Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32302e302f32322d3234203d3e20383334.roa
File: 3134362e3130332e32302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: vfF4Dlfg36o9fMF1XEUEtLo9NwWa2u3aGiDkxiYwTTs=
Subject key identifier: 14:5E:53:B8:9C:2E:1D:C5:CB:F7:EC:33:FE:E9:AB:ED:F0:D0:64:2B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 730655744B115214A25EEDCB881D5F9F5849C9F8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32302e302f32322d3234203d3e20383334.roa
Signing time: Thu 21 Mar 2024 09:41:01 +0000
ROA not before: Thu 21 Mar 2024 09:36:01 +0000
ROA not after: Thu 20 Mar 2025 09:41:01 +0000
asID: 834
IP address blocks: 146.103.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 10:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:06:55:74:4b:11:52:14:a2:5e:ed:cb:88:1d:5f:9f:58:49:c9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 21 09:36:01 2024 GMT
Not After : Mar 20 09:41:01 2025 GMT
Subject: CN=145E53B89C2E1DC5CBF7EC33FEE9ABEDF0D0642B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:92:e0:6b:b7:ca:a2:6f:42:77:2e:79:67:33:
ee:18:29:71:9a:4a:20:02:23:69:f8:c8:8e:f8:3a:
be:88:9a:01:af:61:86:96:f0:16:14:30:4b:4f:35:
8b:a3:b9:e5:3f:08:a0:9d:d6:66:cb:9a:59:64:5e:
43:0e:b8:7e:fe:79:d8:9e:68:cd:fe:56:09:d5:d1:
c4:6d:e7:46:c2:41:05:4d:72:07:fe:cd:68:1d:74:
ea:bd:ab:71:54:d8:bd:46:90:dd:3b:1f:3b:92:11:
3d:d0:fb:f3:6d:b0:5c:ee:85:bf:e2:2c:af:2c:30:
9f:ca:f8:1e:e9:ca:ed:ce:80:d9:1d:c6:0b:de:fa:
11:fb:10:8a:60:6e:a0:9b:8c:b1:6d:17:f2:a1:25:
27:e3:7e:97:5f:a0:07:d3:27:15:c6:1a:ec:06:ba:
36:05:ee:72:8f:76:90:cb:55:ed:56:23:b9:b9:6b:
53:43:e5:4b:0e:82:47:e3:7a:cc:d9:dd:39:3e:ea:
d1:3d:ec:50:4d:d4:78:fd:22:67:7f:7c:d1:52:e4:
7b:e8:0b:3d:8b:5f:7b:8c:c0:39:ff:7a:05:9b:d6:
ae:69:b8:a3:a5:8f:02:37:c0:01:6e:d5:1b:e2:13:
f8:d7:38:ed:34:9c:91:81:ef:9b:82:84:14:8c:19:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5E:53:B8:9C:2E:1D:C5:CB:F7:EC:33:FE:E9:AB:ED:F0:D0:64:2B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.20.0/22
Signature Algorithm: sha256WithRSAEncryption
80:c6:32:77:6d:07:40:39:fb:ee:1f:10:4d:de:20:b9:de:bf:
56:67:56:19:39:4a:c6:5d:0f:ac:2f:62:d3:25:49:6a:c4:f3:
78:27:d6:b1:c8:76:22:d1:44:f6:c5:dd:59:e8:5f:76:7a:01:
75:55:83:93:6f:50:6c:fe:c1:57:18:9f:f4:32:79:fb:e8:0b:
c8:68:f8:bd:f6:67:ed:4a:a8:4a:f3:11:ea:49:c1:73:67:d0:
67:1a:c1:d7:fe:0d:a6:42:a8:aa:ab:58:1e:2c:18:95:18:5e:
a7:03:01:7b:19:19:8d:0d:85:cd:18:ef:cd:f6:87:75:0f:d2:
67:ae:14:ef:0b:26:00:c8:6c:09:a6:8b:51:22:2f:59:aa:d8:
45:29:8c:9c:b3:57:a4:f3:6e:05:1e:1f:8e:f8:cb:1b:7e:e3:
3d:f5:1b:7c:7c:2f:2b:ed:8f:bb:03:09:0b:95:56:78:8c:76:
7d:12:40:0e:fe:f0:2d:e0:dc:15:6c:a6:17:0b:e5:07:8d:a3:
81:1c:81:bf:eb:58:4f:4f:51:08:e8:00:ba:5a:25:91:29:4c:
85:c2:3e:c1:77:bd:6a:18:75:b8:f5:7f:c5:60:23:3d:dc:a0:
bc:3e:ea:99:26:fd:e3:85:41:58:d8:f6:ba:d9:79:46:49:58:
7e:46:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org