Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31362e302f32332d3234203d3e20383334.roa
File: 3134362e3130332e31362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 4y8tyVlTYJH2717IrOixD3+DEoHhesNyX+BKLC+VMlA=
Subject key identifier: 36:5D:1B:F3:AF:5E:47:55:4B:AF:DE:2B:7F:B9:68:3C:1A:F7:E7:18
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 30F7CC2C3854B4A915A20642DF937043E7357B2A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31362e302f32332d3234203d3e20383334.roa
Signing time: Thu 21 Mar 2024 09:41:01 +0000
ROA not before: Thu 21 Mar 2024 09:36:01 +0000
ROA not after: Thu 20 Mar 2025 09:41:01 +0000
asID: 834
IP address blocks: 146.103.16.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 07:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f7:cc:2c:38:54:b4:a9:15:a2:06:42:df:93:70:43:e7:35:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 21 09:36:01 2024 GMT
Not After : Mar 20 09:41:01 2025 GMT
Subject: CN=365D1BF3AF5E47554BAFDE2B7FB9683C1AF7E718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:d9:1e:83:6b:67:27:5c:8e:03:d6:5f:6c:
cc:18:87:7d:09:8b:e0:1a:b9:f3:25:88:73:ec:3c:
cc:2f:b0:51:66:bc:87:5c:cd:a8:c9:6f:72:1d:54:
a2:62:f2:e1:14:16:e2:07:b1:eb:c5:a6:5f:4e:d2:
fc:32:3e:65:aa:33:1d:81:9d:d1:29:46:0a:a0:ec:
03:09:58:d4:cd:64:a0:85:59:fb:71:7e:6f:b4:ad:
9e:7b:3b:56:8b:f8:42:db:71:ec:bc:69:12:30:bf:
a5:ad:c9:84:f8:a3:f1:78:59:81:54:20:15:c8:13:
ad:46:a6:91:ca:bb:44:f8:f1:7b:28:60:0d:97:c5:
c4:98:2d:50:4b:67:24:ff:6f:14:1b:10:cb:14:a9:
38:57:69:70:fb:3c:29:fb:cd:ea:b4:09:ec:1d:9a:
ca:46:42:51:5a:0e:3d:16:ac:d7:3d:b6:3b:02:48:
97:a9:bc:c2:0a:d6:d3:a8:7d:54:b2:76:ca:56:48:
6c:13:1b:e5:a2:61:9c:2b:08:98:92:2f:ac:83:15:
cc:d0:6f:3a:0b:e1:29:9f:b9:8b:94:d0:5a:53:88:
70:98:44:5f:87:8e:63:d4:26:46:07:9d:cd:f1:78:
3b:eb:44:2a:eb:52:d4:47:b3:24:b4:02:97:00:90:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:1B:F3:AF:5E:47:55:4B:AF:DE:2B:7F:B9:68:3C:1A:F7:E7:18
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.16.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:0b:12:3b:be:ee:b5:c0:a4:d2:57:1b:3c:53:38:1b:4b:92:
50:b0:87:8f:55:31:78:b0:f2:7e:57:e3:66:7e:e4:b6:48:06:
79:14:c6:cf:15:5f:f0:6b:bb:ed:2e:c5:15:60:84:c2:d8:e8:
17:3c:0d:5a:47:4d:ba:4d:17:a3:82:db:df:a0:47:75:5a:47:
54:96:a6:75:c0:19:ff:1d:50:10:85:4c:ab:64:8b:9b:b6:3c:
3f:4b:d5:46:7c:d8:8e:6e:f4:2a:8e:e4:1f:64:89:2e:5a:ce:
36:0e:05:9f:40:e3:3d:bf:4e:5a:90:61:fd:2e:3b:cd:b8:02:
4e:7a:0f:75:10:ad:ba:40:7b:87:94:5f:23:f6:5d:bd:76:b9:
18:32:61:0b:df:27:f1:be:f2:0d:8f:6d:ee:72:6d:30:34:09:
58:a0:6f:e5:03:0f:fa:e5:64:7a:1c:78:71:fa:20:d7:29:bf:
4f:9c:83:fa:30:b6:c6:44:21:a2:c8:82:2c:bb:96:2c:b6:15:
a0:89:c5:d9:0a:48:9f:27:21:ae:c4:52:ce:2c:8f:a8:49:16:
a9:98:5d:52:d3:c9:40:2a:62:be:b0:7a:ce:0c:c8:1e:40:bd:
59:a2:8d:f7:4e:c4:f9:49:02:cc:a4:cc:34:3a:8e:ef:73:82:
0a:7d:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org