Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31392e302f32342d3234203d3e20383334.roa
File: 3134362e3130332e31392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8Vv5EXy5/SwLMEdcdwZC1F/w/6mr4oro8PVdUs8EDuA=
Subject key identifier: 14:9B:BA:1B:1D:C3:D0:30:BE:B2:D0:87:97:24:A2:20:5D:FD:D4:96
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1A4C8C6400EDA1265AE05D5FB49D645F24B55120
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31392e302f32342d3234203d3e20383334.roa
Signing time: Thu 21 Mar 2024 09:41:01 +0000
ROA not before: Thu 21 Mar 2024 09:36:01 +0000
ROA not after: Thu 20 Mar 2025 09:41:01 +0000
asID: 834
IP address blocks: 146.103.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 00:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:4c:8c:64:00:ed:a1:26:5a:e0:5d:5f:b4:9d:64:5f:24:b5:51:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 21 09:36:01 2024 GMT
Not After : Mar 20 09:41:01 2025 GMT
Subject: CN=149BBA1B1DC3D030BEB2D0879724A2205DFDD496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:5f:fc:fc:24:b6:36:25:4e:a2:cc:4e:1f:
3e:75:16:fd:b8:36:11:59:b7:df:ee:53:d6:35:40:
09:54:18:a7:dc:96:7d:8f:ff:cb:c7:af:73:5e:f9:
15:f8:d4:0a:47:c2:ac:9e:0f:64:09:c8:c3:ca:23:
f9:f2:a5:7f:f7:75:da:8a:c1:0c:b8:6e:5b:6d:e5:
91:81:c6:67:3f:b7:a4:9f:87:d0:8f:43:1e:d2:94:
e4:07:fe:ba:55:a5:c8:17:bc:28:e4:07:e6:71:51:
30:23:e4:b4:87:ba:ea:83:72:8b:b6:d1:40:20:e1:
ac:51:45:31:dd:57:34:1e:d2:bc:29:e9:45:0b:13:
43:ca:c5:fe:40:58:67:b7:4e:88:34:0b:79:3e:10:
9b:71:6e:3f:4b:db:7c:34:82:e0:c2:ce:cc:6b:1c:
cd:96:a0:ed:7e:d0:48:f6:2e:18:4b:27:e8:5d:59:
d0:88:4d:9a:ef:77:10:f3:da:a1:18:cb:fb:70:fd:
e4:a8:f5:67:d8:8f:ad:34:7d:1b:98:23:75:74:9d:
98:fe:ea:5e:df:a4:be:8b:38:59:93:da:ec:39:b4:
1b:2d:a6:a0:50:99:16:e4:18:4e:2a:51:c1:26:9d:
82:f0:ae:ac:b4:37:77:6f:55:0c:9a:87:1a:50:f2:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9B:BA:1B:1D:C3:D0:30:BE:B2:D0:87:97:24:A2:20:5D:FD:D4:96
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:59:96:cb:34:50:ae:89:15:10:c4:40:5c:1a:ca:ac:0c:ed:
36:e0:8c:3b:9c:59:2d:7b:32:49:fd:29:82:36:f5:a9:68:cb:
2a:ed:f6:f6:81:69:e6:7e:57:63:cc:4f:9b:d6:e6:e9:d7:ad:
f1:fc:c5:a7:67:51:9a:c3:f1:90:cd:d3:43:30:89:e4:bc:80:
77:f4:b3:c4:b8:7a:59:ef:39:4f:7a:a0:99:a3:40:88:a7:d1:
0a:52:59:4d:7c:8b:f6:5f:d9:cc:b7:b1:64:49:00:e8:6a:b2:
ea:e3:a2:98:d7:9d:c8:1c:92:be:40:e3:2c:7c:b3:94:d8:20:
40:e8:ab:38:b6:d8:ff:ef:f1:a1:ab:4a:f9:74:d5:33:ed:6f:
72:93:cb:d8:a3:9a:57:68:6c:03:fe:98:b0:a8:f7:6d:ca:ce:
f4:ba:6c:a0:75:c8:b3:c6:a4:8b:da:c1:fc:28:33:15:81:1f:
0b:49:67:e2:5a:09:05:dc:8a:72:48:dd:d8:49:4d:f4:0e:7a:
2f:d7:ae:55:e3:f7:6f:8d:8b:40:b6:a3:29:ed:02:db:92:7d:
1b:46:5d:35:3a:fb:9e:78:2e:af:1e:2c:c1:23:0e:ef:bf:61:
02:d1:f5:8d:4e:ea:9f:80:ad:62:6d:2d:d7:c2:21:06:ac:c0:
13:6b:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org