Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e342e302f32322d3234203d3e20383334.roa
File: 3134362e3130332e342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: qHPAyh/SGYAmr5oCcbV+sW6Z68V++grY69tj8lVA1Do=
Subject key identifier: F3:AE:2A:5F:D4:AC:64:79:C3:7C:93:E7:E6:E5:EC:9B:74:3B:D8:0D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 394C208BF31899422D5CBFC9769704F86C116F9B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e342e302f32322d3234203d3e20383334.roa
Signing time: Thu 14 Mar 2024 07:37:02 +0000
ROA not before: Thu 14 Mar 2024 07:32:02 +0000
ROA not after: Thu 13 Mar 2025 07:37:02 +0000
asID: 834
IP address blocks: 146.103.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 11:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:4c:20:8b:f3:18:99:42:2d:5c:bf:c9:76:97:04:f8:6c:11:6f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 14 07:32:02 2024 GMT
Not After : Mar 13 07:37:02 2025 GMT
Subject: CN=F3AE2A5FD4AC6479C37C93E7E6E5EC9B743BD80D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:f5:4a:cd:74:35:e7:aa:f3:66:f1:fd:5c:
07:f7:1e:ee:55:05:1e:32:a0:79:17:2b:7c:b3:37:
f7:b5:87:84:f4:a6:2e:82:cf:f1:ae:9a:44:01:99:
9c:f6:34:da:e4:a6:eb:35:a5:2d:d9:92:38:f4:6f:
1c:92:5a:84:e2:cc:8f:81:af:eb:71:96:25:ac:9f:
0c:7d:7e:ec:ec:a3:2e:70:c6:f6:12:bd:15:1a:05:
2f:af:50:85:6f:0b:4e:1c:27:02:e4:2a:7d:df:f4:
28:7a:fa:d8:90:aa:f1:8d:8f:5a:2d:57:eb:4f:97:
a9:ba:76:5e:4c:40:f0:a8:93:9a:ad:b2:45:b1:02:
1d:d4:e2:01:03:09:0a:c6:48:ba:f4:a4:64:b5:67:
ed:9f:7f:db:2a:11:b4:f0:48:16:6c:54:2b:48:56:
ee:b8:a5:f6:90:c6:5a:c1:2e:83:bd:9b:46:73:5e:
e2:70:16:fe:6f:76:03:d0:a3:c6:50:ea:21:3c:b2:
f9:6d:07:7e:90:75:45:15:c8:c7:d7:e2:4a:8d:a7:
ad:18:05:90:fc:b2:21:24:de:76:b9:c5:72:a7:ca:
72:37:21:20:5a:a6:70:45:7d:2f:6f:a9:c1:66:f9:
32:68:31:00:bc:ff:53:1f:2a:78:e0:12:ec:a1:12:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AE:2A:5F:D4:AC:64:79:C3:7C:93:E7:E6:E5:EC:9B:74:3B:D8:0D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.4.0/22
Signature Algorithm: sha256WithRSAEncryption
76:bf:f8:20:b0:b8:c7:f0:92:b8:48:d6:a8:73:34:56:e4:0f:
11:9a:44:4d:67:0a:bb:cd:8a:b8:a9:43:aa:fe:8a:af:61:37:
0b:87:2b:94:ac:c0:b2:ec:0b:ca:74:71:4d:56:3a:02:78:10:
68:e9:ea:8f:62:e3:17:50:d8:f8:f6:84:cb:ec:4d:23:cb:e3:
9c:eb:54:eb:b4:cc:a9:65:2a:36:88:25:df:33:72:bd:08:99:
a6:d7:49:9c:0a:84:be:88:d7:80:dd:41:53:76:76:37:88:3d:
81:91:6c:7f:20:06:d7:c9:80:fb:4b:99:2e:11:77:3f:0c:1e:
bc:f1:7c:fd:7a:02:78:7c:76:1e:e2:be:39:7c:56:60:a7:3c:
ae:1a:96:e6:53:ea:f0:46:eb:a0:af:a8:dc:08:08:6f:e3:76:
c9:fc:c0:5e:d5:3b:e5:b4:56:bc:c7:69:33:6a:d2:64:4d:e4:
50:d8:b3:b3:7f:e9:96:8b:41:05:d6:b6:85:c0:7b:8c:85:31:
ab:ad:49:6d:06:d1:ff:86:36:15:cb:a8:74:09:56:b1:0f:98:
63:b1:1b:c7:d5:1e:02:df:25:0d:38:08:ed:d0:68:b8:8c:cd:
97:42:e6:f1:c5:ed:4d:60:a3:0a:59:f2:fe:16:ca:dc:3f:93:
50:9e:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org