:09:cf:a7:68:1b:c3:61:59:86:1a:16:4a:11:4e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 24 21:43:31 2024 GMT
Not After : Mar 23 21:48:31 2025 GMT
Subject: CN=51C3CBDE7E851BC5E693FCD381E1FB5C39A844FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:98:0d:ca:ca:a8:13:f1:5c:3f:60:6e:4f:
19:4f:58:11:31:3e:04:81:75:eb:3f:a9:d1:1e:55:
77:02:7f:8f:93:98:80:2c:6c:c9:7c:f7:ba:c6:1b:
22:cb:fa:c2:62:49:f2:b1:84:2d:ac:09:23:63:b8:
fc:55:8a:ac:a8:12:fd:3e:98:74:7b:3e:cc:dc:58:
af:12:5f:5e:de:03:2b:cd:9b:2b:55:6b:dc:22:bf:
1f:f7:c0:76:9e:ce:24:8f:35:0d:cb:69:0e:f3:20:
a1:a0:0b:a6:a5:15:82:27:83:17:6d:c4:30:00:c5:
26:b9:c9:1c:cd:3d:a1:0a:68:e1:a6:23:cf:ad:7f:
bc:84:00:d3:5d:c2:69:26:b7:7d:8e:a8:3b:ec:ff:
98:83:03:a4:f2:9a:59:eb:b9:37:67:07:ae:1d:01:
9f:cd:77:60:77:6d:96:63:d0:2d:66:0d:25:2e:00:
fe:a5:53:b3:9e:d0:d5:8c:5b:17:75:fa:f3:17:c8:
a3:7b:e7:6e:e0:a8:b8:b8:16:d7:5f:69:87:56:1f:
5d:03:60:90:10:b2:e2:f7:87:41:46:5b:2c:62:ea:
12:80:83:35:b5:ac:c0:08:4f:b0:a9:22:46:32:8b:
cb:66:2d:8f:cc:05:a5:0a:c6:2b:55:0c:06:bd:42:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:CB:DE:7E:85:1B:C5:E6:93:FC:D3:81:E1:FB:5C:39:A8:44:FB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.10.0/23
Signature Algorithm: sha256WithRSAEncryption
19:87:af:a3:6d:bf:6a:cd:ec:2b:5f:6b:0a:4c:e9:90:78:72:
c7:ea:4e:35:2a:98:ec:60:94:23:ce:d3:8d:ba:77:ae:b2:35:
ba:7b:13:24:aa:ba:2a:c0:fb:46:73:09:da:ef:de:91:13:1d:
59:56:c2:36:72:2c:d9:89:c2:61:92:30:94:81:be:88:37:11:
7e:59:96:b6:1b:89:a6:68:39:10:a3:4f:a1:ab:ee:1b:69:13:
d4:5e:93:67:2b:59:08:43:92:0d:b2:dc:c4:55:70:98:bb:35:
e0:42:a6:b5:c8:85:27:fa:1b:c7:fd:d9:d3:a2:cb:3d:5d:5e:
6a:34:ca:d8:66:ab:90:69:bc:fc:7c:14:53:6a:93:45:44:be:
9d:95:0e:0e:d8:c9:b2:25:de:10:1f:94:28:3d:43:10:f4:45:
69:13:d5:f7:0b:b7:12:58:af:dc:46:89:0b:4b:98:aa:d8:f5:
3c:a7:c9:b7:d5:dd:d9:65:5b:bb:f9:f7:e8:3b:b2:59:d6:93:
6b:2a:6d:47:f5:62:8c:c5:1b:a6:90:74:ad:44:cf:d3:e0:68:
b1:9e:69:f5:63:8f:52:7e:30:c0:62:ec:ad:b8:90:4b:03:26:
f2:b1:26:32:4f:19:d4:f1:a4:19:da:8a:60:5a:ed:5a:75:97:
67:d8:80:d4
-----BEGIN CERTIFICATE-----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Generated at Mon Mar 25 18:04:26 2024 by rpki-client on console-ams.rpki-client.org