Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33372e302f32342d3234203d3e20383334.roa
File: 3134362e3130332e33372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: M9qzEUZtxi+WL8u5u70Fu/wNUB2DEAayCwTv7lCrthE=
Subject key identifier: 5C:69:60:3E:CE:27:4C:74:40:4B:12:A2:0E:37:70:B8:D3:2B:63:ED
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 50E274CCF5CDACADC05EE87C4DFD8A1A13FA1F02
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33372e302f32342d3234203d3e20383334.roa
Signing time: Sun 31 Mar 2024 16:15:32 +0000
ROA not before: Sun 31 Mar 2024 16:10:32 +0000
ROA not after: Sun 30 Mar 2025 16:15:32 +0000
asID: 834
IP address blocks: 146.103.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e2:74:cc:f5:cd:ac:ad:c0:5e:e8:7c:4d:fd:8a:1a:13:fa:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 31 16:10:32 2024 GMT
Not After : Mar 30 16:15:32 2025 GMT
Subject: CN=5C69603ECE274C74404B12A20E3770B8D32B63ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:48:6a:ab:ef:f1:70:af:ca:43:2c:c8:49:
3e:28:e9:06:37:f7:83:11:2e:3f:6d:10:7e:7c:a5:
03:57:79:4e:23:65:2a:4e:14:4f:3d:39:ce:4b:3e:
b4:c6:1e:8d:13:94:82:be:a9:bd:6b:e3:d4:e5:80:
6b:be:70:2d:5a:4c:51:5f:e9:15:ec:23:21:1c:14:
d0:2d:3e:00:fb:e1:f2:73:85:fe:67:94:df:d6:79:
5d:2f:94:ad:24:39:79:22:bb:68:5d:42:3a:da:35:
08:c5:24:3d:69:fb:0e:b4:f0:f8:95:60:5c:42:19:
73:8c:10:3b:24:1a:84:fe:23:d7:df:70:0b:1a:a8:
d8:25:dc:1f:69:c0:46:49:e8:d9:aa:f5:97:31:14:
96:d8:c3:2f:38:07:fd:ea:cb:e1:fe:d6:55:bd:23:
d9:dc:a1:a4:50:58:57:e1:d0:df:43:ef:3b:08:53:
cf:1a:5b:10:48:e0:43:27:96:d7:52:b0:12:90:b8:
ee:47:eb:78:6c:d3:f7:9b:fb:06:da:42:63:e3:09:
f3:eb:43:c3:88:f3:7c:aa:03:52:90:89:95:c9:83:
1e:ca:04:27:af:9d:eb:5c:25:79:79:3a:fd:35:c4:
fa:fc:d2:59:05:4a:7f:37:2f:78:18:55:68:cd:e5:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:60:3E:CE:27:4C:74:40:4B:12:A2:0E:37:70:B8:D3:2B:63:ED
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.37.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fb:62:69:be:f0:35:5d:a2:59:74:43:a1:20:3d:bf:8a:42:
db:45:6c:c4:95:82:c8:db:d0:20:25:0e:e8:a6:73:d9:0c:eb:
5b:18:4c:e5:0d:29:75:ef:a7:29:73:b2:be:da:66:eb:e5:4f:
2b:7b:fe:86:a2:ff:57:ae:35:49:08:aa:2b:43:de:8c:62:19:
68:ce:16:cd:e8:46:32:5a:58:be:04:f1:ec:b3:0a:ad:a6:95:
97:6a:f3:10:b6:32:c2:67:6d:ee:39:d0:9b:1a:49:1a:18:3e:
ad:6b:d8:68:53:02:c1:29:43:64:30:7a:01:4f:71:4a:f9:7e:
82:3d:ed:15:3b:cc:b3:f3:eb:1a:9e:42:64:0a:0b:68:c2:c2:
f2:cf:9e:0a:77:f2:a9:9e:56:af:01:e4:14:01:3d:4d:51:2a:
b7:ff:26:15:16:e9:f4:c3:a3:0b:0d:71:d3:a6:c3:91:0d:a1:
28:e4:62:0e:9a:76:8e:dd:bb:54:43:1d:f9:1d:19:24:c4:ce:
9e:c0:25:fd:eb:8d:f8:a4:6c:ef:3f:86:a7:b4:ae:53:cc:57:
65:3f:c1:65:c0:a9:b2:58:5b:fa:94:82:10:67:23:52:dc:4d:
44:a4:51:d2:f8:99:8c:c4:7f:97:1b:48:6c:90:ab:02:1b:28:
68:6d:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org