Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e36302e302f32322d3232203d3e203134363138.roa
File: 3134362e3130332e36302e302f32322d3232203d3e203134363138.roa (raw, json)
Hash identifier: Po4tZyQbo9Rl5Ed51RBm9kpcouyLfXM3UFNX9/CieWw=
Subject key identifier: 0F:38:84:62:1D:D5:39:61:55:0D:AF:93:E8:E2:1F:E7:FF:5C:D1:B0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5EC144DA8D5C1A07BE3E48DD1BF63CB5E2DAB9DE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e36302e302f32322d3232203d3e203134363138.roa
Signing time: Sat 30 Mar 2024 23:56:51 +0000
ROA not before: Sat 30 Mar 2024 23:51:51 +0000
ROA not after: Sat 29 Mar 2025 23:56:51 +0000
asID: 14618
IP address blocks: 146.103.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c1:44:da:8d:5c:1a:07:be:3e:48:dd:1b:f6:3c:b5:e2:da:b9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 30 23:51:51 2024 GMT
Not After : Mar 29 23:56:51 2025 GMT
Subject: CN=0F3884621DD53961550DAF93E8E21FE7FF5CD1B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:06:0b:d3:a2:15:4b:2e:81:90:85:86:83:
91:a4:c8:1d:04:42:e1:d1:4b:fa:7b:42:60:90:61:
ef:cd:27:93:58:cc:e2:42:f8:e2:31:08:d0:2c:25:
80:e9:96:71:5f:a6:1c:3a:d8:93:25:fd:a9:a2:c3:
bd:d1:b8:7e:ec:65:5f:f8:fb:2d:a9:6d:7c:b8:3c:
04:56:52:b5:af:1c:ef:e5:c5:fd:bf:fd:a0:b4:16:
7f:43:3a:be:f6:f8:29:d6:38:cc:40:fa:ea:47:06:
e4:33:1e:0f:a7:f4:1c:e6:6e:f9:ae:a9:df:f2:67:
04:e6:0f:da:29:3f:80:6a:1f:0e:53:fb:7d:aa:5a:
83:1c:bf:3f:b5:23:a3:ef:ae:95:49:3e:d8:30:0a:
5c:38:9d:62:c7:76:c9:b5:f0:f2:2f:f6:da:c0:e3:
e1:19:e2:fc:66:01:0d:88:fe:93:d4:e2:b4:32:a9:
36:e3:1a:7f:19:c1:62:f4:48:42:19:9a:1d:db:5b:
75:e8:9e:7d:39:61:f9:be:7d:2d:fc:39:e8:3b:e0:
05:4b:e2:14:d1:e0:69:b4:8d:9c:71:6a:0e:4f:65:
53:84:48:8a:04:e5:c6:77:2c:40:62:2c:85:b9:e5:
2a:e0:b8:b1:8f:01:ad:bd:70:ea:af:b7:78:ac:5e:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:38:84:62:1D:D5:39:61:55:0D:AF:93:E8:E2:1F:E7:FF:5C:D1:B0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e36302e302f32322d3232203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:34:20:2e:25:8c:95:ab:fd:c5:b7:d7:d2:6d:1f:61:ff:3a:
ea:09:42:ef:98:d2:d2:13:62:2c:2d:0e:43:da:6b:26:7c:50:
0a:36:a8:a3:51:d6:6f:e3:b2:a8:78:75:6b:21:97:41:59:e6:
44:e2:bb:21:61:fa:ae:12:01:ca:47:7b:9e:6f:c3:44:87:19:
40:12:fd:20:4d:af:04:64:43:11:09:d5:a3:ec:53:cb:19:79:
3e:f0:1b:e5:db:b4:54:b6:b3:4d:86:e6:16:d7:10:30:a6:a8:
a6:7e:41:5a:26:34:31:72:75:01:a6:33:13:68:ca:5b:b3:35:
2e:14:0e:f3:d7:8b:56:91:e3:74:ce:b5:cf:0e:f3:36:a2:7b:
c7:f4:68:c8:9f:7f:f6:0b:63:9a:d2:4a:ac:c3:95:42:28:fc:
ed:86:09:55:b3:7a:f7:9c:1c:6d:ea:df:2e:b4:5c:9b:9f:69:
1d:0e:dd:4a:c3:92:eb:b0:5b:4b:19:1e:32:33:8c:40:ee:29:
fb:60:bb:be:85:96:19:c5:b0:34:6f:8e:00:d3:85:53:bb:8a:
d7:1d:7f:0f:0d:ae:68:f0:14:98:7a:0c:8e:f9:5e:9d:6c:67:
2a:9f:e4:68:00:e9:95:2e:ac:c7:9a:99:90:fd:ef:8f:74:33:
5a:af:57:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org