Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e312e302f32342d3234203d3e203630333138.roa
File: 3134372e37392e312e302f32342d3234203d3e203630333138.roa (raw, json)
Hash identifier: /lveH2htQjs87UN0j6/YnPKgCwjd6+PE+peyCzw+X4o=
Subject key identifier: F6:79:48:7B:92:B9:ED:D4:E4:D0:B8:CA:95:65:4E:E1:82:6A:0C:B8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 26CC5915B470F2351338014BEA1388CC47A61CA5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e312e302f32342d3234203d3e203630333138.roa
Signing time: Fri 05 Apr 2024 11:01:52 +0000
ROA not before: Fri 05 Apr 2024 10:56:52 +0000
ROA not after: Fri 04 Apr 2025 11:01:52 +0000
asID: 60318
IP address blocks: 147.79.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cc:59:15:b4:70:f2:35:13:38:01:4b:ea:13:88:cc:47:a6:1c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 5 10:56:52 2024 GMT
Not After : Apr 4 11:01:52 2025 GMT
Subject: CN=F679487B92B9EDD4E4D0B8CA95654EE1826A0CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:6b:76:61:5b:d5:27:e2:24:dd:45:80:0b:
a1:06:60:4f:b5:90:2e:b9:cb:82:9c:af:01:4a:73:
fa:5f:85:cd:74:d1:e8:fe:e2:9c:44:84:99:33:69:
c6:fc:f5:cc:2e:93:a5:80:48:23:3d:3b:37:06:49:
a6:15:6e:a7:05:e8:3e:a3:c3:a3:5e:50:35:e9:c7:
a0:d7:b7:d4:e0:68:f7:65:bb:4a:b5:20:07:91:5d:
01:42:62:0b:f4:aa:9e:71:c1:e7:0c:ba:28:e0:ea:
02:fd:10:49:aa:6d:19:90:d7:2f:f9:3a:30:88:26:
85:d8:62:76:b8:79:51:f6:22:60:e8:21:3d:48:59:
21:8e:6c:89:20:dc:b5:63:ac:62:da:d4:95:8f:fe:
8b:ab:65:b4:0e:ac:7c:8d:46:25:c7:a3:cf:2c:a0:
5b:6a:df:2f:2d:02:74:b1:32:ec:7d:a9:ff:e0:dd:
72:5b:e4:52:b9:db:c9:27:0f:6d:a7:4b:96:29:d7:
84:cd:87:cc:18:b8:9e:86:4f:54:37:b5:20:5f:4c:
18:bd:84:0b:2f:36:89:38:b1:b4:8a:0c:03:89:c8:
08:e6:c5:32:fa:96:c1:f2:ac:25:aa:98:23:72:03:
e0:db:91:7e:bb:3e:f7:c3:e4:db:57:eb:35:f1:bf:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:79:48:7B:92:B9:ED:D4:E4:D0:B8:CA:95:65:4E:E1:82:6A:0C:B8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e312e302f32342d3234203d3e203630333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f3:04:cc:18:96:96:ab:74:c5:f6:51:f4:10:69:0e:2e:bb:
ed:ce:98:bf:88:1d:70:12:9a:13:3b:59:da:31:92:03:fd:44:
e1:05:17:e1:4d:88:e2:b8:6f:e9:17:c8:c6:2f:46:3a:d9:aa:
6c:27:7e:f9:51:7f:eb:eb:65:2c:45:14:0a:72:5f:1a:f1:1c:
7b:91:3e:84:c9:40:32:30:f5:d5:cb:ac:33:20:8b:a5:01:e7:
1b:c9:9a:4e:0f:1d:f9:5f:b8:2c:27:92:b4:e8:01:16:a0:e8:
c1:c4:34:bb:29:b1:0e:b8:ce:d3:7e:b5:b9:a2:66:32:c7:b3:
35:78:85:d7:1d:c6:01:13:d0:d7:c1:98:19:5f:09:91:38:91:
5c:00:92:e3:51:7c:80:52:89:cf:57:6d:34:52:62:cc:0d:82:
12:05:5c:b9:fc:b7:3e:71:7a:4b:f1:6e:1f:d5:42:09:47:b0:
5b:ac:c7:ce:f7:70:ca:b6:95:55:f1:72:f5:25:af:19:85:78:
80:5f:a2:de:bb:7b:d8:a9:cc:66:8e:3c:60:0f:54:73:a5:f3:
10:0d:bd:31:09:aa:43:32:39:1e:02:1d:19:af:bf:bc:46:58:
3b:e7:d2:e8:e5:99:22:c1:69:97:2f:dc:01:23:1e:ad:f8:95:
08:ec:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org