Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34342e302f32342d3234203d3e20383334.roa
File: 3134362e3130332e34342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pDq4bhwh6nTYmpNsxVgdVd3t9mvUgstN8DeKrUwy7yM=
Subject key identifier: 90:CF:78:12:4D:EE:4B:BF:51:C6:46:1C:12:CB:D8:A2:B1:D3:20:92
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0D750881B7380375CE0A7C2D8B6B764EC9F3A643
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34342e302f32342d3234203d3e20383334.roa
Signing time: Wed 27 Mar 2024 17:41:11 +0000
ROA not before: Wed 27 Mar 2024 17:36:11 +0000
ROA not after: Wed 26 Mar 2025 17:41:11 +0000
asID: 834
IP address blocks: 146.103.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 06:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:75:08:81:b7:38:03:75:ce:0a:7c:2d:8b:6b:76:4e:c9:f3:a6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 27 17:36:11 2024 GMT
Not After : Mar 26 17:41:11 2025 GMT
Subject: CN=90CF78124DEE4BBF51C6461C12CBD8A2B1D32092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:14:57:fc:7e:42:0c:74:63:c7:63:5e:b7:
e9:23:8e:a5:11:f3:af:69:30:d2:de:a2:e9:04:a0:
fb:08:1b:5d:75:59:e4:07:c4:df:b9:b5:56:7e:ca:
55:fc:77:47:fb:b9:fc:08:ea:cc:77:12:ea:c3:32:
95:21:1b:06:c8:58:1c:19:58:e6:3d:c4:b2:99:3b:
d5:53:b0:7a:46:b2:f4:01:e0:df:24:23:21:76:a2:
18:cc:c6:30:e1:93:cd:e3:5c:9f:5c:57:c4:6f:7f:
36:53:99:c4:e3:fe:ac:6c:25:75:21:93:33:00:8a:
de:e1:28:d4:65:70:57:e1:67:45:24:88:8b:fe:90:
e4:5f:9b:ca:c1:39:05:e5:fb:1e:29:d6:61:56:76:
7f:15:b2:c9:65:58:9e:0c:3c:0c:7c:e9:2e:33:65:
40:fc:98:5b:47:b3:bc:ed:8d:97:fb:45:2c:98:ce:
0c:73:fa:ae:91:85:46:5c:f9:2c:07:60:1d:1e:13:
9f:5f:e1:c3:86:13:8f:e3:30:27:60:e5:62:93:8d:
9a:26:5c:05:ca:34:40:db:74:5b:9a:aa:37:61:4f:
e0:c5:2f:e7:a8:47:09:26:bf:90:19:52:85:fa:5e:
91:32:66:d9:e5:90:cc:a3:0f:03:41:e8:a0:13:3b:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:78:12:4D:EE:4B:BF:51:C6:46:1C:12:CB:D8:A2:B1:D3:20:92
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:98:21:63:14:3d:1e:f1:77:db:59:7f:bf:82:d1:e3:65:a9:
b5:4b:63:26:5a:84:3a:61:66:52:2d:5a:71:1c:76:0d:85:0d:
50:40:eb:76:af:ef:3b:57:33:28:73:48:46:35:ee:77:b6:f5:
79:20:f9:59:da:ff:ea:80:1a:e2:92:aa:27:37:99:98:e1:7f:
01:58:c4:81:1f:79:f8:92:a6:99:3c:23:bd:91:8a:7d:fc:62:
95:33:c9:53:ce:aa:10:81:a8:cf:74:c5:f9:20:5e:11:69:1b:
8e:40:3a:ac:77:2a:58:ac:22:67:bc:3c:5f:99:2f:41:a1:e2:
fc:22:e6:43:8a:26:4e:1a:95:6a:74:e5:80:22:0c:ae:04:1d:
73:d6:a3:5d:21:09:f7:d2:e3:eb:36:0c:2e:4b:35:04:cb:4f:
16:58:7a:b7:ea:b1:5a:45:26:db:e7:35:f1:c1:38:23:f4:f7:
82:d5:dc:8a:02:a2:91:11:4b:b3:c5:b5:2a:aa:46:0e:96:e9:
62:2d:65:ae:cf:1b:c9:6d:97:67:0c:08:7d:77:46:a2:d0:a4:
34:d1:e7:aa:45:39:c2:33:0d:ea:6f:0e:6b:47:44:37:6f:07:
13:37:4c:a2:c9:02:5b:fb:63:ea:d3:81:b3:04:49:13:3e:f9:
19:04:08:9e
-----BEGIN CERTIFICATE-----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Generated at Fri Mar 29 07:36:15 2024 by rpki-client on console-fra.rpki-client.org