Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32342e302f32312d3234203d3e20383334.roa
File: 3134362e3130332e32342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: 3DAqoHs/LUdL2JJI+dVW2MHIg/CF5ybF4Uf4osD59k8=
Subject key identifier: 89:69:0B:40:F8:13:98:C5:9B:7E:63:E1:76:6F:B4:EE:5B:89:70:6C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6CE162E56DB89B92BBA865A05F73928C19D8A48A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32342e302f32312d3234203d3e20383334.roa
Signing time: Thu 21 Mar 2024 09:41:01 +0000
ROA not before: Thu 21 Mar 2024 09:36:01 +0000
ROA not after: Thu 20 Mar 2025 09:41:01 +0000
asID: 834
IP address blocks: 146.103.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 10:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e1:62:e5:6d:b8:9b:92:bb:a8:65:a0:5f:73:92:8c:19:d8:a4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 21 09:36:01 2024 GMT
Not After : Mar 20 09:41:01 2025 GMT
Subject: CN=89690B40F81398C59B7E63E1766FB4EE5B89706C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:49:10:93:0b:ae:aa:9b:70:cf:85:61:73:
c0:3a:b6:7d:ac:b0:52:81:28:1c:98:20:5d:14:cc:
49:9a:59:8e:af:da:ba:67:68:05:f7:00:c2:6b:bf:
c8:92:d9:0f:1f:b8:37:79:bd:2f:58:ff:63:96:28:
cf:06:1e:9d:4d:e1:d6:84:bc:b0:5a:a2:13:0b:41:
41:4a:b1:76:86:f7:76:34:41:82:b1:66:47:6f:36:
1f:8a:1f:41:d5:1d:ef:bd:34:b5:c6:1c:ed:a3:a6:
b8:f7:05:51:87:17:05:e8:bb:5b:6b:f3:85:0f:84:
b6:6e:71:71:22:82:6f:b7:fc:cd:a9:28:16:be:81:
5e:b4:6d:15:83:4c:a6:7b:a6:ce:a1:f9:a5:7b:fe:
b3:69:6f:ee:dc:9b:36:ed:4d:f9:00:9a:3b:df:13:
79:10:1d:95:84:ac:83:9c:13:eb:d1:e1:0b:b9:da:
a3:fb:f9:a0:ee:e2:86:33:48:ce:67:32:b8:e2:1e:
28:69:26:2b:ac:4c:a1:0f:04:ac:83:be:a4:fd:0d:
07:0d:ac:d6:4a:3b:bc:7e:8f:1d:0c:f3:c6:6b:76:
be:bf:68:3b:34:f1:f5:55:0b:1d:f5:9a:2b:a2:89:
1e:f8:ab:f0:6a:00:92:97:ba:79:ca:c8:4c:38:19:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:69:0B:40:F8:13:98:C5:9B:7E:63:E1:76:6F:B4:EE:5B:89:70:6C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.24.0/21
Signature Algorithm: sha256WithRSAEncryption
13:ed:f5:a9:de:e6:1d:ee:c2:cc:68:62:16:89:74:c0:e2:86:
a2:9f:e9:6b:e1:fd:9a:14:9f:1d:e4:49:39:b9:53:95:30:42:
f1:ab:5c:ac:c5:3a:a2:8a:ce:3d:00:84:12:38:6c:cb:fe:a7:
4f:0b:54:3f:a6:0f:75:ce:8c:b3:4b:42:83:f7:e0:da:d5:fb:
38:6d:3a:7f:6a:62:9d:47:fe:96:14:0f:15:c3:11:a9:d9:f8:
b6:ed:64:b6:83:f2:2c:13:2d:00:17:a0:27:ca:39:ce:d4:75:
35:e9:6f:e2:50:d1:ac:6f:df:b5:1b:ed:ba:72:35:86:64:62:
5e:39:a9:ff:ac:44:d8:43:84:1f:32:f5:e7:2b:f1:9e:aa:1c:
56:61:34:ad:8b:ed:b3:5c:2f:c6:5c:8a:08:35:84:98:e7:06:
86:cc:5e:e2:37:5f:46:cc:b9:c7:50:37:8f:6a:9d:42:33:7c:
67:8b:5f:8b:ad:b8:b3:8e:69:53:70:36:60:9c:48:1d:4b:c4:
eb:80:63:7d:51:a2:25:ec:f9:a3:ec:2c:49:d2:8c:d7:ed:fc:
e3:0f:20:f9:e1:5f:bd:f9:ef:2a:f1:13:c8:74:43:1e:ca:85:
45:12:fd:f4:7c:8c:1e:20:77:94:61:d9:62:37:2c:13:40:11:
2f:4b:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org