Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35362e302f32312d3234203d3e20383334.roa
File: 3134362e3130332e35362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: 4R7LgdBiTCWGeUGjnmH2foWDO5K9JvUgWs3EX12Jro8=
Subject key identifier: 30:71:F4:A4:48:B9:50:B7:6A:3E:4C:54:0F:2D:FF:52:9B:67:C0:EF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4C91ED939EEFF50858E98BBC8E4AF8FF65D21C31
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35362e302f32312d3234203d3e20383334.roa
Signing time: Tue 26 Mar 2024 10:16:02 +0000
ROA not before: Tue 26 Mar 2024 10:11:02 +0000
ROA not after: Tue 25 Mar 2025 10:16:02 +0000
asID: 834
IP address blocks: 146.103.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 23:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:91:ed:93:9e:ef:f5:08:58:e9:8b:bc:8e:4a:f8:ff:65:d2:1c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 26 10:11:02 2024 GMT
Not After : Mar 25 10:16:02 2025 GMT
Subject: CN=3071F4A448B950B76A3E4C540F2DFF529B67C0EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:55:e8:5f:12:0b:ed:82:5e:18:66:da:88:
bd:76:67:d1:f9:59:b3:20:54:5f:34:ea:80:57:e6:
55:de:29:31:b2:55:d1:a8:89:96:69:8e:00:41:cf:
85:6b:ec:d4:ff:d9:70:22:e0:4d:ad:5f:a7:be:fc:
ba:53:d8:f0:80:eb:67:11:3d:ca:c3:07:1e:cf:91:
3f:70:90:7c:64:b7:6c:21:3c:97:8b:b1:76:ea:cb:
27:18:cd:39:86:0e:64:09:03:54:31:f3:ad:24:fc:
4e:01:a5:91:33:c0:a9:0f:a6:56:81:bd:68:fc:2a:
e0:47:e7:d6:c9:3e:a1:81:a1:47:41:bc:08:f0:2b:
ea:9d:41:c2:92:26:b4:08:3e:2c:30:c3:c6:bb:d8:
da:37:0a:7c:b9:4b:4f:14:2e:0d:02:49:01:8b:de:
e0:bc:c1:09:82:49:02:af:40:56:01:01:c8:00:24:
ec:73:95:e7:b2:b5:1d:75:2c:b0:b0:f6:fd:7e:98:
ab:cc:c1:1d:a8:6b:66:8c:27:54:b1:37:2f:0e:dd:
a4:44:7d:13:e7:55:7d:0e:f6:28:4b:1e:a5:31:aa:
8f:09:bf:99:83:04:d1:79:d8:e1:1c:29:62:9f:36:
ff:b0:a0:24:3b:44:20:a7:30:f0:8e:2a:38:59:94:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:71:F4:A4:48:B9:50:B7:6A:3E:4C:54:0F:2D:FF:52:9B:67:C0:EF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.56.0/21
Signature Algorithm: sha256WithRSAEncryption
92:99:f5:fc:16:4f:5a:c3:16:1c:ca:77:49:7b:a7:0b:de:62:
8a:95:80:8a:62:25:4a:4d:f5:e4:9b:fd:01:1e:bd:e4:38:97:
72:f7:2c:d8:fe:8d:12:e7:66:19:8f:24:8c:da:fc:30:a6:c4:
6d:65:5d:2f:8c:38:ab:8b:13:eb:03:31:d3:86:97:b1:18:1a:
93:df:12:67:2a:41:d8:1b:26:48:1e:92:80:0b:25:93:33:86:
c9:48:b2:b9:86:cf:1f:f8:57:46:f7:c7:76:1a:10:e3:3c:69:
35:11:9b:84:d7:f1:7d:1b:bf:c1:28:be:97:2b:31:c8:b9:5a:
94:b1:03:ff:f7:89:30:3a:23:b1:ea:fc:4b:b1:24:e2:cc:90:
d7:f5:1f:c9:f1:07:be:bd:71:48:54:5e:82:ba:5a:76:25:ff:
f3:57:48:33:ef:f1:2a:19:0d:69:d6:8a:b5:8e:f7:92:c6:ad:
52:b9:cf:ff:9b:b0:ba:95:06:7f:3e:30:1f:83:59:a9:ce:bb:
d3:87:9a:4d:f3:8d:53:51:63:bd:f4:26:82:44:c8:5c:c9:9f:
3d:76:dd:0b:b5:67:b6:35:92:0c:2a:71:d9:9c:99:c5:27:6c:
4e:86:fd:ab:5a:e6:22:89:ee:06:70:23:c2:ea:df:f5:c3:c9:
55:b0:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org