Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31302e302f32342d3234203d3e20383334.roa
File: 3134362e3130332e31302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: HSs4/wRUQ/U0r3LhCu2x0H25o1X5w/Ic8DND9+gW/+U=
Subject key identifier: CB:1B:6E:54:B0:89:53:FF:7B:01:1C:DF:4A:E9:70:95:09:E8:36:25
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 45EE19C32A85821F88ED498CB1368B96F844FE80
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31302e302f32342d3234203d3e20383334.roa
Signing time: Mon 25 Mar 2024 13:12:51 +0000
ROA not before: Mon 25 Mar 2024 13:07:51 +0000
ROA not after: Mon 24 Mar 2025 13:12:51 +0000
asID: 834
IP address blocks: 146.103.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ee:19:c3:2a:85:82:1f:88:ed:49:8c:b1:36:8b:96:f8:44:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 25 13:07:51 2024 GMT
Not After : Mar 24 13:12:51 2025 GMT
Subject: CN=CB1B6E54B08953FF7B011CDF4AE9709509E83625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:36:c0:98:40:7f:ad:99:52:ab:ce:5a:15:
31:53:4f:44:db:47:bd:04:3a:a9:6c:f2:41:07:e2:
06:70:93:e6:0e:ba:08:86:3e:6e:b6:60:63:23:e5:
db:be:aa:de:b6:a0:6e:dd:66:a2:2e:67:cb:5e:94:
4a:49:09:7a:84:09:30:22:21:8e:97:c7:a9:23:0e:
6a:c7:e0:7a:03:4d:f9:52:ef:a3:9e:7c:52:14:18:
ab:ad:eb:21:eb:77:4a:41:03:57:2c:69:02:8e:ff:
5c:06:f6:d4:14:df:2e:f9:b1:a3:1f:de:f0:91:31:
6e:c5:83:cb:41:bc:2f:d1:56:d9:9d:6c:eb:7f:66:
00:47:8f:67:07:d0:bc:f8:19:df:d0:62:1c:67:a6:
8b:fb:98:e7:d3:8b:74:db:d0:51:ff:14:0e:dc:16:
0a:29:af:32:d6:31:79:5d:bb:47:c6:ea:19:c1:0b:
fd:03:45:9e:36:74:d3:7a:68:a7:3c:18:61:ee:ff:
9e:af:c1:c6:66:46:25:5b:e0:26:f2:ff:17:61:e4:
31:1a:70:af:4e:73:cd:55:5c:9c:10:ba:8f:de:84:
d1:72:28:0d:75:51:66:86:64:3c:fb:c6:7f:3a:22:
73:ad:7d:d9:04:b2:38:e1:ed:de:b2:ef:c6:aa:e1:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1B:6E:54:B0:89:53:FF:7B:01:1C:DF:4A:E9:70:95:09:E8:36:25
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.10.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f1:dc:e4:09:2f:c6:8d:91:0b:82:7f:c7:30:f8:cd:e0:4e:
c7:f0:b0:ee:81:53:be:78:27:be:84:ac:de:6c:c4:3c:54:36:
ea:d6:bb:31:80:ef:d3:d7:d2:db:7c:95:76:9c:58:6e:44:be:
92:72:9b:92:5d:96:da:6e:f0:39:52:2f:52:f0:f9:ef:7d:e5:
25:0f:29:db:9f:52:60:48:2e:66:fa:f5:63:ac:54:91:bc:ad:
16:2e:7c:b3:64:ca:d1:c3:64:71:55:5b:cf:04:34:23:9f:e3:
fb:89:49:08:6b:68:e6:c3:3d:d7:f2:fd:8f:ba:83:0b:21:fb:
b1:fc:22:74:b3:9a:24:85:87:94:98:e2:a5:bc:6b:7a:1d:69:
f2:64:82:9c:dc:c7:5e:c5:80:e3:63:b8:79:6d:6c:93:c4:93:
3a:0b:95:31:28:28:93:25:e7:d8:d4:80:a9:50:cf:7d:26:b2:
0b:d1:22:0f:76:14:af:be:50:dc:83:18:12:3f:55:5b:bb:35:
55:8e:47:34:01:72:ae:93:d1:38:ab:86:d2:97:bb:05:3a:d5:
4f:74:28:b3:2a:30:0c:2b:83:8f:3f:a1:38:ac:e0:5c:ef:e1:
49:76:4d:47:61:22:7a:09:63:6d:ca:3f:cd:04:4d:e0:8d:bd:
b6:e3:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org