Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34352e302f32342d3234203d3e20323132323338.roa
File: 3134362e3130332e34352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: x15gVTCEqI+YXAtI3ewbQi0Q79dmhHHt0/WB1pZdxeY=
Subject key identifier: E4:30:B5:F0:62:3F:C8:BB:07:76:B3:5C:B4:30:C6:2E:D9:31:DE:0A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 74271AA67B99A7E5E92B94FCA7CA06F1519E6ECA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34352e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 27 Mar 2024 17:38:22 +0000
ROA not before: Wed 27 Mar 2024 17:33:22 +0000
ROA not after: Wed 26 Mar 2025 17:38:22 +0000
asID: 212238
IP address blocks: 146.103.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:27:1a:a6:7b:99:a7:e5:e9:2b:94:fc:a7:ca:06:f1:51:9e:6e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 27 17:33:22 2024 GMT
Not After : Mar 26 17:38:22 2025 GMT
Subject: CN=E430B5F0623FC8BB0776B35CB430C62ED931DE0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:62:61:ba:cb:60:66:70:de:9b:a3:a2:86:
02:74:df:c0:79:c8:5b:a1:54:f2:f0:c2:c5:57:9a:
2e:3f:78:53:27:6a:5f:bc:66:c2:3c:30:3f:f4:fd:
d7:da:7d:be:e8:89:14:1a:84:0b:11:7f:e0:88:e9:
03:e8:9d:b6:10:d9:1d:86:f1:17:35:d4:06:fc:65:
94:50:78:e9:70:cf:01:ef:13:ae:4b:19:7f:a8:66:
0b:45:f2:a8:bd:c8:b4:bd:19:05:82:8b:aa:90:95:
0a:76:4e:3f:bf:a6:9e:96:da:01:a6:7e:ff:3d:e0:
1a:14:26:02:d3:bf:ca:f4:ea:01:fe:e6:94:9e:7c:
8d:5d:62:40:7e:6f:eb:d4:6b:e4:19:72:66:c9:91:
7b:aa:a6:ff:e7:3a:b6:b8:db:c6:81:1a:ab:41:62:
42:11:fb:f9:1e:f0:89:59:7d:87:9e:72:80:9c:61:
f5:02:f1:42:32:69:f8:00:43:7a:ce:36:f6:e8:84:
5f:7b:a4:bf:93:cf:c7:1a:76:1b:76:1d:c2:42:be:
4c:02:db:fe:a6:45:00:77:6d:04:51:e9:87:97:79:
de:2e:30:dc:fc:e5:d5:dd:f0:65:1a:b2:76:a9:64:
3e:0c:90:44:58:38:07:a7:39:e5:80:d6:2f:15:d0:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:30:B5:F0:62:3F:C8:BB:07:76:B3:5C:B4:30:C6:2E:D9:31:DE:0A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.45.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5b:79:b5:fa:3b:a2:40:62:da:e3:70:7b:a5:c7:88:d9:d6:
6b:78:31:ca:6c:bc:de:00:3a:70:f6:2d:9a:4d:9c:9e:b7:04:
6d:b0:62:07:6e:67:3d:b4:11:17:ae:15:76:db:c3:ba:00:45:
02:12:51:25:48:95:b5:46:cf:23:19:66:02:dc:00:0c:9e:77:
18:f8:d7:07:ef:65:16:5a:05:41:af:25:ca:83:e0:f2:05:21:
ba:67:18:fd:44:b5:ac:1a:0d:67:8f:28:45:74:e6:ed:ec:d1:
2d:cb:42:e3:8f:5f:25:b3:fa:43:66:63:d3:dc:6a:ff:5a:dc:
87:05:8b:d5:73:71:ef:0d:97:7a:a4:7b:82:37:cf:61:f1:0d:
50:2d:dc:3c:e2:ea:8b:98:d0:e4:28:04:54:9c:44:24:d3:a7:
1a:00:80:3f:8e:be:58:52:3d:15:09:c7:35:60:d2:66:46:4b:
b8:33:af:a9:bc:e2:f2:32:52:35:21:a4:6e:a3:9f:b5:f7:bd:
2a:92:62:c0:1c:5a:42:5e:c2:42:71:14:57:08:7b:2e:6c:5c:
24:11:d8:5c:98:66:d1:4f:ff:73:74:17:05:af:60:d5:d0:e7:
70:06:d2:5a:bb:fc:40:8b:45:71:6b:0e:30:a4:d6:4d:a1:a1:
de:4f:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org