Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33342e302f32332d3234203d3e20323732363632.roa
File: 3134362e3130332e33342e302f32332d3234203d3e20323732363632.roa (raw, json)
Hash identifier: mJQ/TOQW/m27GnKLMg0umI9A8Ysvs0ZrxIlyh9DbI6M=
Subject key identifier: A8:15:88:52:72:7C:EE:C5:0C:50:2A:89:BF:D4:62:B2:05:A1:AA:5F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1AF421D27A8EF11EF624A932ED40FCBB4E68CD9C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33342e302f32332d3234203d3e20323732363632.roa
Signing time: Wed 27 Mar 2024 21:21:18 +0000
ROA not before: Wed 27 Mar 2024 21:16:18 +0000
ROA not after: Wed 26 Mar 2025 21:21:18 +0000
asID: 272662
IP address blocks: 146.103.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f4:21:d2:7a:8e:f1:1e:f6:24:a9:32:ed:40:fc:bb:4e:68:cd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 27 21:16:18 2024 GMT
Not After : Mar 26 21:21:18 2025 GMT
Subject: CN=A8158852727CEEC50C502A89BFD462B205A1AA5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:ef:49:37:4d:7e:3a:c5:dd:3c:21:9b:53:
2c:d2:54:9e:88:14:bf:c4:e8:6c:82:26:44:5a:e3:
62:05:d1:5a:1d:c9:96:32:9b:89:41:d2:15:45:e9:
8e:ee:4e:19:24:40:87:e6:70:e3:b7:7f:b7:c6:31:
3d:91:c6:32:ea:8a:54:5b:ef:61:a5:61:9f:db:61:
46:92:a3:3a:ff:4e:f3:e6:19:e0:d2:22:c9:fa:42:
78:f1:49:b3:86:a4:e9:8f:33:cb:91:18:8e:73:b6:
6f:d8:e3:bd:4c:b4:97:07:75:a9:f0:05:7a:32:aa:
e5:75:00:67:93:b1:6c:99:70:19:09:4a:86:a7:2e:
c9:ee:55:df:17:b9:20:af:84:b9:5b:b4:a5:78:dd:
9e:34:43:a3:58:43:06:dd:66:4a:01:c8:57:7e:9b:
81:5d:3f:0c:92:54:e5:95:bc:56:fa:6b:d1:59:58:
05:c2:d4:0c:a6:b2:11:77:4e:91:fd:70:b7:22:bf:
11:5b:ed:bf:34:01:21:54:dc:e2:83:fc:41:4a:c5:
86:e3:47:d8:ee:8a:8a:6a:3b:70:a7:13:e6:1c:c6:
53:a1:dd:77:6d:eb:a0:4c:43:50:80:1f:0a:e4:99:
7f:f6:3d:6d:d3:4d:28:a1:e7:a5:a6:d8:e7:19:16:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:15:88:52:72:7C:EE:C5:0C:50:2A:89:BF:D4:62:B2:05:A1:AA:5F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33342e302f32332d3234203d3e20323732363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.34.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:e8:c7:64:57:9c:15:c1:48:94:54:76:bb:eb:65:ef:45:c1:
c1:62:d8:c2:48:fc:a9:f5:59:e7:74:88:8f:1e:b0:5c:3b:1f:
3a:5a:57:f9:58:5f:99:8a:4a:33:ca:72:9a:fa:be:c0:40:1c:
eb:1d:7b:9c:9d:b5:af:7d:d1:d9:0a:f3:0c:9a:19:a4:d9:9b:
86:ad:84:d4:1a:d3:54:62:50:9c:47:e2:2c:d8:3e:c1:5a:38:
4f:d0:9e:13:1d:0f:6c:43:91:59:77:3c:1b:37:f7:1c:97:97:
9e:bc:c4:bf:42:90:8d:dc:a0:49:09:f6:89:93:55:0e:0e:6f:
7e:0d:3f:54:0b:36:cd:71:f5:59:ae:a5:fc:ff:ff:9a:57:71:
0b:95:c8:2c:92:a8:88:c6:98:34:45:ef:90:05:c5:40:e5:33:
05:7e:9f:a3:4d:33:1a:5f:eb:44:90:90:c3:bf:13:93:e4:97:
3c:da:69:4b:3a:77:c7:d8:de:53:95:4d:84:29:85:c4:e1:2f:
e7:05:9a:a2:b6:b3:e6:7f:4f:bd:f6:db:6c:3c:54:e4:82:77:
0e:c1:64:df:3a:11:f5:7c:ba:16:33:5a:4a:c7:62:28:0c:83:
73:fe:30:28:cf:ed:e9:53:c8:6f:b1:fa:14:eb:50:49:1c:0c:
c0:24:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org