Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34362e302f32342d3234203d3e20323031363730.roa
File: 3134362e3130332e34362e302f32342d3234203d3e20323031363730.roa (raw, json)
Hash identifier: 4jZrYBYLDvpjl0qQv4XbHn9OdUtRNPEeazicc3w3M7M=
Subject key identifier: 9B:44:CA:BC:F3:48:DC:06:EA:6E:32:3F:D0:00:EE:EA:E1:10:D8:3E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 298BCD454A16A0DCE2B8EF984FD0D5AD84FE44D3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34362e302f32342d3234203d3e20323031363730.roa
Signing time: Wed 03 Apr 2024 16:14:41 +0000
ROA not before: Wed 03 Apr 2024 16:09:41 +0000
ROA not after: Wed 02 Apr 2025 16:14:41 +0000
asID: 201670
IP address blocks: 146.103.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8b:cd:45:4a:16:a0:dc:e2:b8:ef:98:4f:d0:d5:ad:84:fe:44:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 3 16:09:41 2024 GMT
Not After : Apr 2 16:14:41 2025 GMT
Subject: CN=9B44CABCF348DC06EA6E323FD000EEEAE110D83E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:6e:cb:85:ea:3d:f2:bb:2c:ce:90:fe:82:
88:e6:3a:75:a1:0e:8a:c8:d6:5f:b1:2e:23:9e:cb:
6f:4d:10:f1:16:35:ee:dd:64:77:03:c5:79:41:a0:
9c:cf:be:36:8f:08:11:26:bb:2f:9e:74:7b:87:56:
66:78:b9:45:a7:c2:97:38:c9:1f:d0:c2:a6:da:fb:
52:e3:14:81:90:90:3f:42:01:18:ef:bc:c0:22:4d:
58:48:bb:f6:a9:98:e8:bc:ed:d4:d6:e0:f5:f4:fc:
ef:91:9b:f4:f5:5f:46:a0:ae:5d:d8:a1:d4:f4:76:
1f:87:b3:7e:c3:d5:30:4d:8d:bd:9a:fe:e2:df:be:
c2:f7:08:12:45:8a:99:35:23:64:fb:72:ff:ea:a1:
d8:2f:03:dd:be:cb:8a:4b:3d:00:ee:42:ae:aa:18:
ad:22:2b:2a:f5:89:32:9e:2d:a6:3f:ad:96:12:e6:
24:25:3a:a7:80:5a:53:11:b5:a6:4b:e8:e3:0e:af:
25:2c:b8:07:39:1b:a5:f7:d9:e1:a0:51:c6:12:7c:
d3:dd:36:9e:42:e6:ee:c4:c1:99:28:4e:0e:1e:79:
53:c8:06:88:dd:f1:ae:6d:80:eb:a2:0a:2a:50:34:
e4:31:77:95:a6:f9:6a:9b:f6:16:fb:c7:18:28:d4:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:CA:BC:F3:48:DC:06:EA:6E:32:3F:D0:00:EE:EA:E1:10:D8:3E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34362e302f32342d3234203d3e20323031363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:2b:f5:33:eb:83:d7:74:df:11:8b:f8:88:c6:fc:d8:08:a2:
5b:ae:23:af:b6:0b:7b:3c:79:9d:32:75:68:b2:6f:14:03:c9:
27:10:c2:0f:ba:f8:4d:ce:38:b8:4b:21:27:02:a5:04:13:9b:
b4:5a:e6:94:56:14:51:a2:cb:ea:ee:ae:fe:de:d3:67:5f:2b:
b9:4a:a0:8c:8a:0b:df:66:aa:c0:05:c0:b1:f4:ec:a4:a7:80:
42:17:fa:37:bc:0e:96:e1:d2:1b:ca:f5:bc:97:e1:c1:ef:31:
ad:8d:53:af:ed:b8:de:aa:ce:f2:5d:7e:a4:38:d3:bc:45:ac:
27:16:e3:bd:4c:4b:6c:ca:74:d2:40:55:fb:bb:bb:db:b1:ac:
c4:1d:ab:a1:3b:7a:55:84:fd:c8:39:b1:b9:75:06:c4:1c:a0:
b0:af:38:05:01:26:78:23:8e:45:8c:ce:e7:61:fe:8a:d9:a8:
53:86:ea:6e:01:ac:fd:27:07:6b:dd:8f:0c:c3:8c:de:ca:f7:
20:1e:82:ac:df:37:a9:11:56:2d:d1:74:9c:37:9d:d1:8c:4e:
cf:78:e6:c5:b2:a2:0d:a6:1f:06:37:14:9e:60:68:d5:dd:b1:
2c:44:09:0a:62:7e:ad:90:d0:63:15:c6:84:47:44:75:11:1c:
36:32:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org