Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33362e302f32322d3234203d3e20383334.roa
File: 3134362e3130332e33362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 8emr1PtIR+8MKmkbVv+nWAy+PV+rC/LEcMe7yZ3jAQU=
Subject key identifier: CF:39:45:14:2F:B7:E4:C5:DB:A1:36:5E:F4:5B:D5:CC:E7:D4:4D:BF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1870BFE69D75AB963C15D96B773B679C4DCB5BA7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33362e302f32322d3234203d3e20383334.roa
Signing time: Wed 27 Mar 2024 21:23:11 +0000
ROA not before: Wed 27 Mar 2024 21:18:11 +0000
ROA not after: Wed 26 Mar 2025 21:23:11 +0000
asID: 834
IP address blocks: 146.103.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 16:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:70:bf:e6:9d:75:ab:96:3c:15:d9:6b:77:3b:67:9c:4d:cb:5b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 27 21:18:11 2024 GMT
Not After : Mar 26 21:23:11 2025 GMT
Subject: CN=CF3945142FB7E4C5DBA1365EF45BD5CCE7D44DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:54:14:23:52:d6:ec:fc:d7:c0:ea:c4:9f:
84:0d:95:9f:b4:17:2f:7b:10:52:41:6c:d9:7f:9f:
96:0a:0b:99:47:4f:b3:7f:69:e1:f4:14:00:a7:fc:
b0:4a:fc:c2:e5:c0:fb:27:70:09:fd:af:1a:3b:6d:
8c:61:e3:18:97:14:63:b4:7d:29:a2:d1:95:25:94:
0c:48:64:02:dd:55:7e:89:29:c7:37:fc:26:fb:6c:
27:1c:61:38:81:0b:65:7f:4d:de:cd:63:32:98:39:
f1:9f:d0:16:05:0f:cc:5b:f6:a0:a8:09:d5:97:b6:
8a:be:62:e8:e1:fb:5f:39:9a:3e:b0:a2:2e:89:39:
4e:23:e7:8e:e8:c7:cb:65:bc:e5:86:be:17:a9:40:
b1:86:ed:25:07:50:84:45:da:30:b5:e5:ea:fc:01:
3d:bd:57:da:02:90:2d:73:82:7b:b9:97:8b:47:1f:
d6:e5:0a:ed:30:ed:83:21:5d:75:ba:f6:76:b5:ec:
5f:70:fa:78:0a:b8:d7:a5:b9:a8:14:32:b8:c5:d7:
85:db:e7:55:26:34:bd:ea:3f:cc:63:d3:05:a0:7a:
b7:9f:5a:ce:07:d4:8d:b4:94:ac:9a:f3:ba:03:98:
9a:05:7b:17:33:94:86:38:14:60:68:3d:60:16:22:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:45:14:2F:B7:E4:C5:DB:A1:36:5E:F4:5B:D5:CC:E7:D4:4D:BF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:f5:9d:e3:a2:2f:9f:02:42:07:c2:0f:24:39:2a:56:54:5e:
43:0a:b7:0f:99:c3:61:61:f0:45:3f:a3:86:8a:8f:14:60:4f:
0f:f2:b6:d8:9c:22:a9:12:71:6f:dd:18:38:87:d8:df:be:a1:
57:db:6f:af:6d:49:82:3e:99:00:fa:16:e9:af:ec:8e:1f:91:
6d:18:a5:0c:56:59:da:f7:97:d4:03:38:c9:55:bb:24:d9:45:
96:86:5b:ce:85:ac:76:b9:a3:47:e7:6f:59:83:82:e8:37:13:
71:4a:8d:23:57:cb:95:fe:ab:8d:f5:f8:5d:03:dc:8c:c3:f5:
87:5c:e2:ae:f1:5f:1d:18:f1:09:e9:de:c1:ae:e8:4d:f9:13:
6b:95:64:0e:20:3a:1d:bc:36:b1:e8:1f:75:c7:0f:9f:73:7e:
ff:c8:51:41:7c:ae:5c:c1:f1:78:c9:fd:8e:b4:82:ea:81:b7:
fe:08:03:8b:63:3c:bd:56:a3:d1:c7:99:3d:3d:30:89:07:6f:
7b:2b:d1:a6:27:2e:2b:87:84:46:59:b2:0d:46:a7:4b:1c:0d:
8c:b4:b8:82:72:a4:35:1a:e8:49:35:d0:f5:82:d4:f6:e8:c4:
af:a8:5d:8b:62:e1:47:05:69:cf:35:dd:1c:29:75:d3:04:cc:
bc:18:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 17:29:19 2024 by rpki-client on console-fra.rpki-client.org