Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35382e302f32342d3234203d3e20383334.roa
File: 3134362e3130332e35382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: BLDAAIQ3G9uZ/LyXe8qSxJ7caBQQsPQh0+GVvMgKwVQ=
Subject key identifier: FB:CB:9C:A2:1E:42:10:C0:62:6A:A1:70:A8:D0:28:BD:82:3E:1F:BF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7E7DCC6908BE31A1E5CECF30609297D580BF44B7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35382e302f32342d3234203d3e20383334.roa
Signing time: Mon 01 Apr 2024 22:10:06 +0000
ROA not before: Mon 01 Apr 2024 22:05:06 +0000
ROA not after: Mon 31 Mar 2025 22:10:06 +0000
asID: 834
IP address blocks: 146.103.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7d:cc:69:08:be:31:a1:e5:ce:cf:30:60:92:97:d5:80:bf:44:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 1 22:05:06 2024 GMT
Not After : Mar 31 22:10:06 2025 GMT
Subject: CN=FBCB9CA21E4210C0626AA170A8D028BD823E1FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:0e:57:8e:cf:00:b9:52:2a:49:1b:fe:54:
62:f5:23:7f:78:be:c7:f4:6e:e6:5b:70:6b:72:d6:
ab:49:ea:1c:52:3c:25:28:c8:13:18:8d:04:e8:78:
6c:7e:8a:a4:cb:72:6b:74:0f:49:af:de:1e:a9:6e:
97:54:26:ff:9e:77:3c:eb:1e:80:b2:9b:a0:c9:56:
9c:b8:4b:03:77:63:bc:da:45:ea:40:63:35:5c:d7:
4a:0c:b5:d2:b4:f9:92:03:2c:4a:2f:7d:09:51:d4:
a4:54:d5:c9:2f:c9:b2:55:19:54:6f:c7:05:e7:7f:
81:11:87:43:1f:64:28:6e:80:c4:14:ab:f2:8e:2c:
4b:b1:14:ca:7b:d4:e2:c7:24:b2:30:18:92:03:22:
f1:b7:1c:bd:eb:42:56:3a:e8:54:7d:5d:2b:b3:ef:
97:38:00:45:71:9c:51:25:eb:3e:ef:b5:ab:3f:8b:
3d:a9:be:44:d5:ba:10:01:d5:62:d8:74:4e:e8:c5:
5b:8e:43:6c:32:56:e4:9f:99:a1:ef:b9:ae:de:d2:
85:67:52:28:d1:5e:f0:2c:c1:6f:55:d9:3d:33:5e:
eb:d2:46:34:a3:76:a5:e7:91:8f:4c:a7:2c:02:3f:
6c:b6:f4:08:f8:27:49:46:dd:89:74:5d:bc:5e:1d:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:9C:A2:1E:42:10:C0:62:6A:A1:70:A8:D0:28:BD:82:3E:1F:BF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.58.0/24
Signature Algorithm: sha256WithRSAEncryption
18:93:9c:21:e5:25:98:f4:ce:a5:e9:04:ef:56:3e:91:22:d2:
f3:e1:65:30:e9:ab:ee:38:2b:8a:a0:ae:9c:1f:48:f8:00:28:
ae:ba:21:d0:0f:2f:89:15:f1:9e:1c:fc:d6:98:2f:04:3d:2d:
d6:4f:60:86:6f:83:37:14:54:04:cd:5f:09:80:1d:1c:4a:01:
06:c4:34:20:eb:2c:db:6e:a0:21:0f:cc:94:15:eb:1c:ed:26:
e0:3c:f2:c5:0c:f9:98:3b:62:43:a3:e4:34:04:35:20:55:a1:
ac:86:de:bf:84:dd:7c:00:2f:7b:a1:e3:98:72:4c:0f:46:4b:
77:5d:06:2b:76:6a:38:f6:e2:b3:7f:69:0f:97:45:47:a8:da:
2b:06:eb:7a:42:7f:98:d8:b1:b8:3b:c5:e7:e9:1e:01:e6:0b:
83:ff:1f:94:bb:4b:42:05:9a:30:ab:08:fa:ff:51:34:c8:5a:
0a:29:99:cd:59:af:cf:0c:d6:d5:89:bf:80:05:c1:88:22:fb:
7b:65:a4:0d:73:2e:31:2b:f3:af:d0:e9:5c:eb:2b:37:4c:6e:
fd:a4:bc:48:dc:48:4b:2b:45:dc:04:6b:49:aa:c5:7a:21:f3:
49:f3:db:4b:65:c0:f9:55:f5:43:d9:29:3d:ba:77:3f:53:2c:
99:c4:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org