Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e31362e302f32322d3232203d3e20313734.roa
File: 3134372e37392e31362e302f32322d3232203d3e20313734.roa (raw, json)
Hash identifier: xE4N+Ve847QdQK3OF8ZYaw1hQt4KsRMEHBhx9P4ftSM=
Subject key identifier: BE:03:EE:50:24:ED:28:36:D6:24:52:F9:A2:1E:68:82:41:1C:39:AB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 22002DA51C44C3481E7FBCC32D8B4250D5348C2A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e31362e302f32322d3232203d3e20313734.roa
Signing time: Tue 27 Feb 2024 00:51:43 +0000
ROA not before: Tue 27 Feb 2024 00:46:43 +0000
ROA not after: Tue 25 Feb 2025 00:51:43 +0000
asID: 174
IP address blocks: 147.79.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:00:2d:a5:1c:44:c3:48:1e:7f:bc:c3:2d:8b:42:50:d5:34:8c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 27 00:46:43 2024 GMT
Not After : Feb 25 00:51:43 2025 GMT
Subject: CN=BE03EE5024ED2836D62452F9A21E6882411C39AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:9e:03:84:47:a8:36:24:19:72:fb:66:b5:
fa:04:a2:ae:5e:a1:ff:a9:d9:4d:40:50:31:bb:9d:
3b:56:52:60:d4:7f:71:89:39:34:da:04:ea:05:9f:
b1:cf:21:24:64:47:bf:ec:51:ad:e2:89:f7:5f:e7:
c0:ea:f3:e7:67:cd:2d:e7:dc:9d:2e:23:f2:37:c8:
46:73:a0:fd:9b:b0:80:48:04:d6:d5:fa:8e:af:30:
87:e9:35:6a:19:b6:7e:08:7e:f5:e7:da:14:75:b7:
4e:d7:56:4b:5f:79:9f:69:8c:94:8f:69:d2:89:a4:
97:10:57:3a:2c:19:b6:ba:19:99:32:f5:d7:e5:7f:
9c:89:71:54:7b:5b:77:73:6f:33:90:91:c2:fd:e1:
53:51:fa:7d:e6:24:6d:79:98:2f:88:15:8e:81:de:
44:ee:9d:20:7f:cf:ca:c0:ce:6d:21:2a:be:78:8f:
e3:9f:bf:87:a9:8c:d7:8a:b2:8d:24:2b:24:86:15:
bb:82:ba:07:16:33:a9:d5:9b:ae:c2:a9:c9:90:0e:
a4:46:3d:87:70:77:96:1e:19:6a:48:3c:41:ee:3f:
69:a4:87:77:3f:b6:f1:db:5b:14:aa:95:fb:e2:17:
92:ee:08:c8:15:17:f5:6c:e7:70:b3:81:d4:73:23:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:EE:50:24:ED:28:36:D6:24:52:F9:A2:1E:68:82:41:1C:39:AB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e31362e302f32322d3232203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.16.0/22
Signature Algorithm: sha256WithRSAEncryption
61:32:59:b1:ef:2e:cd:57:5f:60:b2:b0:56:bd:ff:53:b6:0d:
09:69:52:3c:12:a5:d2:ad:7b:0e:d7:c4:38:71:23:7e:03:22:
ab:ab:66:0c:59:2f:29:ad:d0:72:b9:04:68:c5:00:4a:a7:cc:
47:ee:68:a4:0c:0a:c3:de:0f:58:2e:f3:5b:97:ae:69:47:7e:
c1:61:48:c4:63:77:e6:f0:45:3b:39:37:38:ef:d8:62:c0:9a:
77:0d:9b:9a:54:3a:6e:a0:f3:e0:17:c0:72:90:84:a9:cb:ae:
7c:52:63:6c:1a:b2:4c:dd:81:ea:d7:fe:7c:90:ae:5c:09:aa:
86:fa:d8:07:a2:4b:e0:b2:64:ff:cd:05:e6:c3:16:0e:3a:04:
02:9f:f1:fa:b7:46:10:db:ce:fa:11:33:d9:f7:97:88:07:af:
04:2a:41:b2:45:e6:d0:f0:a3:21:57:cf:a3:fc:d9:6f:56:36:
b8:5f:c5:11:7b:26:6b:51:bf:a6:ce:07:97:6f:67:fe:fe:00:
56:62:fb:4c:60:68:01:45:0a:c0:38:44:14:d2:f8:3e:e7:67:
36:0a:5d:57:a1:c3:ec:97:bf:88:7c:b6:99:48:8e:f0:4c:4f:
32:c8:50:d4:1a:35:45:22:90:8f:cb:7d:6f:d3:8f:43:39:1d:
c0:ed:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org