Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e32302e302f32322d3234203d3e20383334.roa
File: 3134372e37392e32302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: tV9NeCq7hgGvpZf34BFaMfqo6i0ssbSQOrpEpxtKZlg=
Subject key identifier: 5E:FF:B3:4A:B7:03:61:F2:7B:77:69:12:39:44:3B:08:FC:C9:86:27
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5EA20B15454E825826E5AD4B45D49264B7F5DBBF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e32302e302f32322d3234203d3e20383334.roa
Signing time: Sat 23 Mar 2024 14:00:06 +0000
ROA not before: Sat 23 Mar 2024 13:55:06 +0000
ROA not after: Sat 22 Mar 2025 14:00:06 +0000
asID: 834
IP address blocks: 147.79.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 15:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a2:0b:15:45:4e:82:58:26:e5:ad:4b:45:d4:92:64:b7:f5:db:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 23 13:55:06 2024 GMT
Not After : Mar 22 14:00:06 2025 GMT
Subject: CN=5EFFB34AB70361F27B77691239443B08FCC98627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:3a:c8:76:a4:8d:10:f2:ca:97:7d:cc:ed:
7c:7f:fa:ca:ac:96:d8:c5:a2:1b:93:10:b0:30:2b:
37:85:98:d4:79:00:ab:9d:c7:14:1e:18:d6:ba:e8:
e3:99:3a:42:81:dc:51:5d:e3:97:77:6e:d0:6d:70:
1a:ce:5e:00:aa:1c:b1:6a:ca:0e:09:19:f7:67:14:
e8:37:af:f6:e5:09:aa:fa:da:c7:46:f9:08:24:99:
10:f3:c7:26:e1:4d:fb:d1:23:3b:a1:66:01:5e:e8:
6c:6b:c8:3f:50:55:fd:97:ce:66:d5:91:96:85:b8:
15:dc:9d:87:67:f6:b8:bf:e6:8f:cf:a1:e3:83:10:
92:0e:58:31:3f:c8:fb:1b:b7:a0:10:6a:ef:e1:bc:
10:d6:77:c1:90:16:db:9c:7f:ac:26:ef:e9:82:6d:
6e:23:35:76:2b:a9:f2:e9:d5:cf:07:a0:55:0d:8a:
bc:33:6e:81:a0:92:3f:82:b4:4a:a0:d3:c2:c3:62:
11:06:f3:6a:16:83:42:cd:65:97:9b:07:be:b9:d0:
c8:fa:7e:d1:df:ac:a5:05:c1:f4:5c:72:e5:c4:78:
07:f9:8f:d4:cd:ae:f0:52:e8:88:07:c1:d3:80:cd:
a1:47:35:af:7e:ff:69:0d:43:df:7b:68:0e:57:ae:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FF:B3:4A:B7:03:61:F2:7B:77:69:12:39:44:3B:08:FC:C9:86:27
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e32302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.20.0/22
Signature Algorithm: sha256WithRSAEncryption
26:39:53:d2:65:21:dc:ea:0b:ba:94:75:20:a5:a4:cd:72:77:
b4:5c:1e:2e:ae:21:0a:86:63:9f:1e:aa:10:2c:32:b1:77:b9:
1d:79:42:15:9a:60:f7:01:ef:63:f7:fb:4c:22:23:67:03:50:
ef:19:3f:e9:8c:28:fe:1b:4f:71:b6:80:14:f5:c4:d1:df:fa:
fd:c1:10:bd:85:24:ca:d9:e7:19:93:1f:93:4f:fe:53:5f:5e:
36:b1:b3:5a:72:07:96:b6:ab:40:82:de:84:b1:3e:38:1f:5f:
cc:0f:90:81:7b:cb:68:67:fa:c6:5a:1f:c0:ec:16:9f:16:54:
ee:25:99:08:c3:a3:a6:b9:cc:f3:ab:ee:fa:2a:43:92:14:8f:
7e:3f:57:a1:07:39:ce:23:81:2f:52:58:2e:36:2f:46:5c:ac:
ab:bd:6f:50:7e:1d:6f:24:e6:c4:92:b5:db:90:f1:00:5f:e3:
54:d2:ef:0b:d7:7d:55:a0:85:34:36:0b:e5:62:34:4d:fc:6a:
6b:28:75:8a:31:9e:02:fc:96:40:1b:e1:be:33:06:b0:85:a8:
aa:93:12:9f:4d:52:ef:9d:55:9a:71:f1:9a:e3:e5:87:33:89:
09:a9:9a:28:91:d1:80:e6:5d:ad:74:77:5b:9a:45:cc:6f:4a:
ff:22:a6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org