Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33382e302f32342d3234203d3e203135343430.roa
File: 3134362e3130332e33382e302f32342d3234203d3e203135343430.roa (raw, json)
Hash identifier: j5BYjYLspewNiretvdsuOsOldIlqdIBRgbuw+eHeAXk=
Subject key identifier: 65:18:4B:40:C3:06:F2:00:DF:26:BB:06:7B:F5:9F:35:32:EE:45:4D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 230E701EBCEE9EB401951FD1E472E4D4FD9DF264
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33382e302f32342d3234203d3e203135343430.roa
Signing time: Mon 01 Apr 2024 08:59:28 +0000
ROA not before: Mon 01 Apr 2024 08:54:28 +0000
ROA not after: Mon 31 Mar 2025 08:59:28 +0000
asID: 15440
IP address blocks: 146.103.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:0e:70:1e:bc:ee:9e:b4:01:95:1f:d1:e4:72:e4:d4:fd:9d:f2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 1 08:54:28 2024 GMT
Not After : Mar 31 08:59:28 2025 GMT
Subject: CN=65184B40C306F200DF26BB067BF59F3532EE454D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:4b:b9:ce:56:ea:b4:f4:b8:9f:59:2a:7a:
27:63:c7:f7:41:4c:67:92:fa:51:de:52:8f:b5:11:
2c:6e:b8:f3:ff:f5:a8:5a:18:7c:5f:2d:eb:9d:ab:
48:e8:d1:bd:92:f1:eb:32:f3:72:d0:43:e0:c6:94:
4e:9b:2f:13:f0:5a:3d:b9:ae:17:a2:8f:49:b5:dd:
82:b4:2f:08:9a:1c:5a:d4:42:ab:b5:94:13:cf:a6:
92:cd:82:b1:f7:cb:c2:39:98:15:32:9f:77:a8:1e:
b1:cc:85:e2:9d:26:68:7c:48:a7:8f:0e:e7:be:d7:
f8:67:c1:d4:59:15:f1:88:b2:0e:9f:a8:93:7c:32:
0a:a6:f1:03:5b:0b:58:e6:8e:6d:4a:19:5e:ab:c9:
f5:1b:f1:1d:44:bd:37:36:2d:d4:f6:f7:73:c6:6a:
a3:85:82:b9:df:93:73:1a:19:2a:4d:d3:0d:a8:95:
5e:06:ad:b6:ab:5b:ac:6e:cf:12:d9:49:dc:cb:c6:
70:bd:e4:68:5e:e3:ac:2b:c5:d4:4d:82:b2:6f:ed:
4d:92:ef:89:e3:0f:ea:fe:59:cd:6a:95:b3:4d:6e:
03:1f:51:6f:63:54:ae:fb:29:66:d0:88:49:57:7c:
08:41:ad:87:a4:5b:7f:7c:d0:f6:3c:5c:de:f4:4e:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:18:4B:40:C3:06:F2:00:DF:26:BB:06:7B:F5:9F:35:32:EE:45:4D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e33382e302f32342d3234203d3e203135343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:be:f2:47:a2:1c:cd:27:88:fd:69:b5:5e:e4:ac:b2:85:36:
e8:53:a8:db:ea:2f:4b:85:6d:26:d1:b4:12:a2:80:3d:f9:9f:
72:86:2d:0f:6c:23:d7:4f:d9:5d:23:e8:b2:07:40:11:33:01:
65:10:10:fd:ac:a8:22:40:04:c5:8e:c6:20:c8:ec:a9:91:ba:
55:a7:0d:17:be:62:6e:db:28:da:b2:f7:0e:67:35:0d:8c:f6:
c5:36:cc:c2:83:b9:b3:e5:e6:5a:fc:08:48:ff:c6:03:56:2b:
1f:d7:75:4a:67:29:f7:76:4e:cb:c2:60:34:bf:a0:c6:36:62:
5d:16:fa:93:3f:4d:52:74:f8:aa:d9:41:47:79:5d:5e:fe:65:
c0:23:9d:21:e2:91:c4:21:ce:ec:3c:12:1d:ba:e6:bb:0a:c7:
87:09:c5:c4:77:d4:e9:6a:16:07:72:57:57:aa:d1:19:6e:79:
32:b1:db:1a:8a:19:95:28:e0:86:c7:9c:56:66:2a:7a:e6:47:
9f:e2:28:2a:9c:6c:ec:be:00:ea:85:12:3b:cd:54:18:63:84:
c9:85:b6:99:0b:a3:77:43:4f:bf:e2:8f:30:2e:c9:c6:8f:b9:
97:0b:6c:a5:ea:63:38:69:f8:16:4b:7f:08:1c:04:06:af:92:
4e:5b:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org