Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33322e302f32342d3234203d3e20323130313634.roa
File: 3134362e3130332e33322e302f32342d3234203d3e20323130313634.roa (raw, json)
Hash identifier: N7w/r3Zyp7PQ4CpHnsMXdNv9VGoUQHCwzvsU4+rmDB0=
Subject key identifier: 74:FC:20:4F:DD:AF:97:5D:1A:F5:E2:C2:16:E6:25:9C:61:4D:80:6B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 45385932B3C92F6E7A502E95721065C26BBC6C79
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33322e302f32342d3234203d3e20323130313634.roa
Signing time: Mon 01 Apr 2024 13:50:38 +0000
ROA not before: Mon 01 Apr 2024 13:45:38 +0000
ROA not after: Mon 31 Mar 2025 13:50:38 +0000
asID: 210164
IP address blocks: 146.103.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:38:59:32:b3:c9:2f:6e:7a:50:2e:95:72:10:65:c2:6b:bc:6c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 1 13:45:38 2024 GMT
Not After : Mar 31 13:50:38 2025 GMT
Subject: CN=74FC204FDDAF975D1AF5E2C216E6259C614D806B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:46:c8:68:28:9f:a3:ac:3b:32:32:69:63:
8e:5d:a7:a8:27:fb:b1:93:f1:9b:5a:52:49:bb:04:
20:fe:a7:e5:90:62:65:ba:d8:f5:28:a0:9c:67:c9:
96:64:62:7a:26:c5:11:bf:af:de:38:6a:64:32:0d:
9b:6d:95:db:55:55:a6:d3:4c:dc:78:3e:05:4c:19:
57:87:bf:31:c1:be:e7:f7:11:a8:7d:23:2d:43:ed:
11:31:fa:ff:c1:b8:7b:bc:55:c7:67:03:9e:57:82:
91:14:67:9f:e5:31:a2:74:20:7e:f5:bc:ef:75:cc:
4d:ac:44:1b:0c:b5:db:ca:cd:c9:dc:65:9b:35:b2:
3c:6d:ff:7f:62:23:f6:40:67:3b:52:50:82:11:ca:
50:35:6e:84:5f:91:48:0a:d7:07:15:99:72:0b:41:
09:2f:f6:50:6a:f7:33:91:1b:8c:45:f6:9a:69:df:
41:fc:26:b4:c3:d6:87:46:1b:53:15:a2:8b:bf:f7:
a4:96:ce:9a:93:f8:bf:a4:06:1d:73:ed:6b:27:4f:
3a:d8:a6:c8:00:1a:24:87:88:a3:de:43:e2:c9:5b:
5b:ad:c0:bb:bd:2f:4e:f6:fd:57:94:45:c3:c4:4e:
17:22:08:3b:3b:f8:03:7e:97:26:b9:0a:5b:6c:e9:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FC:20:4F:DD:AF:97:5D:1A:F5:E2:C2:16:E6:25:9C:61:4D:80:6B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33322e302f32342d3234203d3e20323130313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:44:26:1c:93:40:59:91:ce:ec:ee:ad:08:74:d2:b8:a3:3e:
14:f4:8a:52:6f:38:68:ef:77:07:04:01:78:61:bb:b0:5f:4c:
da:ab:89:65:99:b6:3b:5e:e2:4d:6a:d9:11:a8:b6:87:a3:7f:
1d:ed:d0:08:66:51:19:fa:24:b6:ce:1d:0f:7d:9a:32:6c:74:
ce:72:1b:56:cb:aa:40:11:68:89:c5:f4:4f:be:70:1f:2e:66:
36:c0:f8:ac:d7:4c:5d:b5:cd:b2:ed:4e:e0:0e:37:48:b0:13:
c1:37:ba:31:b9:23:da:5d:9e:68:af:e4:98:77:15:71:a8:49:
be:a8:55:d4:21:14:04:76:80:a6:02:50:e7:cc:a4:55:42:ab:
56:a6:96:fa:cf:54:fe:13:3c:93:55:f6:b9:35:5b:02:b4:67:
cd:6a:81:4d:7c:cb:80:49:b0:73:80:83:05:69:3b:f7:f2:80:
49:53:bf:5e:8b:df:4c:a4:a9:ef:8f:d5:50:eb:af:b8:65:f4:
b7:69:88:b4:cc:00:50:69:21:85:c0:7e:a4:19:e1:ad:b2:10:
d1:40:d7:3a:90:17:49:fa:cf:c5:c2:b4:6f:4e:9d:f5:71:da:
18:a2:e7:c7:93:02:44:10:d8:46:5a:38:0c:64:44:c3:2b:02:
26:80:62:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org