Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35362e302f32322d3234203d3e20383334.roa
File: 3134362e3130332e35362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: dAvwy9pzwjbN75CKr85OG7HK5pI7RrCQqLWsth4zuIQ=
Subject key identifier: 62:7A:8B:F7:AC:98:A4:15:72:8B:F6:EE:B8:F2:66:89:75:AF:BC:8E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 25E2870EB7C9B8AEEE6515F8AC0D3B19B68D897B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35362e302f32322d3234203d3e20383334.roa
Signing time: Sat 30 Mar 2024 23:57:16 +0000
ROA not before: Sat 30 Mar 2024 23:52:16 +0000
ROA not after: Sat 29 Mar 2025 23:57:16 +0000
asID: 834
IP address blocks: 146.103.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 22:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e2:87:0e:b7:c9:b8:ae:ee:65:15:f8:ac:0d:3b:19:b6:8d:89:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 30 23:52:16 2024 GMT
Not After : Mar 29 23:57:16 2025 GMT
Subject: CN=627A8BF7AC98A415728BF6EEB8F2668975AFBC8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:8e:87:72:25:6d:25:26:93:c7:f0:fe:0c:
9e:f2:73:b3:c6:06:22:bc:0c:b0:7b:db:7d:9b:35:
5b:7a:ef:04:0e:12:bc:ce:c1:4c:56:e8:c4:09:79:
27:09:e3:c7:90:4c:47:d7:91:fa:57:11:0d:29:8c:
fd:e1:90:fc:97:6a:36:73:0d:16:8e:a6:24:b4:e9:
59:a3:fe:a8:46:6c:ad:0f:b5:b1:92:fe:c1:28:72:
5e:71:67:95:ad:1b:a9:16:3e:a3:81:7b:1d:d3:29:
d5:ad:ed:09:94:9a:8c:7b:90:99:43:7d:63:c1:dd:
59:11:2d:90:6f:2e:84:70:2d:6f:f0:b6:fc:4b:63:
d1:8f:7d:68:d1:eb:12:fd:c4:38:2c:e1:c3:9f:46:
55:df:37:2a:25:9d:fa:6c:bf:33:62:f5:19:f6:d7:
96:aa:47:0d:a3:51:22:eb:d0:43:81:04:57:bb:b1:
bb:4d:7a:7a:db:7f:09:38:a8:1b:9e:5e:18:5a:bc:
4b:1a:ff:8e:ef:d9:64:5f:3d:b0:11:51:a0:42:9a:
83:cc:a8:cc:1e:32:59:7a:7b:5c:07:45:3c:d9:71:
51:53:bc:e6:4e:87:d8:1e:66:4f:02:1a:33:c7:93:
82:a7:aa:49:ce:54:09:60:d9:bd:2c:5e:74:36:f0:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7A:8B:F7:AC:98:A4:15:72:8B:F6:EE:B8:F2:66:89:75:AF:BC:8E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:a0:d4:3a:15:0d:d4:60:2e:5f:ba:80:08:7b:cf:33:8f:4a:
f5:04:0a:4b:3a:c1:a8:f9:16:0b:f3:cd:33:8f:f3:68:a3:cd:
3f:3a:0b:6b:2c:b6:f9:7a:d9:98:82:d3:22:0a:2c:99:56:14:
45:d4:cb:45:14:a2:36:30:56:ac:a3:e1:c3:ae:05:08:36:ee:
67:76:3c:1c:de:b0:ac:c3:79:fe:bb:0d:d7:ca:17:19:26:0f:
54:42:cc:45:10:4e:c8:37:df:66:1f:c5:64:2f:4a:14:05:3d:
2b:e8:11:16:50:91:eb:d9:4b:c4:0d:ce:ea:41:64:34:4b:66:
92:ef:c8:14:7d:72:2a:ed:a1:a7:85:07:a6:10:8d:34:5b:dc:
a3:d4:83:dc:06:30:94:95:56:68:e6:6a:7d:eb:d0:6e:c1:ba:
47:3a:c6:56:c7:98:0b:59:9d:93:f9:85:2f:68:f6:4d:ea:b1:
8c:d2:db:95:3a:75:af:c1:8b:dc:70:90:e2:1c:84:5d:87:dd:
db:52:e4:84:9e:04:ce:50:62:00:4e:b4:54:f9:2c:d1:a0:fe:
7b:9a:1b:15:0c:c5:22:65:9d:1f:41:63:b7:eb:f7:b7:e1:74:
84:be:3f:14:61:06:ed:24:ff:a5:87:1e:b3:bc:6f:db:63:ad:
60:95:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org