Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e382e302f32322d3234203d3e20383334.roa
File: 3134362e3130332e382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 1sXu9vAtwcVCZGNha1vk6X4OQHB+/+XA1qPC50tTdMM=
Subject key identifier: 75:E0:25:D9:3F:D0:F1:2A:4A:A7:F6:A9:B8:D6:A2:40:00:B3:BA:E8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 76729EE052560DBA909C88E83CB99C8C785851DF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e382e302f32322d3234203d3e20383334.roa
Signing time: Fri 15 Mar 2024 11:05:16 +0000
ROA not before: Fri 15 Mar 2024 11:00:16 +0000
ROA not after: Fri 14 Mar 2025 11:05:16 +0000
asID: 834
IP address blocks: 146.103.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 21:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:72:9e:e0:52:56:0d:ba:90:9c:88:e8:3c:b9:9c:8c:78:58:51:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 15 11:00:16 2024 GMT
Not After : Mar 14 11:05:16 2025 GMT
Subject: CN=75E025D93FD0F12A4AA7F6A9B8D6A24000B3BAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:01:a4:e1:73:1a:6b:e4:6b:28:03:14:c5:
c3:25:17:a4:c3:50:51:b8:44:97:47:51:86:bf:99:
61:b8:73:03:6c:6d:28:7a:0d:69:05:5f:c0:c6:64:
0b:bf:22:e9:5e:70:73:a0:a9:c4:36:de:d6:5f:3e:
9a:25:4f:09:f0:35:38:61:8f:08:bf:44:bf:24:d8:
cf:2f:36:c7:76:6d:b3:8d:a5:d4:ef:fb:ef:a0:2f:
12:20:60:66:cb:56:1d:96:41:25:86:9d:65:35:92:
db:1a:77:90:a2:35:59:64:c3:68:e5:cf:37:77:db:
27:5a:fc:36:49:31:aa:42:bf:32:7e:f1:01:6e:5f:
b5:fb:7c:b0:a2:06:02:b6:60:4d:0f:ff:7d:a4:b3:
e0:00:5c:7a:41:2e:44:19:01:77:40:ab:79:bc:02:
14:de:91:56:ec:5c:78:f7:29:fc:b7:85:45:a9:e4:
ef:2c:92:bd:dc:cd:96:7a:9e:a2:ed:ea:ec:4a:f3:
97:97:42:79:d9:df:5f:90:44:00:5f:49:dc:ed:61:
16:8a:48:15:58:48:2a:51:6e:03:db:55:6c:05:c4:
d9:cd:45:28:5a:6d:e8:56:3d:68:79:6d:8d:52:0b:
62:9d:48:78:81:e3:4e:40:08:98:51:10:a6:d7:19:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E0:25:D9:3F:D0:F1:2A:4A:A7:F6:A9:B8:D6:A2:40:00:B3:BA:E8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.8.0/22
Signature Algorithm: sha256WithRSAEncryption
34:56:ae:28:c5:f5:3a:d9:92:07:0e:5a:e0:56:ba:76:91:56:
92:a1:eb:78:2f:a8:f9:c4:0d:22:e8:56:77:4f:ea:d9:7f:09:
de:82:6a:99:6b:fc:b4:5d:0f:76:fd:cc:01:30:65:d0:4f:86:
80:09:bc:89:30:50:d2:46:df:ae:55:fd:9c:a8:16:e8:1f:f1:
56:17:d1:14:93:80:ac:4a:ef:b1:f9:dc:2d:0a:9f:f8:82:8e:
89:17:2c:a1:cf:22:91:f0:e7:b5:26:7f:df:12:b6:9d:2d:cf:
9d:a2:36:77:62:f6:7a:f2:96:df:f7:36:37:36:f3:52:ff:2c:
3b:62:0b:3c:45:74:bd:e4:3e:72:75:5e:9f:cb:8b:35:13:87:
5f:77:40:f9:c0:f9:8d:3f:3e:df:8c:87:3a:b4:09:49:06:42:
ff:fd:95:0f:27:0b:81:1d:1c:a7:b4:40:58:d9:42:42:8d:54:
d0:6d:43:14:52:d4:92:17:56:85:6d:6a:88:cd:2d:75:35:96:
56:d7:d6:dd:e8:52:1b:cc:5a:d9:06:70:1f:6a:45:e5:d8:a0:
06:75:41:f1:02:b9:f1:d2:78:1a:b6:6d:30:ef:32:09:84:e5:
e0:79:94:38:65:ad:83:44:32:ce:5b:21:50:aa:d7:1c:fa:96:
d9:6e:39:b4
-----BEGIN CERTIFICATE-----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Generated at Sun Mar 24 22:46:10 2024 by rpki-client on console-fra.rpki-client.org