Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32382e302f32322d3232203d3e203632323430.roa
File: 3134362e3130332e32382e302f32322d3232203d3e203632323430.roa (raw, json)
Hash identifier: vxPPyq+WGPi7em3n7gUG+ukVMyzAiMKAN/aCfZZBTwk=
Subject key identifier: 61:40:36:28:F1:01:1F:C4:1B:37:F9:4F:39:03:96:5B:12:94:32:B1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 468D8505151DF46DA053689D8A498D15DD0382E5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32382e302f32322d3232203d3e203632323430.roa
Signing time: Tue 26 Mar 2024 12:08:27 +0000
ROA not before: Tue 26 Mar 2024 12:03:27 +0000
ROA not after: Tue 25 Mar 2025 12:08:27 +0000
asID: 62240
IP address blocks: 146.103.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8d:85:05:15:1d:f4:6d:a0:53:68:9d:8a:49:8d:15:dd:03:82:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 26 12:03:27 2024 GMT
Not After : Mar 25 12:08:27 2025 GMT
Subject: CN=61403628F1011FC41B37F94F3903965B129432B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:8f:0d:eb:2c:08:38:a9:09:47:25:f9:2b:
da:ef:7c:5e:55:29:99:d5:70:9f:0f:e5:b1:7f:11:
43:aa:ad:e0:d6:17:79:97:65:9a:b4:f0:71:e1:09:
4d:69:0f:8b:83:64:84:16:d4:79:c4:18:e2:2e:b2:
c3:d0:b8:47:aa:2d:c9:9f:b9:14:45:f3:46:5c:cf:
18:6b:96:6b:a6:18:a2:8a:2f:14:d1:86:87:b4:29:
a7:f7:6d:18:a3:4d:a6:4c:62:76:98:fa:d1:8f:83:
c3:e6:57:5f:0e:ed:9b:08:16:a8:75:db:d8:09:ed:
cb:57:ee:d8:b9:05:57:9f:3b:c0:f9:18:e0:b3:f9:
8e:52:d3:10:cb:0b:ae:19:03:98:b6:87:e6:22:11:
db:9a:f1:a5:b5:42:cd:0e:ae:9c:d1:48:e2:2f:e5:
87:7a:5a:d7:0b:07:7c:0b:7f:5a:7c:1f:3d:72:0a:
30:48:83:b4:ab:10:ca:51:06:a8:d1:4f:27:eb:0d:
6e:07:06:2e:94:b4:7d:02:c0:9a:dd:8d:39:96:b2:
24:61:7d:58:6b:4a:00:a9:e2:c1:35:78:04:82:4e:
a0:e9:58:03:08:e1:90:dd:41:65:59:4d:c1:ca:5f:
97:f0:cd:78:b6:6e:3e:44:84:a9:57:01:78:d0:27:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:40:36:28:F1:01:1F:C4:1B:37:F9:4F:39:03:96:5B:12:94:32:B1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32382e302f32322d3232203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:d3:7f:7f:17:23:a2:cd:e2:e1:48:3e:cd:52:6c:ec:1b:87:
8e:69:b5:92:fc:2f:bd:ac:0e:2a:98:b6:1c:1e:9a:c2:5f:3b:
67:4f:16:37:ce:39:8b:05:18:c8:47:be:ef:4d:fe:db:bd:94:
36:f2:2f:8f:2c:20:fd:9b:b7:1f:97:b1:1c:8b:a6:d4:28:8a:
76:df:46:9d:0b:49:ae:93:1e:0f:2e:d3:b8:12:7f:9f:01:26:
89:43:15:4f:69:0d:72:4c:b7:99:4b:5c:88:3e:a9:37:f2:c4:
c0:8e:e9:b5:9a:00:06:c5:bb:28:b0:08:71:80:0a:44:69:d8:
9b:0e:a9:29:d7:7d:8d:a8:e1:75:02:05:9d:e1:f8:a6:07:ee:
2e:14:25:36:c5:aa:f9:d4:b7:a2:86:d5:04:68:27:32:86:0c:
ba:eb:eb:5c:7d:a9:a2:d9:45:d7:9e:e0:b5:24:f9:05:1a:31:
44:64:7a:69:ed:3d:a7:09:ea:39:df:78:3c:61:8d:54:5d:5b:
9d:be:01:56:80:70:d3:b4:c9:38:3d:5d:57:7c:39:df:eb:70:
b4:ee:98:0a:23:63:fe:f3:43:ed:9a:a6:6b:84:6e:c0:57:3d:
18:34:10:ad:5d:bd:e9:db:e5:02:88:7d:08:ec:2e:c6:1f:23:
c8:98:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org