Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31362e302f32332d3234203d3e20313532313739.roa
File: 3134362e3130332e31362e302f32332d3234203d3e20313532313739.roa (raw, json)
Hash identifier: rqkfPQUJYwiDXmQz8iWvc0UYnkidktCPLOLQDiPNckY=
Subject key identifier: 96:80:CF:D6:85:1B:05:8D:44:7A:1D:A6:F4:E5:A8:D3:30:D9:50:83
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 361DACEB67853B213849084BBC0B30188C1563E7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31362e302f32332d3234203d3e20313532313739.roa
Signing time: Mon 25 Mar 2024 07:30:33 +0000
ROA not before: Mon 25 Mar 2024 07:25:33 +0000
ROA not after: Mon 24 Mar 2025 07:30:33 +0000
asID: 152179
IP address blocks: 146.103.16.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:1d:ac:eb:67:85:3b:21:38:49:08:4b:bc:0b:30:18:8c:15:63:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 25 07:25:33 2024 GMT
Not After : Mar 24 07:30:33 2025 GMT
Subject: CN=9680CFD6851B058D447A1DA6F4E5A8D330D95083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:02:4a:27:a2:c1:58:db:82:da:fc:7c:ed:
7d:01:bb:7e:4d:96:4e:0e:2c:7a:5e:82:18:90:97:
4a:be:39:b7:be:66:c1:a9:c1:b1:ae:e6:b5:3e:48:
a6:eb:0b:ff:75:19:df:a3:0e:94:ee:27:b6:bd:53:
d7:5f:3d:00:a5:9c:65:49:4e:c6:2b:f3:3c:70:71:
41:3f:b3:fb:cf:91:4d:69:26:de:ef:13:83:63:7c:
87:a0:7b:cc:00:04:02:38:f0:67:e4:8c:de:b7:fb:
d8:98:72:6a:8c:82:75:7d:5a:1b:26:3e:07:14:84:
3c:2d:1c:63:d7:ed:36:2c:32:6e:a2:dd:23:89:af:
09:60:f4:7b:10:3e:cd:8c:67:e2:ef:ff:54:56:77:
cc:16:e0:2c:b5:ed:7f:84:54:31:07:47:ab:e9:27:
86:37:50:6a:b4:95:85:e1:5c:fc:c7:4c:2d:6e:f1:
6d:50:e6:ea:40:f7:ce:09:3c:96:cd:f0:75:e8:29:
ca:59:1d:38:cd:23:f2:f6:aa:3b:bb:aa:c8:39:97:
2e:8c:af:56:4e:53:3d:12:13:85:dd:7f:09:a5:8f:
9c:a3:24:c2:72:e6:5f:ac:b0:84:1e:4e:eb:7a:c3:
16:40:d1:75:79:25:de:1a:92:29:45:9e:c5:5d:40:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:CF:D6:85:1B:05:8D:44:7A:1D:A6:F4:E5:A8:D3:30:D9:50:83
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31362e302f32332d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.16.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:51:56:bf:59:7a:0d:5d:be:2a:11:0f:d9:8e:06:82:7e:70:
84:90:42:4c:3d:4a:08:7b:ea:78:e6:a3:54:d4:6f:e1:ad:0e:
23:06:1e:f6:69:a8:00:63:b6:28:ba:f3:3f:a3:da:b0:4a:2a:
7a:a3:72:d1:3a:c6:95:34:85:36:4d:fa:86:51:a9:0b:0c:a8:
4f:09:64:ac:14:d0:d8:7c:2c:42:78:83:37:71:a8:c4:27:07:
e4:ad:16:1e:49:ca:97:92:51:c0:6d:9c:bf:a1:67:39:a8:da:
5e:bb:be:9e:8e:d6:c5:a4:eb:4a:8a:18:92:07:33:c5:ef:09:
51:40:47:3f:9a:07:65:d2:83:c5:9f:9c:79:94:93:91:69:de:
f4:60:bb:90:11:76:fa:b4:6f:a0:fe:30:78:04:67:56:53:be:
47:44:c7:b9:70:a4:36:b7:ab:0e:1d:6a:ab:96:65:64:06:b8:
3c:29:23:bd:56:65:eb:a0:48:3b:6d:63:09:3e:98:e2:a9:74:
74:ca:32:2e:7d:50:bc:1a:f1:3c:4c:81:4e:f2:99:f1:89:1e:
b1:4d:8b:dd:d4:53:29:43:bc:02:eb:8b:86:f9:82:f5:ae:72:
f0:d1:9c:fd:b8:c8:d1:c6:50:c1:26:be:73:f3:23:68:ee:fc:
52:b2:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org