Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32342e302f32322d3234203d3e2035303635.roa
File: 3134362e3130332e32342e302f32322d3234203d3e2035303635.roa (raw, json)
Hash identifier: e3mlXkQ0NcN6krlUp1ksdLxzHJWxmw11UrdGU3PBb7s=
Subject key identifier: 5F:4B:00:31:80:D6:85:1C:56:56:C1:93:2A:A2:1E:EC:25:3F:DF:AF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 55996E45CEEC1E659B06DA9AFCE8C473C3AEB7EC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32342e302f32322d3234203d3e2035303635.roa
Signing time: Tue 26 Mar 2024 10:15:16 +0000
ROA not before: Tue 26 Mar 2024 10:10:16 +0000
ROA not after: Tue 25 Mar 2025 10:15:16 +0000
asID: 5065
IP address blocks: 146.103.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:99:6e:45:ce:ec:1e:65:9b:06:da:9a:fc:e8:c4:73:c3:ae:b7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 26 10:10:16 2024 GMT
Not After : Mar 25 10:15:16 2025 GMT
Subject: CN=5F4B003180D6851C5656C1932AA21EEC253FDFAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:8e:7d:c9:64:46:dd:80:63:9f:88:21:6e:
cd:ba:9e:b6:3b:a0:47:0b:b7:7f:f3:09:0b:91:71:
e0:b2:f8:b2:64:f3:6b:a8:91:b7:d9:00:ba:33:77:
53:58:12:c5:fe:20:70:bb:ac:2b:9c:49:87:fe:d8:
11:f6:39:77:11:a2:3a:c3:81:6a:c3:25:bf:a5:ac:
1a:8e:24:a4:3e:69:87:f7:09:2b:70:87:0d:03:44:
22:64:72:c3:45:c4:78:3b:b8:bc:b1:a2:1f:89:1a:
ed:1a:62:1d:89:82:3a:8e:39:fb:36:47:92:b0:b8:
cd:1d:94:ad:6b:46:e0:06:fe:92:08:db:55:b6:62:
cd:4a:22:f0:03:76:e7:02:71:e2:f9:48:5a:45:57:
19:17:7b:04:5e:bf:04:3b:49:f3:5c:20:bf:51:be:
0e:96:8c:e5:08:d9:c8:ae:29:ee:e1:2e:15:63:cb:
9d:8f:a4:b2:7a:5b:fb:78:c0:4f:98:29:56:74:a3:
f3:0e:0e:ab:05:0c:82:b7:ca:18:eb:bd:c1:bf:db:
de:a6:c0:5e:2f:cd:a5:31:fc:78:04:f9:6c:95:16:
ae:2f:63:00:57:3d:ae:c9:f2:7a:e6:47:46:37:33:
29:23:6d:d0:a8:36:f5:52:e5:d9:aa:3b:9b:c3:ce:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4B:00:31:80:D6:85:1C:56:56:C1:93:2A:A2:1E:EC:25:3F:DF:AF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32342e302f32322d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.24.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ab:c5:2e:bd:5c:56:4c:66:1f:17:0d:cc:29:3d:30:af:5f:
e5:69:af:09:c7:7d:8f:5c:32:a0:18:10:70:18:a8:cb:68:bf:
9a:00:a1:d4:e8:44:b4:89:66:d4:d7:72:6a:a9:ef:82:49:8d:
b6:ba:b5:8a:ca:31:5c:b2:0f:ad:07:4a:97:bb:c4:3a:cb:74:
b3:75:dc:af:d2:39:5e:08:bb:67:02:10:bc:81:6c:16:40:83:
dd:33:ab:2f:be:95:51:80:fe:39:3d:d4:57:28:ff:2d:0a:76:
16:51:2a:6a:8c:62:ee:be:82:63:c1:d4:8e:81:f7:b3:b4:4b:
5c:06:17:89:af:c5:94:c4:d6:17:47:e2:0e:8b:bf:c5:0c:6f:
a5:2c:9e:c5:3e:5e:08:fb:5a:08:43:c2:0a:74:98:75:86:97:
02:30:39:b4:bc:07:30:42:bd:70:b6:10:74:fd:21:0a:51:c8:
c2:90:b7:1e:d7:d8:44:c5:7e:68:cc:03:15:b6:1f:13:45:52:
31:1d:7e:01:ce:67:1b:49:4c:7e:f8:dd:8e:d6:e1:0d:a1:e0:
0f:e2:35:5a:1b:5f:b0:dd:30:05:30:f0:a0:40:ae:cf:ad:e0:
b6:7a:f9:b1:71:78:9c:4e:ed:01:3d:36:4e:e4:09:d3:e7:7d:
ee:24:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org