Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35362e302f32332d3234203d3e20383334.roa
File: 3134362e3130332e35362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: a4Xr3qo3lDT6oGYCSSaluq/l/83bffA4733OdpTHpcU=
Subject key identifier: D2:AC:93:46:B9:7B:CF:62:98:2B:F9:CD:3C:45:8B:DE:1C:CB:B8:E2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6776DADC5E7424869A1F86A304CD892BF54ED2D1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35362e302f32332d3234203d3e20383334.roa
Signing time: Mon 01 Apr 2024 22:10:06 +0000
ROA not before: Mon 01 Apr 2024 22:05:06 +0000
ROA not after: Mon 31 Mar 2025 22:10:06 +0000
asID: 834
IP address blocks: 146.103.56.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:76:da:dc:5e:74:24:86:9a:1f:86:a3:04:cd:89:2b:f5:4e:d2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 1 22:05:06 2024 GMT
Not After : Mar 31 22:10:06 2025 GMT
Subject: CN=D2AC9346B97BCF62982BF9CD3C458BDE1CCBB8E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:d9:39:75:1a:81:96:c5:17:c1:03:8b:d3:
fa:df:44:68:74:78:dc:7d:2e:55:50:5b:31:5c:cf:
be:76:af:73:f6:fd:81:52:17:ac:4a:93:9d:c7:18:
c5:b6:5e:ef:ed:ed:02:8a:ca:9a:2b:99:fb:59:58:
53:28:fe:1a:85:ec:aa:84:2f:7b:98:64:02:04:b4:
78:8d:0f:42:6a:5c:7e:d1:22:3c:85:48:62:b9:e3:
34:bc:0f:3e:bb:09:4a:f0:24:8a:57:22:48:3d:80:
a2:e8:28:be:04:8d:e8:d8:fe:9a:22:c6:32:2c:eb:
6a:6d:d6:70:d5:b7:72:40:73:31:d9:e8:1c:90:69:
5d:fd:c5:cb:e2:af:79:99:47:34:ae:ea:61:2d:f0:
ce:ea:41:e6:77:43:d7:38:d9:a5:4f:0b:0f:94:1c:
df:82:96:7a:62:8d:70:9c:0d:b1:76:87:ac:99:5b:
b6:83:95:9c:c8:6f:30:3c:c0:30:e2:be:7f:8c:60:
37:9b:77:c1:d2:7b:30:44:c8:71:30:0e:fa:85:82:
eb:83:62:b1:98:a7:c2:39:04:44:4c:64:57:ab:75:
2b:38:df:ad:da:c2:b7:66:41:21:5b:69:e5:13:45:
bb:1c:f2:8d:ab:0d:5c:81:74:8a:f3:6a:e1:4f:5e:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AC:93:46:B9:7B:CF:62:98:2B:F9:CD:3C:45:8B:DE:1C:CB:B8:E2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.56.0/23
Signature Algorithm: sha256WithRSAEncryption
30:76:d4:df:0f:0a:fd:f7:2d:28:5f:de:09:1e:55:45:b5:ad:
07:b6:83:e8:25:03:6d:08:b8:00:81:68:67:af:7e:3a:fe:1d:
6e:43:d8:d1:55:bf:b8:f9:7e:db:59:a6:b2:db:9d:7a:a2:a1:
db:dc:10:89:e0:02:17:bf:65:0d:51:5b:0e:15:eb:8c:1e:f7:
80:97:9c:32:3d:72:c1:2a:a1:e0:35:67:89:04:7e:02:f0:99:
df:97:47:12:f8:5c:fa:f5:8a:52:12:b4:0e:44:d8:e7:17:d2:
7a:2c:c5:6b:b2:8c:51:6a:6e:41:06:77:e6:8f:90:71:7f:ac:
ba:87:5b:eb:79:f2:e7:41:45:2c:6e:d9:5b:9c:35:1f:79:14:
b4:b6:c6:5c:d7:64:f4:cb:07:7d:4f:88:d6:16:a2:0f:08:f2:
b6:4a:18:d0:72:67:8f:8f:15:5c:ae:39:f3:6e:11:17:9c:57:
2b:b1:72:0c:82:f6:8f:c8:4e:89:6b:90:5e:dc:97:41:a3:9e:
e2:87:df:f8:85:ef:d7:75:2e:b6:49:45:dd:40:53:9f:32:59:
84:5c:4c:79:2e:c5:8c:7c:a4:7f:53:f2:38:7f:42:b0:3d:bb:
b8:12:7e:d3:1c:61:75:a4:6c:33:1a:1e:1e:35:d9:e5:20:0b:
91:ab:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org