Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e36302e302f32322d3232203d3e203136353039.roa
File: 3134362e3130332e36302e302f32322d3232203d3e203136353039.roa (raw, json)
Hash identifier: ejpTNqdQI5mqEfBAhPAKHx45xsiv0+KCF8cVsdROlx0=
Subject key identifier: DB:77:60:83:1D:2B:C5:BE:38:CC:96:C6:6E:D5:D5:C3:66:BA:76:EA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6431DE830B7D179976DD75599B3B60C877A5B840
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e36302e302f32322d3232203d3e203136353039.roa
Signing time: Sat 30 Mar 2024 23:56:51 +0000
ROA not before: Sat 30 Mar 2024 23:51:51 +0000
ROA not after: Sat 29 Mar 2025 23:56:51 +0000
asID: 16509
IP address blocks: 146.103.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:31:de:83:0b:7d:17:99:76:dd:75:59:9b:3b:60:c8:77:a5:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 30 23:51:51 2024 GMT
Not After : Mar 29 23:56:51 2025 GMT
Subject: CN=DB7760831D2BC5BE38CC96C66ED5D5C366BA76EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:86:d0:0f:57:e9:cc:ed:1d:b3:cc:08:b9:
5c:ee:8b:e8:c6:52:39:62:3f:63:bb:ae:51:2e:d3:
4e:ff:26:1a:d8:01:0e:9d:93:a1:67:49:17:ab:b5:
6b:fa:af:c3:22:c2:e2:32:0d:cd:1b:2b:f2:77:83:
9c:33:11:69:b9:a8:00:18:b4:b7:7b:7d:2f:92:f0:
6f:f2:f1:41:6f:7e:ab:21:ec:ee:76:5a:bb:d5:24:
d4:1e:2b:38:b0:2f:89:4b:db:4e:52:d5:6f:3d:9c:
77:90:b2:c3:b0:60:52:ef:65:46:ba:b7:f8:b1:3f:
4e:29:4b:c9:8f:1b:09:0d:e2:46:7c:e9:7d:e7:09:
18:3d:98:9f:a2:e4:86:3f:bb:46:dd:1c:cf:47:7b:
d2:38:60:12:8f:4d:61:52:55:31:a6:be:55:17:90:
2f:bb:db:aa:6a:c6:b7:ee:e1:b6:d8:b9:aa:39:c8:
3e:e3:79:29:a8:b4:98:ee:42:b9:cc:41:d3:25:3b:
fe:48:0e:45:63:fa:4e:b3:05:0a:e8:a1:e9:24:e5:
c4:0c:db:44:dd:3c:8a:52:51:db:77:2e:86:e4:25:
1c:b8:97:ae:6f:31:e3:ab:1e:85:20:d3:a9:cc:4c:
1b:26:31:65:fa:37:3c:b3:10:56:35:ac:c9:4b:54:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:77:60:83:1D:2B:C5:BE:38:CC:96:C6:6E:D5:D5:C3:66:BA:76:EA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e36302e302f32322d3232203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.60.0/22
Signature Algorithm: sha256WithRSAEncryption
24:db:79:00:83:77:34:45:65:bd:6c:9f:09:11:f7:0e:48:d7:
9b:b5:49:f3:10:2c:f4:50:99:70:f7:14:6d:58:a5:e6:ab:2d:
31:65:4a:a2:02:7b:e0:af:87:ed:d8:0c:f3:31:b6:96:e5:25:
9e:c7:95:55:6f:19:ea:30:59:75:7d:5c:a8:7f:7f:59:27:9c:
26:7f:ca:2a:78:ea:4f:e2:b8:eb:27:33:ac:2a:c2:6c:49:42:
ad:e9:74:38:4f:53:e1:37:6b:95:76:46:93:dd:45:f4:cd:4e:
f2:11:8e:08:27:48:55:e1:26:7e:62:eb:55:87:99:ee:cb:a3:
f8:5d:11:45:29:df:1b:c9:0c:15:fc:d2:6b:9f:22:66:3b:fc:
6b:74:5d:4b:3f:5d:04:86:82:d6:ee:ee:89:28:8c:51:b0:05:
1f:f1:28:37:a7:f3:1a:ca:be:65:75:43:93:8c:ce:0a:ca:d9:
d5:cc:70:35:a1:9c:f5:10:a5:18:f0:70:c9:8a:fe:77:3b:a1:
68:7a:99:92:31:b4:b1:6f:40:f6:ec:f1:b1:92:f4:d6:4b:79:
e9:96:b2:94:70:3c:d8:31:ab:af:c7:f5:b8:01:83:ff:33:e4:
d2:1d:f5:b0:79:48:0b:88:bc:b3:21:66:b6:4c:52:ff:7d:75:
36:4d:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 12:13:37 2024 by rpki-client on console-fra.rpki-client.org