Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31322e302f32322d3232203d3e20313734.roa
File: 3134362e3130332e31322e302f32322d3232203d3e20313734.roa (raw, json)
Hash identifier: PGPNOS1YRXBJMWZY7DOUauoXWbPb77C829o7hBrR0aI=
Subject key identifier: 21:9B:46:7B:AE:33:05:AA:DD:D8:5E:A1:26:90:E0:8F:14:F5:B3:F4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 150A1C9BCB4A5F9DB56DB6CA127F5F296297E5BD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31322e302f32322d3232203d3e20313734.roa
Signing time: Fri 15 Mar 2024 11:04:59 +0000
ROA not before: Fri 15 Mar 2024 10:59:59 +0000
ROA not after: Fri 14 Mar 2025 11:04:59 +0000
asID: 174
IP address blocks: 146.103.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0a:1c:9b:cb:4a:5f:9d:b5:6d:b6:ca:12:7f:5f:29:62:97:e5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 15 10:59:59 2024 GMT
Not After : Mar 14 11:04:59 2025 GMT
Subject: CN=219B467BAE3305AADDD85EA12690E08F14F5B3F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:a3:ab:9f:f4:b7:1a:37:f8:5e:48:04:c7:
d4:84:ca:d2:3e:41:b5:b1:23:52:64:a3:a5:0a:4c:
8b:ab:d1:3c:6a:8f:f8:8d:75:c9:30:24:5c:7f:d8:
8e:25:68:59:14:96:0f:81:c9:02:5d:a4:eb:69:f6:
b6:96:23:32:f9:e9:e3:13:84:e7:58:cd:eb:cf:cb:
f0:f7:58:67:4d:d4:c6:a0:04:df:2b:46:c8:b4:b1:
3e:84:4b:a1:32:c6:94:56:39:b4:8b:73:1a:f7:c9:
0f:19:a2:b7:1e:35:cb:0a:43:d5:8b:b9:26:71:d8:
11:c0:af:d2:50:e5:04:28:95:75:2a:c7:68:d6:53:
4b:0a:50:3e:16:2b:18:70:83:60:fa:23:47:a3:04:
67:f3:58:7e:bc:ce:65:9b:a2:3b:b5:16:74:e8:77:
cd:ab:0a:5d:3c:c3:aa:55:d5:09:ef:2e:c5:79:c4:
2c:82:3e:18:8d:1a:e6:ed:59:c5:7d:e1:2e:e8:fe:
1f:f7:a4:a0:2d:ea:b9:16:54:44:06:b2:02:a7:32:
ab:d8:10:bc:13:19:32:9b:7f:57:60:35:4d:bc:3e:
a4:7c:2c:f1:97:23:50:ca:04:84:6a:f9:91:43:53:
d3:cb:e7:d9:eb:47:33:66:4b:dd:a1:cb:11:f6:d6:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9B:46:7B:AE:33:05:AA:DD:D8:5E:A1:26:90:E0:8F:14:F5:B3:F4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31322e302f32322d3232203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.12.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:fe:14:d7:6c:7f:d6:71:05:81:5b:b9:42:d7:18:eb:e8:5a:
34:4a:cf:7b:d7:43:86:3b:bc:4a:f9:10:e9:2d:47:56:87:7b:
63:e3:39:1e:94:5a:95:d0:d4:b2:33:59:1c:d0:1f:1d:12:99:
be:dd:02:78:f8:93:5c:48:56:c2:9b:ec:69:10:51:52:f4:9c:
ea:0e:35:f2:91:e1:e2:84:d2:c3:39:13:17:7c:30:34:aa:47:
f4:22:92:d7:c3:ff:47:dc:59:ec:4e:1b:49:72:70:8c:59:4a:
bd:8a:94:e7:be:f3:ca:e3:a7:59:0c:73:c2:9f:80:ae:4b:bf:
6f:03:65:c1:04:38:24:2f:e4:bf:dd:6d:e2:1d:a4:f4:16:64:
99:0a:d2:36:b9:33:9f:28:7e:55:17:17:f4:d9:ce:66:b1:90:
3f:11:ce:b7:3c:d8:a8:99:af:19:86:68:ac:57:96:3a:8a:16:
60:9b:e9:e8:08:7f:60:81:54:3a:cc:13:4c:d4:f6:6b:ba:9b:
31:41:7f:0d:27:66:e4:5e:06:3c:e5:c1:c3:2a:28:f4:eb:dc:
96:2d:0d:9c:0d:c1:94:93:5c:a7:e5:d7:92:85:5a:79:75:34:
bd:eb:03:0a:24:dc:c0:47:71:ee:c5:4a:17:b9:48:55:a6:32:
20:97:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:06 2024 by rpki-client on console-ams.rpki-client.org