Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33322e302f31392d3234203d3e20383334.roa
File: 3134362e3130332e33322e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier: MnE5M4OpGkVHOdPL2n+QLLNphzm9xRmUOIHxQDUeJ2o=
Subject key identifier: F1:EC:1B:28:B3:D5:53:F1:10:8C:52:C9:FD:30:98:CC:9B:9B:43:47
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2D18ECB40260A23677C1355C66DF489AFDD5FC5B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33322e302f31392d3234203d3e20383334.roa
Signing time: Thu 14 Mar 2024 07:37:02 +0000
ROA not before: Thu 14 Mar 2024 07:32:02 +0000
ROA not after: Thu 13 Mar 2025 07:37:02 +0000
asID: 834
IP address blocks: 146.103.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 10:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:18:ec:b4:02:60:a2:36:77:c1:35:5c:66:df:48:9a:fd:d5:fc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 14 07:32:02 2024 GMT
Not After : Mar 13 07:37:02 2025 GMT
Subject: CN=F1EC1B28B3D553F1108C52C9FD3098CC9B9B4347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:31:65:fa:ae:e8:9f:c9:3a:07:c4:84:79:
7d:08:ad:89:30:9c:c4:ed:c1:13:5c:b2:9d:5c:2e:
09:b5:d1:64:5b:03:d6:74:12:5e:cc:23:0a:d3:a5:
d3:06:8f:13:0a:3a:0e:0d:8a:18:ff:0a:18:47:36:
5e:19:7c:97:57:56:ee:d6:4d:fe:5a:0e:28:d3:8c:
e1:1f:e1:8d:04:8f:5b:e5:cc:ca:e6:f4:ee:72:52:
e8:cc:68:ab:02:8c:29:50:cc:c0:a5:8e:6c:b2:f8:
52:32:40:b2:d9:34:86:c0:7e:cc:3b:4c:8b:0e:59:
e0:d4:e4:a4:b7:66:6d:c7:cc:be:71:d8:61:af:91:
4f:65:93:06:fe:e9:71:e6:e6:b8:f6:d0:9b:02:d9:
53:cc:e0:dc:af:f5:da:52:60:e9:49:1f:c8:af:a2:
93:98:07:81:22:02:0c:26:95:bd:a9:a2:7e:00:f1:
0c:d3:ea:0b:a1:85:0a:9e:b0:a3:be:d3:82:60:f3:
06:ee:c9:7b:1b:25:2a:82:7b:a8:d0:ac:e2:52:33:
d0:a7:b8:14:e9:af:6e:94:8c:a9:b4:d7:87:85:e3:
b5:a6:84:35:0c:81:ca:de:f1:2c:9c:9c:e3:a0:b7:
3b:7a:25:a0:2f:aa:b0:bf:31:5c:00:f1:29:72:f8:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EC:1B:28:B3:D5:53:F1:10:8C:52:C9:FD:30:98:CC:9B:9B:43:47
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33322e302f31392d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.32.0/19
Signature Algorithm: sha256WithRSAEncryption
03:6c:25:46:c2:f3:d7:76:8e:c3:38:83:7d:c9:9f:77:2c:a0:
7f:94:89:42:b8:8d:ee:43:fe:c5:76:93:14:5e:32:2f:92:d5:
23:32:93:54:3a:b2:d6:c1:b1:08:a0:4f:ea:e9:bc:3d:e8:e9:
58:5c:fe:e2:6f:ea:b8:8d:6b:4d:94:ad:cf:05:db:47:ab:39:
16:ad:51:6d:cf:32:93:ed:ba:b0:f6:b4:b7:7d:e3:ec:ae:89:
87:96:3d:14:b8:41:c1:f8:64:7b:15:0f:65:60:58:c5:19:90:
4e:e1:c9:64:06:dd:f1:9e:26:ac:23:54:bf:51:da:0e:80:5c:
19:0b:d4:38:a5:fc:c6:a5:c5:dc:f0:b1:05:bb:b9:47:c1:db:
fb:9b:5d:f0:8a:51:0f:4b:42:e6:55:95:df:fe:58:a3:d3:77:
71:3f:88:01:45:c6:a0:6e:f5:a4:92:01:67:54:f4:3c:41:8c:
57:6f:98:a9:02:69:a8:f6:30:8b:f3:4c:1a:18:d7:aa:04:c8:
36:66:36:c7:24:2c:91:67:1a:4f:49:6e:5c:a3:c8:8c:a9:be:
29:b5:9a:9f:1b:e4:74:c2:7f:e5:ab:b6:bd:6f:2c:6d:11:a7:
0a:1c:4d:6c:cc:69:09:87:13:a1:c7:8d:e4:f5:ef:61:99:84:
32:ca:bd:98
-----BEGIN CERTIFICATE-----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Generated at Tue Mar 26 14:51:06 2024 by rpki-client on console-fra.rpki-client.org