Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e302e302f32302d3230203d3e2037303239.roa
File: 3134372e37392e302e302f32302d3230203d3e2037303239.roa (raw, json)
Hash identifier: ITdmyercs2JcX5ghOIzlxvUQG3R4K+7UCle4+SPb53c=
Subject key identifier: 06:F2:35:EA:18:64:02:08:0D:56:5D:BB:D2:B8:B6:1B:33:66:32:4C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 66BB4D97C8529CDC1BE2C84E1FFF77C3A1CA66DC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e302e302f32302d3230203d3e2037303239.roa
Signing time: Wed 06 Mar 2024 18:58:28 +0000
ROA not before: Wed 06 Mar 2024 18:53:28 +0000
ROA not after: Wed 05 Mar 2025 18:58:28 +0000
asID: 7029
IP address blocks: 147.79.0.0/20 maxlen: 20
Validation: Failed, certificate revoked on Sat 23 Mar 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:bb:4d:97:c8:52:9c:dc:1b:e2:c8:4e:1f:ff:77:c3:a1:ca:66:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 6 18:53:28 2024 GMT
Not After : Mar 5 18:58:28 2025 GMT
Subject: CN=06F235EA186402080D565DBBD2B8B61B3366324C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:52:23:cc:05:21:46:fd:7b:7b:6f:ed:9d:
1f:61:a3:24:74:8b:e7:64:cc:d6:4e:1e:9f:17:38:
19:b4:5b:ca:32:b7:f9:97:ef:d0:bf:d5:ec:09:45:
31:ab:03:1f:4f:fe:55:26:d5:d9:a8:97:4e:d4:a9:
32:83:2d:67:08:78:71:3a:25:4f:8a:8f:05:0a:d5:
50:9d:aa:cf:19:9f:f0:cc:27:9b:38:a3:ed:6e:86:
97:ba:1d:2b:4a:e9:61:90:37:7f:3e:b3:9c:fa:bb:
62:2d:70:d3:ed:b1:b4:c3:27:1e:10:bd:27:9a:ad:
80:16:11:60:a7:d8:71:0c:f8:0b:e2:b0:93:9a:3f:
99:ff:30:e3:ae:e0:6a:8d:a3:b0:56:19:0a:a9:90:
62:00:51:19:7f:09:d8:e3:69:1a:6f:e3:79:f0:e3:
a0:cd:39:94:8a:46:00:56:8e:b2:df:9c:32:90:24:
e3:e7:c0:6c:20:92:be:71:71:0b:f1:ec:1f:a6:4c:
9d:42:b2:0e:d3:c8:f9:1d:a2:5b:a9:71:af:9d:77:
7f:b8:ef:e0:d5:13:df:89:ea:9a:1e:3b:a1:17:d9:
07:3f:a8:65:e2:f6:49:44:a6:8c:c1:aa:0d:20:ab:
27:78:e3:62:b5:1d:a7:04:96:41:9b:26:8d:bc:5d:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F2:35:EA:18:64:02:08:0D:56:5D:BB:D2:B8:B6:1B:33:66:32:4C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e302e302f32302d3230203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:92:79:b2:87:e9:43:9b:f5:80:10:94:5a:32:d2:74:cb:3c:
8c:18:01:dd:3a:67:a4:65:26:11:ea:30:de:c7:9c:b2:3e:47:
44:9a:9f:ff:13:42:68:ce:db:3d:de:00:89:4c:09:93:4c:5e:
73:1a:f3:33:6c:b9:12:0e:95:a5:ea:d5:18:00:a9:3c:38:f6:
ae:1a:22:80:be:55:46:1a:41:00:78:ab:07:7d:73:60:f6:c4:
ca:c9:35:28:ed:db:3e:43:1d:40:c3:da:b4:3e:d2:59:d5:c3:
d9:99:8f:70:c0:d6:89:8f:9f:1a:25:37:7a:3e:f0:14:0d:d4:
11:ae:55:a5:4e:79:fe:f4:e8:64:ff:09:f7:4e:49:0b:77:bd:
b5:d5:09:f1:70:17:fb:52:bd:e9:0a:94:db:02:20:eb:c8:0f:
8f:07:5c:5e:6a:cb:b6:26:fa:aa:3e:1d:7b:d0:a3:5c:86:f0:
bb:0a:c8:d5:14:62:6d:1e:66:45:c5:ac:45:80:b4:fe:c9:ce:
1b:fd:d1:55:4d:4e:03:e0:60:98:63:a2:18:ed:0f:7f:2a:b4:
68:33:78:ec:47:f0:db:99:b3:79:7d:fe:46:4e:68:a2:a7:10:
13:f8:ba:19:27:36:65:7e:1e:e4:6a:96:92:35:22:90:41:e8:
9d:0c:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org