Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35392e302f32342d3234203d3e203430363736.roa
File: 3134362e3130332e35392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: p2jwPCdkAb4TnP62zK9Xa2EP14iP6hMGiAJ/Lm+sRBY=
Subject key identifier: D6:A0:6C:89:97:3A:3E:3A:21:1C:8B:5E:70:9B:0F:2A:84:74:0E:4A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0597CE3D6B08695C4F5F904FC80941577B43BDCD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35392e302f32342d3234203d3e203430363736.roa
Signing time: Mon 01 Apr 2024 22:07:40 +0000
ROA not before: Mon 01 Apr 2024 22:02:40 +0000
ROA not after: Mon 31 Mar 2025 22:07:40 +0000
asID: 40676
IP address blocks: 146.103.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:97:ce:3d:6b:08:69:5c:4f:5f:90:4f:c8:09:41:57:7b:43:bd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 1 22:02:40 2024 GMT
Not After : Mar 31 22:07:40 2025 GMT
Subject: CN=D6A06C89973A3E3A211C8B5E709B0F2A84740E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c1:da:02:f6:d6:e5:1c:5a:83:1f:3a:a2:18:
00:87:81:15:88:5c:c6:e5:37:51:d7:f5:e9:7c:65:
a6:59:cf:8f:d0:8b:57:80:35:b7:55:1b:fc:08:ac:
c5:2b:8f:42:b7:96:6a:36:51:c7:15:7f:f1:10:a0:
78:49:4d:60:96:e4:66:76:e3:a0:34:7f:85:26:87:
57:2b:bc:e8:c3:68:de:9a:bb:ca:b4:19:36:27:4a:
d7:6f:63:92:e2:08:8f:b4:19:00:50:ad:9a:e0:b7:
d3:ff:fc:ed:ce:b2:19:78:27:13:90:a2:c8:ca:95:
28:77:93:5f:4a:26:10:db:7e:93:46:91:53:00:43:
0b:b3:f2:b3:e0:86:1b:e0:86:56:e3:6f:e3:40:a6:
6e:44:1c:b2:ac:61:61:e9:fe:d5:02:35:d1:84:8a:
c3:8b:0c:b6:fd:c9:d9:d8:f0:17:46:da:21:f7:ca:
f1:80:00:74:14:51:89:33:0c:c1:12:92:bc:e4:2a:
86:b0:3f:fc:fd:d8:a7:cd:13:f3:28:87:61:8b:8f:
39:bb:09:aa:14:cf:96:d6:58:a3:83:0b:66:0e:2f:
2b:b5:c5:69:4c:a7:6e:54:7b:31:34:31:75:54:61:
f0:8d:6d:5d:94:62:9c:e0:9f:69:1e:f5:b1:0e:eb:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:6C:89:97:3A:3E:3A:21:1C:8B:5E:70:9B:0F:2A:84:74:0E:4A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e35392e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.59.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8a:a0:b0:9c:39:06:6f:eb:2e:f6:57:42:95:15:7f:13:24:
2b:0a:8b:c6:f7:e6:4d:e9:fe:2d:3e:3c:98:9e:b4:e6:98:79:
66:74:54:aa:a4:e7:06:d0:33:1a:0a:fe:2a:bb:0b:9e:2e:20:
21:ff:fd:6a:f1:b2:f5:5a:ff:3d:18:b9:92:a0:64:18:64:7e:
fa:80:f4:9b:b5:e9:2e:08:fa:8d:be:ea:1a:cd:de:e0:6c:a0:
95:f2:c0:a6:f3:5f:d8:70:3a:b9:3b:e9:b1:5c:ad:4d:a2:8a:
70:e4:33:0b:8a:40:2a:bb:ea:33:af:28:7b:58:27:57:b0:ac:
0b:3c:39:b9:00:8d:8a:e2:fc:26:a3:f2:11:1b:e9:7b:74:81:
a5:70:24:32:02:72:c3:45:b7:79:8d:12:45:bd:6d:aa:1e:ff:
f4:77:6f:51:ab:40:90:03:7f:b7:52:17:53:31:e3:b9:f1:b6:
82:bb:a4:82:1d:5d:c8:f6:0d:8e:aa:04:85:98:94:36:5f:eb:
a8:74:5d:27:6a:ae:7e:10:ce:f8:6e:e5:96:a6:71:1e:d7:c0:
60:f1:20:73:09:f7:bb:2b:62:f8:7e:d1:5e:78:8d:51:83:b4:
2a:24:23:be:1a:10:39:a4:b8:cc:b8:0c:e0:0b:38:0b:cc:e2:
4d:28:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org