Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33362e302f32342d3234203d3e20343030383636.roa
File: 3134362e3130332e33362e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: RroJ3AmqavhjYXNyGgwzOnxEcnEHO6xog5R4NHBAw9I=
Subject key identifier: A8:98:AF:27:C4:46:A8:73:DF:CD:59:10:87:A4:27:48:C7:87:B8:F3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 64545A5B52E43E746E57A636A5B49B1972F76890
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33362e302f32342d3234203d3e20343030383636.roa
Signing time: Sun 31 Mar 2024 16:14:52 +0000
ROA not before: Sun 31 Mar 2024 16:09:52 +0000
ROA not after: Sun 30 Mar 2025 16:14:52 +0000
asID: 400866
IP address blocks: 146.103.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:54:5a:5b:52:e4:3e:74:6e:57:a6:36:a5:b4:9b:19:72:f7:68:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 31 16:09:52 2024 GMT
Not After : Mar 30 16:14:52 2025 GMT
Subject: CN=A898AF27C446A873DFCD591087A42748C787B8F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:71:70:93:94:eb:46:fc:d8:85:6f:57:05:
0b:f4:d4:8b:b1:ca:2d:74:7c:89:f2:ec:a0:64:e6:
01:2b:77:1b:85:75:51:22:eb:a2:12:95:2d:95:e8:
35:98:5d:f6:c5:19:63:29:03:a4:a0:be:a3:10:79:
76:f2:b1:e6:4e:1a:c9:a0:48:35:4f:bc:89:40:3a:
2e:10:9f:f2:6a:2c:c1:62:7f:ac:6c:64:37:76:ce:
ab:36:29:f1:a4:2c:d0:b7:da:39:e2:59:20:cd:ac:
4e:5e:94:1b:76:64:f4:f3:1a:b6:3d:aa:10:f5:27:
bb:4b:16:b0:42:23:49:1d:f3:06:72:5d:98:fa:1e:
08:bc:75:f9:27:8f:9e:ce:c4:ca:1a:66:85:ca:67:
8a:74:19:63:59:43:9e:47:a4:6f:2c:98:57:60:76:
bf:68:1e:01:19:87:dc:0c:15:53:8e:8f:1e:a2:68:
bf:99:6a:56:ab:a2:c1:ed:ed:ee:ee:1e:19:06:6e:
8d:a8:de:6b:bf:65:2d:7c:20:58:16:c8:d0:5c:54:
c9:55:ef:63:ec:f5:73:ff:1c:f8:d2:7f:67:d1:14:
f5:21:0e:73:29:1d:91:5c:51:96:30:83:e9:4c:ea:
a9:43:4a:c0:cb:33:05:bd:41:cf:ea:98:5d:2e:a1:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:98:AF:27:C4:46:A8:73:DF:CD:59:10:87:A4:27:48:C7:87:B8:F3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33362e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.36.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:28:d5:d1:07:4e:fd:1e:b9:4d:68:63:8b:ac:08:a1:75:46:
ee:38:e9:f8:71:0f:25:03:1c:87:ba:4f:e6:7f:97:43:73:0b:
ae:37:a5:b6:6a:e0:84:5e:2c:76:3c:65:c8:53:80:c8:04:cc:
65:7e:94:ff:71:11:11:7d:30:1e:ee:6d:60:10:7d:a0:3d:76:
c3:c5:bb:f4:f2:96:f4:37:6b:8a:e7:ca:92:f8:f5:ac:0f:e8:
1f:5b:ee:0a:6f:82:0c:17:9f:fe:97:a3:73:6c:b8:12:9e:b6:
de:ab:f4:65:a3:ec:c6:c2:42:72:74:f0:c0:43:20:fe:96:22:
71:df:2f:7d:d5:f7:8b:28:7e:72:98:86:65:f6:25:8f:93:05:
2c:d0:99:3d:40:57:2c:b7:a3:09:f8:3e:bf:f7:69:89:b2:e6:
92:a4:ec:18:79:e3:50:e3:7d:bd:82:0b:cf:1b:b4:1d:1a:cc:
5d:85:c9:84:43:0c:cd:e6:a8:c1:03:52:6e:08:3a:90:13:7b:
96:8b:df:96:9d:e8:6c:ae:9c:25:f5:9a:4c:26:ba:78:9e:e3:
32:48:f9:28:bf:82:23:30:4a:c6:c4:92:75:52:a7:e9:d4:65:
79:a3:ab:b2:50:05:e7:0b:e9:f1:9e:5b:b5:28:6a:4e:18:5c:
cb:35:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org