Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32322e302f32332d3234203d3e20383334.roa
File: 3134362e3130332e32322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 323nz0MffIQaEl5P3vCaxIUuXKxZgo6HWJkjgpM7K1s=
Subject key identifier: 3D:56:50:14:0E:AF:00:07:19:DF:70:82:4E:AB:DA:59:52:3F:EF:92
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3F62A2B3C85C961FE2979286FC8BFE2B5FCA9D8B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32322e302f32332d3234203d3e20383334.roa
Signing time: Mon 25 Mar 2024 10:12:47 +0000
ROA not before: Mon 25 Mar 2024 10:07:47 +0000
ROA not after: Mon 24 Mar 2025 10:12:47 +0000
asID: 834
IP address blocks: 146.103.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 08:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:62:a2:b3:c8:5c:96:1f:e2:97:92:86:fc:8b:fe:2b:5f:ca:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 25 10:07:47 2024 GMT
Not After : Mar 24 10:12:47 2025 GMT
Subject: CN=3D5650140EAF000719DF70824EABDA59523FEF92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:25:55:75:c4:b7:10:5f:c3:8e:8a:62:8f:
52:23:c5:49:d5:a8:4d:0d:2f:ad:d6:7b:54:f2:ce:
90:30:64:d9:8e:93:65:3b:da:7f:75:18:ec:78:3b:
df:cd:25:c5:5e:5c:37:fa:fa:43:ac:8d:fb:99:4d:
d8:74:ff:98:78:88:79:d9:fd:c7:0e:8c:63:69:2b:
3c:42:0e:10:20:27:b5:ec:80:18:e5:ff:2d:b3:29:
7a:0d:4b:8f:f5:57:e8:79:f0:bd:09:1d:7b:15:51:
7e:b6:f8:df:84:51:92:7a:45:98:0e:59:aa:5c:6c:
fa:20:e5:c0:33:38:ad:3b:d9:f4:d5:ee:97:08:c1:
c1:88:e9:ff:c6:64:1f:5c:67:b1:63:8f:33:fd:24:
0b:42:be:6a:14:9f:9f:cb:7a:42:c2:aa:a5:64:f2:
45:dc:65:93:76:63:3d:9f:73:e6:1b:be:af:d6:00:
45:00:eb:01:1a:6f:17:66:7f:ff:da:69:cc:96:55:
82:c2:ab:e8:f5:bb:f7:7e:47:25:e8:13:f8:af:43:
9c:76:f3:bb:53:da:65:63:3c:d9:21:14:5d:bc:81:
ed:fc:17:a8:d8:99:fa:7a:d6:a1:90:32:0e:02:3d:
52:98:38:b7:b3:c2:ae:60:a7:81:80:51:e3:73:19:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:50:14:0E:AF:00:07:19:DF:70:82:4E:AB:DA:59:52:3F:EF:92
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.22.0/23
Signature Algorithm: sha256WithRSAEncryption
40:35:94:a6:bd:65:bf:9d:bd:99:e3:39:c4:62:2a:51:29:38:
12:49:bc:5e:c5:06:f6:f4:63:cd:a8:f2:e8:cf:a2:1c:8d:13:
da:a5:56:6d:23:01:70:45:99:32:b9:2c:0f:fb:93:37:fa:45:
f2:00:fc:d2:79:68:bc:b2:54:1b:9b:c2:b8:c7:d6:35:5f:03:
85:2d:0f:bc:95:e9:0f:80:27:90:55:c4:7b:cc:45:0e:36:23:
53:22:47:d3:2e:a5:8c:40:4c:14:6e:ef:fe:bc:5b:5d:2b:1d:
0c:9d:48:fd:d8:d5:cd:36:22:a2:92:9e:f2:10:ce:c4:b6:a3:
11:07:09:fe:8f:ab:61:24:ce:dd:48:77:c8:7a:43:19:b2:f6:
3b:2e:79:33:ee:9c:f2:8f:10:7b:9f:a7:f0:cb:76:00:f7:fa:
53:e9:07:d0:c4:ac:04:84:0d:15:ae:30:9c:cc:e4:43:67:1d:
f3:51:94:87:a4:4f:e8:8f:f1:59:b6:49:85:ce:68:33:74:70:
af:e5:5f:c8:b3:63:05:16:a0:f1:93:95:f8:7a:7e:2c:3c:72:
c5:86:5d:e5:47:cd:90:b2:6d:92:bb:34:98:08:7f:95:ca:b2:
df:17:db:f5:ce:8a:d4:b4:44:f5:de:2e:f8:bc:7b:9c:34:eb:
2d:1e:65:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org