Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34342e302f32342d3234203d3e20313337353039.roa
File: 3134362e3130332e34342e302f32342d3234203d3e20313337353039.roa (raw, json)
Hash identifier: ozPCSscY4dkKrjMDmCRqKIIQlZmTIrv20Ah+xKV6Xz4=
Subject key identifier: 36:D3:0A:E5:CB:29:FF:65:F9:44:BB:A9:0E:FC:D8:BF:21:3D:FD:F6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4B0DAC60370DEB63E7EA09419841B6C2FAE35AE1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34342e302f32342d3234203d3e20313337353039.roa
Signing time: Fri 29 Mar 2024 06:51:53 +0000
ROA not before: Fri 29 Mar 2024 06:46:53 +0000
ROA not after: Fri 28 Mar 2025 06:51:53 +0000
asID: 137509
IP address blocks: 146.103.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0d:ac:60:37:0d:eb:63:e7:ea:09:41:98:41:b6:c2:fa:e3:5a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 29 06:46:53 2024 GMT
Not After : Mar 28 06:51:53 2025 GMT
Subject: CN=36D30AE5CB29FF65F944BBA90EFCD8BF213DFDF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e5:1b:f9:07:9e:49:d3:b9:6a:03:76:78:d9:
3b:c2:b7:5b:7e:6c:86:eb:b5:a6:2c:00:37:66:7f:
15:f6:15:3b:fb:b0:7a:95:10:4f:0d:6d:8e:a7:6d:
cd:4c:16:70:ac:72:e3:6a:1f:98:4c:cb:71:69:00:
24:39:8f:f4:ab:0d:35:d5:12:f4:d1:3b:8c:90:d2:
69:ff:0f:df:a3:1b:51:5f:d2:34:19:5f:2b:b8:61:
ef:f1:54:12:ee:4f:6e:ac:6f:4d:66:d5:72:2b:f1:
d8:41:34:d5:2e:5f:af:fc:d3:11:ca:d1:c7:d7:88:
84:72:95:73:9d:81:4c:b0:b5:5e:32:1e:3f:e0:70:
18:3c:4a:08:dd:d7:12:06:52:e1:85:4e:8a:92:86:
64:99:da:1d:ec:92:0b:26:86:f7:d3:00:6a:81:75:
fe:9d:c1:31:d6:c0:b5:20:9f:79:21:50:dd:6c:9a:
0d:52:49:a8:ca:cb:ab:b6:7f:5c:27:98:78:22:73:
51:42:18:00:d2:4b:0a:29:5f:f3:e8:19:2f:6f:05:
4b:fe:0c:85:30:d2:82:b7:6e:3d:10:b4:bd:59:0f:
41:b1:1c:d0:59:a9:fa:d2:d8:d8:ea:3d:29:c0:7f:
f3:69:7d:9b:12:9e:bc:28:b4:91:34:aa:7f:11:b2:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D3:0A:E5:CB:29:FF:65:F9:44:BB:A9:0E:FC:D8:BF:21:3D:FD:F6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34342e302f32342d3234203d3e20313337353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.44.0/24
Signature Algorithm: sha256WithRSAEncryption
62:51:a4:90:23:8b:a0:e8:f9:b9:41:c7:7e:a2:ee:98:e4:6b:
07:50:93:20:16:c8:78:ff:b3:b9:f1:19:fb:51:4b:34:58:4e:
b7:40:05:94:9d:22:8a:3f:0e:24:74:63:d6:65:da:4a:7e:d6:
52:f9:6b:51:21:8b:ac:6d:f9:78:6d:80:fe:e6:1f:46:02:6e:
db:55:8b:20:49:56:8f:73:36:0d:9b:d2:4b:56:e8:a4:6d:5d:
7c:20:96:cc:b8:39:33:84:eb:f1:16:79:77:10:22:b3:2e:da:
73:82:7f:ff:f4:31:dc:38:72:00:3c:e5:6c:ad:4a:e5:9b:6d:
09:8c:5e:0d:49:ac:61:8a:ae:b1:2a:a1:aa:0e:17:41:ba:e1:
8e:73:be:d8:db:1b:17:1c:ee:4b:53:5a:8c:b3:f7:ff:25:4c:
ac:3e:2b:cd:51:3e:23:9d:bb:24:49:8d:bf:94:80:2e:36:b3:
12:00:7d:0f:88:10:a9:59:06:85:1e:d5:8e:a7:32:75:05:32:
e7:76:25:1d:9b:8e:9b:67:95:9b:83:9a:3e:db:59:f6:94:16:
d5:95:2b:dc:fa:66:63:6b:19:09:47:10:00:a0:a2:66:24:2b:
ed:39:21:df:af:35:60:15:a5:cf:3f:a9:de:77:9f:57:a2:37:
c8:1e:e6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org