Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e382e302f32312d3234203d3e20383334.roa
File: 3134362e3130332e382e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: gRNSzrnhj+WXtypHvK5+WKkmc9HUqRS6RhKYzRXpzXI=
Subject key identifier: 78:75:DD:06:C6:C9:43:87:4D:53:8C:B8:EB:5B:79:F3:69:FB:C6:AB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3DCAFBA5DDBFC4D85F0684EA9CE5EEE4851F2952
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e382e302f32312d3234203d3e20383334.roa
Signing time: Thu 14 Mar 2024 07:37:02 +0000
ROA not before: Thu 14 Mar 2024 07:32:02 +0000
ROA not after: Thu 13 Mar 2025 07:37:02 +0000
asID: 834
IP address blocks: 146.103.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 11:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ca:fb:a5:dd:bf:c4:d8:5f:06:84:ea:9c:e5:ee:e4:85:1f:29:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 14 07:32:02 2024 GMT
Not After : Mar 13 07:37:02 2025 GMT
Subject: CN=7875DD06C6C943874D538CB8EB5B79F369FBC6AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:a4:c6:64:b7:bc:bb:1f:09:7d:53:9f:0c:
42:1e:2f:dd:4c:b1:5e:31:f4:c6:e5:aa:c4:fc:b7:
f2:44:25:08:68:2c:aa:b6:e1:6a:08:ba:ae:b8:2b:
39:51:bd:36:86:65:b2:15:c4:68:db:6b:3f:86:74:
9f:8a:2a:ea:b3:b0:37:ac:59:d5:89:d4:6c:5e:56:
c1:41:f0:11:bd:5a:dd:e4:bd:1e:8a:79:b6:cd:dc:
03:49:a9:c2:00:f1:74:a6:80:8d:40:48:a8:72:d9:
95:c7:0b:f6:4e:48:45:fa:ab:79:03:a1:4f:6c:3c:
f5:56:8d:b4:20:c5:37:98:de:2e:d4:29:bd:b1:27:
17:1c:bd:cf:ad:69:53:fd:93:db:ec:ac:3e:dc:a9:
4f:92:65:a7:c5:34:a1:5c:50:db:73:9e:25:51:27:
00:f0:b3:6c:47:83:a7:03:93:a5:b7:89:98:8e:bd:
03:80:d6:17:ef:90:65:cc:6c:9d:99:dd:c5:ac:5d:
98:38:89:9d:af:0e:71:a9:73:83:cd:2d:3a:91:eb:
57:76:5c:57:6e:d9:d9:c6:9f:43:7e:e7:44:e1:3e:
d3:b8:14:5f:0c:a3:49:ac:b4:89:6e:1e:00:ea:72:
0f:67:39:6f:d6:57:5f:9b:3a:73:8a:8d:ad:c1:9d:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:75:DD:06:C6:C9:43:87:4D:53:8C:B8:EB:5B:79:F3:69:FB:C6:AB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e382e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.8.0/21
Signature Algorithm: sha256WithRSAEncryption
21:05:77:bc:30:9f:4a:01:a0:8b:5b:c0:a8:f1:00:b5:79:e1:
9d:ae:57:24:02:60:ba:79:a9:d8:79:ff:28:3d:92:ca:57:0f:
38:4d:29:36:06:bd:3f:9a:af:e8:ae:b2:28:c1:6a:fb:ac:ee:
b8:8b:8f:5c:fc:88:99:45:f2:3a:e9:05:1f:17:ee:9c:53:ba:
9e:b5:b5:82:61:2f:ff:4c:e6:80:4c:8c:a8:fa:0e:5c:c3:4e:
81:df:8b:90:27:36:eb:d9:6c:55:13:9b:3b:81:96:17:0f:79:
70:93:b7:53:9b:75:54:bf:5c:5f:9d:f8:38:07:9f:eb:bd:f4:
d1:89:b6:92:12:d9:b9:31:c8:8f:52:0f:16:e8:5f:d2:f1:06:
d1:fe:c2:31:1d:95:1d:1d:e3:fb:1d:23:b9:a0:8e:bd:9f:bf:
20:3f:06:09:9e:16:6a:60:ee:98:1d:7e:50:3c:68:29:a3:69:
a6:31:ca:0e:27:24:fc:3d:d6:bc:ab:01:86:41:9f:16:c1:62:
10:20:df:a3:99:50:d3:0b:96:01:09:96:12:47:35:6e:18:93:
9e:2a:e8:7b:ff:a1:ce:18:e1:07:05:37:94:35:9b:97:08:fa:
1e:42:b2:64:62:a9:27:8a:20:d5:ee:49:a7:4e:a3:3f:73:81:
97:44:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org