Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34302e302f32322d3232203d3e20323135333131.roa
File: 3134362e3130332e34302e302f32322d3232203d3e20323135333131.roa (raw, json)
Hash identifier: +Y6X0zpcVku1g7xUdC11CaSw2qpmPWnn3pwAygyvcr8=
Subject key identifier: 96:FB:D9:48:5E:B4:37:1C:DC:D7:CA:DE:89:9F:6F:F9:75:06:F3:7A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5F19597553CCEC5DE002DC71B2EBAA2B1848AA12
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34302e302f32322d3232203d3e20323135333131.roa
Signing time: Mon 01 Apr 2024 16:37:59 +0000
ROA not before: Mon 01 Apr 2024 16:32:59 +0000
ROA not after: Mon 31 Mar 2025 16:37:59 +0000
asID: 215311
IP address blocks: 146.103.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:19:59:75:53:cc:ec:5d:e0:02:dc:71:b2:eb:aa:2b:18:48:aa:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 1 16:32:59 2024 GMT
Not After : Mar 31 16:37:59 2025 GMT
Subject: CN=96FBD9485EB4371CDCD7CADE899F6FF97506F37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:a2:ff:3a:b7:53:14:81:fa:32:cc:27:b0:
85:1f:2f:92:4f:88:96:d6:a2:1b:a3:0d:bd:2a:a7:
86:c4:01:a9:e5:70:d6:7c:0a:52:de:3a:9e:9c:90:
4b:d2:b5:6b:bc:6c:cd:10:78:00:a4:40:e2:bd:8a:
88:78:2e:e1:65:a9:f9:28:32:81:49:3d:ce:66:d2:
24:56:87:32:d5:ba:db:c3:c9:56:a3:8f:08:90:7b:
cf:77:a1:50:d1:62:d0:48:03:07:e5:42:44:cb:49:
38:dd:bc:4b:f8:a1:5a:6a:7b:17:4e:5d:6c:0d:a9:
42:40:be:d2:5a:e3:8b:b8:f0:85:47:86:50:d6:0b:
0d:de:ff:d3:56:6c:b9:66:8f:15:ea:a7:e9:53:f2:
a0:12:58:59:57:36:2c:0b:e7:8f:58:89:db:a5:b4:
08:bd:6f:5b:e1:51:46:ce:c2:47:74:52:9a:11:08:
60:85:17:04:1a:5d:b7:f8:c3:56:df:0c:45:58:28:
f8:49:ca:f0:d9:d8:33:40:16:74:91:75:0c:39:b0:
de:37:0b:57:4e:bc:1c:f3:5d:de:ea:53:e7:ed:91:
79:9d:c6:a2:54:fe:84:79:b9:34:91:a6:94:c4:92:
75:ab:e5:9f:63:dd:4e:d5:57:3f:4d:f4:25:d9:4e:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:D9:48:5E:B4:37:1C:DC:D7:CA:DE:89:9F:6F:F9:75:06:F3:7A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34302e302f32322d3232203d3e20323135333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.40.0/22
Signature Algorithm: sha256WithRSAEncryption
02:ad:90:36:27:be:86:ac:99:99:61:20:34:a1:1b:7e:a7:f1:
86:28:37:fc:3e:5b:5b:1f:56:e4:ed:d5:8b:48:1d:ff:48:3c:
f9:69:05:ca:16:82:51:54:0e:13:d7:33:6d:c5:d6:95:d4:11:
76:be:c2:90:23:b7:84:32:f1:85:4f:ed:72:29:ad:bf:91:07:
45:f0:14:3a:4b:53:05:1e:fe:4f:76:0f:a2:7f:73:f2:59:07:
fc:15:08:d1:99:d8:7d:19:20:01:98:8e:5f:29:2a:aa:c9:9a:
4d:20:ea:79:00:87:66:9f:b7:41:e5:b0:38:ff:ae:82:af:93:
0e:d7:73:de:1c:9c:a5:92:42:4f:d3:e6:7b:b9:86:b7:b0:0f:
8d:04:ec:dc:77:0c:48:4d:78:16:da:82:c4:01:be:1b:99:0e:
f5:78:60:29:0c:3a:da:b8:34:cd:d0:f8:cf:17:d5:3f:93:ea:
4f:a7:28:d1:3b:fb:c6:21:da:bd:6d:d8:da:57:1e:a5:fa:47:
51:56:34:5c:0f:f1:2b:ad:4b:f3:96:d6:c9:da:02:5f:fc:f4:
b9:a4:0a:1a:c3:3a:04:7c:e6:ad:ad:dc:a4:2e:b9:8c:52:d4:
8a:b9:ac:30:4b:86:70:0a:9f:98:c2:a6:89:23:82:d3:5e:c6:
13:4f:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org