Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33322e302f32332d3234203d3e20383334.roa
File: 3134362e3130332e33322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: PsllLgixOU3VtsIZc9L6dgK6fiI3lfZyyrQBFwMO8LQ=
Subject key identifier: 9B:6A:F8:EE:B3:4D:EA:06:BD:E8:DC:91:80:11:8C:47:A1:FF:32:5D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 12111A75D7EB986D6906AAF0E23E6B92F6B3D26E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33322e302f32332d3234203d3e20383334.roa
Signing time: Wed 27 Mar 2024 21:23:11 +0000
ROA not before: Wed 27 Mar 2024 21:18:11 +0000
ROA not after: Wed 26 Mar 2025 21:23:11 +0000
asID: 834
IP address blocks: 146.103.32.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 13:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:11:1a:75:d7:eb:98:6d:69:06:aa:f0:e2:3e:6b:92:f6:b3:d2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 27 21:18:11 2024 GMT
Not After : Mar 26 21:23:11 2025 GMT
Subject: CN=9B6AF8EEB34DEA06BDE8DC9180118C47A1FF325D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:0c:ce:54:2c:d0:3c:92:07:33:07:fe:65:
07:8e:c1:9e:26:69:6f:e2:8b:22:d3:bf:77:66:7a:
75:67:58:73:a4:c9:3c:95:66:d8:3f:83:86:3f:8a:
50:5d:10:34:e5:38:57:03:ba:62:64:28:c6:4e:ed:
be:6c:e3:1f:db:73:47:0d:3e:85:43:ab:4b:f2:00:
45:80:28:14:0c:b9:12:76:23:79:2f:ea:77:06:f4:
86:4a:86:cf:7a:b0:50:23:0e:fc:91:f4:c0:62:db:
8e:d4:69:04:23:33:ba:42:bc:34:2e:4e:25:2d:c3:
76:8b:a7:16:6f:79:97:d9:b7:22:2a:c2:9f:c4:52:
61:b1:ed:2b:91:5b:eb:09:ef:0c:fd:50:24:b8:51:
37:93:d5:c2:36:88:4e:9d:00:9e:d9:f8:d9:c3:87:
69:5f:0c:b3:20:e4:3b:b8:7b:35:94:0b:e7:3b:07:
8d:43:36:02:20:76:b2:18:f2:d0:f2:d4:10:ef:a0:
5a:86:e2:5d:3b:1f:42:3c:06:2b:68:b6:10:ff:c4:
67:19:57:d1:ac:0e:4e:e2:f9:87:ce:ad:c3:f1:b4:
f3:1e:b6:ac:2b:8b:f9:c2:1d:31:98:b8:e7:f1:0f:
09:31:99:ec:d0:36:f7:ac:5e:4b:7c:37:70:00:88:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6A:F8:EE:B3:4D:EA:06:BD:E8:DC:91:80:11:8C:47:A1:FF:32:5D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:56:7a:d7:2f:9f:5a:1a:91:f3:51:b0:f2:86:2f:6d:39:6b:
6e:ec:73:8f:aa:10:97:6d:20:1a:95:2e:97:d0:aa:54:e3:be:
7e:49:88:95:f9:25:64:53:20:01:7f:cc:1f:de:7d:4c:51:27:
2f:82:ac:ee:0a:8f:6f:ca:8d:81:b1:b7:cc:a6:e9:90:e3:06:
24:a4:ff:51:70:fc:73:92:27:89:73:6a:e2:92:3b:1e:7e:a8:
c8:72:24:77:04:5d:e7:5c:3f:85:1f:dd:23:72:7e:3a:3b:ad:
50:54:d9:dd:49:d9:85:1a:a1:ac:3c:ec:fe:24:6a:06:80:4d:
56:54:05:3c:fa:91:2b:c9:14:32:ee:3d:71:d4:67:bd:8c:7e:
b9:2b:c2:7a:1b:9a:79:e6:ff:d7:86:d2:14:cc:8d:99:c5:9d:
dc:54:e0:6b:79:92:f8:56:2c:32:2d:3a:86:1d:a8:7d:9f:00:
f9:94:ad:55:dc:62:d5:1a:96:5d:e7:1f:c2:c9:85:56:04:b8:
d6:56:46:0b:44:46:16:21:e9:50:38:5c:1c:be:70:0a:4e:1f:
b8:09:cf:f6:c7:62:ec:77:21:89:13:6a:cc:bf:29:a5:31:72:
dd:c3:e5:9c:94:09:f1:08:55:9e:01:8c:92:91:3d:76:5a:a7:
19:d3:96:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org