Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34362e302f32332d3234203d3e20383334.roa
File: 3134362e3130332e34362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 1tbjwg7uy5foLlIdIvQp7JERFM9NmpThYZaY+E39ufo=
Subject key identifier: 35:59:C4:4D:FB:E5:7C:6F:99:AC:10:74:58:59:D7:B5:B6:EA:5A:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4C090ED61A92823680A074F9323436AF42A8405F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34362e302f32332d3234203d3e20383334.roa
Signing time: Wed 27 Mar 2024 17:41:11 +0000
ROA not before: Wed 27 Mar 2024 17:36:11 +0000
ROA not after: Wed 26 Mar 2025 17:41:11 +0000
asID: 834
IP address blocks: 146.103.46.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 16:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:09:0e:d6:1a:92:82:36:80:a0:74:f9:32:34:36:af:42:a8:40:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 27 17:36:11 2024 GMT
Not After : Mar 26 17:41:11 2025 GMT
Subject: CN=3559C44DFBE57C6F99AC10745859D7B5B6EA5A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:9f:97:3f:67:13:47:cf:91:a9:1e:09:84:
80:89:d0:f2:b0:97:3e:02:f3:a5:b4:e9:26:9a:3f:
59:75:38:fe:2e:1b:cc:76:93:7e:94:fc:fa:3b:3b:
a7:96:0c:dd:2b:05:2d:e2:a1:72:65:f8:e9:1e:bd:
ca:56:3c:97:ca:2f:b6:e4:79:0f:10:8f:b5:1e:f7:
d9:d4:a2:57:64:17:6d:f8:39:64:2b:ae:60:f1:42:
cc:89:87:dc:c5:5d:ca:43:26:4d:af:e7:40:b7:8d:
02:56:7d:bc:d3:aa:ec:0a:7d:9b:25:88:a2:01:5d:
bb:a2:7d:b9:67:f5:07:16:b9:c8:b0:36:74:67:c0:
ed:f1:93:ad:fb:85:a1:ff:d6:c2:a6:75:6d:13:89:
e6:7a:c3:d6:4d:d4:bf:ce:7e:a2:be:5a:d9:a4:d5:
a8:4f:de:1b:0c:a1:7a:ed:e9:e2:60:a6:38:5a:c6:
29:34:80:18:a4:73:4b:fd:b2:e1:69:c8:14:37:00:
b3:1b:69:4a:fb:56:2a:63:7e:84:cb:9e:a4:7f:60:
44:e4:3f:84:24:90:09:9e:46:b9:c3:fb:30:b1:f7:
5f:7e:ba:32:06:cf:24:df:23:7e:80:82:6e:1f:17:
95:c3:0e:a1:1e:8b:78:48:4c:07:5e:12:fb:22:54:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:59:C4:4D:FB:E5:7C:6F:99:AC:10:74:58:59:D7:B5:B6:EA:5A:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.46.0/23
Signature Algorithm: sha256WithRSAEncryption
02:36:3a:a3:64:65:10:68:81:ba:7d:b8:6a:ac:1d:ca:fb:b8:
39:bd:80:e9:9f:71:df:e1:b1:03:25:1a:ac:88:70:55:65:ea:
86:8d:3f:4c:e8:15:3b:df:d3:a2:0f:96:53:63:0a:3f:4e:ed:
f1:d2:6f:c5:a7:ab:28:2e:34:03:8b:79:6c:fb:e6:d3:ba:7b:
c3:2c:46:50:93:d2:95:0f:b3:ff:2b:45:9f:17:33:b3:9e:e8:
b7:c5:64:f9:5d:2c:58:80:3e:6f:57:96:37:0a:5d:da:c1:f7:
3a:be:fc:a3:8d:56:6e:c5:d2:79:8e:22:c8:b1:76:ce:ee:d7:
32:e5:34:36:bb:de:e5:b0:4c:8a:9f:45:da:8c:3d:e6:5f:02:
ef:ce:f8:50:fe:96:30:ac:06:f8:97:a0:bb:ac:55:3b:1a:df:
21:90:c9:0a:6b:01:1e:5e:65:0f:b5:93:60:e7:1a:b2:b9:cd:
6c:f9:44:c7:46:d6:e1:62:b1:eb:5f:ec:02:fd:e7:99:cd:9b:
9c:14:5a:28:f0:84:fc:3d:9f:ca:90:01:27:73:8b:19:6d:80:
b9:a6:a7:f2:ff:ce:1c:72:14:7b:81:ac:f3:5f:ea:67:51:ab:
41:a8:35:37:00:af:d9:58:b3:05:49:7f:a8:3e:48:dd:7f:a4:
01:49:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 20:21:45 2024 by rpki-client on console-fra.rpki-client.org