Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e33302e302f32332d3234203d3e20383334.roa
File: 3134372e37392e33302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: jBfITP5MYNxnlvbSIiOK1L7SW73PSMErThK5RQ45VQ8=
Subject key identifier: EF:F2:36:10:1C:4C:4B:64:38:ED:7D:AA:B8:BE:F8:36:A7:68:1B:65
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 227EF8266499B131C9AB61386015C076150B0D35
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e33302e302f32332d3234203d3e20383334.roa
Signing time: Wed 03 Apr 2024 17:18:56 +0000
ROA not before: Wed 03 Apr 2024 17:13:56 +0000
ROA not after: Wed 02 Apr 2025 17:18:56 +0000
asID: 834
IP address blocks: 147.79.30.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7e:f8:26:64:99:b1:31:c9:ab:61:38:60:15:c0:76:15:0b:0d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 3 17:13:56 2024 GMT
Not After : Apr 2 17:18:56 2025 GMT
Subject: CN=EFF236101C4C4B6438ED7DAAB8BEF836A7681B65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:69:4a:60:aa:70:02:3e:e3:3a:86:2e:4b:
0d:e9:f7:5d:d1:c4:58:d9:c9:e7:25:6b:1a:55:a5:
52:1c:87:f7:1f:af:46:d4:f1:71:81:a0:43:62:a4:
d5:15:9e:23:cf:38:fb:83:bd:9f:4b:6e:b2:b6:b8:
d1:23:ba:48:cb:76:45:b0:c7:7d:e6:c2:f4:03:14:
68:c2:ee:47:af:c9:67:3b:35:f2:24:82:83:94:d0:
39:67:dd:1c:c0:75:f2:60:70:70:da:2b:70:54:1f:
07:0d:ea:bf:3e:cc:33:27:11:2f:0f:80:3b:9c:c7:
2e:3c:29:ed:b6:e1:1e:ac:ec:86:58:23:64:3f:71:
9a:af:86:01:11:d9:2a:e1:d6:0e:85:3a:c0:db:d3:
2c:9c:f4:bb:9e:49:fb:60:ac:6e:9a:c6:5e:0a:03:
f3:ec:74:43:97:54:f2:d7:87:86:56:59:4a:65:b8:
51:96:09:e9:37:a5:b5:a5:3e:85:e3:16:ba:e7:3d:
db:28:ba:1b:91:ce:aa:80:03:e4:c7:58:45:44:81:
d4:2e:07:5e:8c:fc:51:8c:02:58:64:86:82:8b:48:
9e:f8:db:d0:07:6e:99:bf:8a:1a:a7:d8:b1:a8:06:
b7:ff:0f:d1:13:a2:a1:43:6e:90:50:85:1b:2c:a4:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F2:36:10:1C:4C:4B:64:38:ED:7D:AA:B8:BE:F8:36:A7:68:1B:65
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e33302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.30.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:5e:16:3b:28:c4:69:f4:ac:a8:5c:c6:53:07:47:b6:ef:fb:
75:65:1e:bc:16:fb:28:bd:78:e6:d0:67:7a:8c:7d:7d:17:42:
28:9b:13:93:6c:0e:16:3c:eb:18:51:f1:b6:b8:e5:23:35:5e:
13:4e:f2:52:fd:78:2d:2f:f3:93:95:63:51:5f:44:65:c6:cf:
cf:69:e3:27:f1:4b:1a:0e:16:cc:66:57:11:b9:55:24:88:ad:
42:2b:90:98:30:38:75:0e:c4:f0:90:95:a8:3a:db:ef:d6:12:
da:d9:6f:46:72:b8:f6:86:ed:32:46:5c:b0:96:72:0a:c2:34:
cc:7b:99:50:08:47:41:bf:e2:1f:90:2d:54:53:61:fe:46:e4:
98:82:65:76:32:05:4b:16:6c:21:cc:cc:90:7f:21:96:9e:69:
a4:66:76:bd:69:64:ee:33:01:7d:b9:f8:21:b3:7a:c8:5c:79:
6a:35:d1:cc:dd:34:e1:e8:7e:4d:2c:6f:6a:df:a8:10:d8:cd:
34:4a:e1:78:1e:4b:6a:f0:59:50:df:ff:a6:d5:81:1e:00:84:
76:a6:2b:d6:e0:49:0d:7e:20:06:50:c3:66:cb:eb:93:8b:0e:
a3:af:05:75:d7:f5:57:9d:fc:08:20:8d:73:5d:17:97:6f:80:
af:61:ed:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org