Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e33322e302f31392d3234203d3e20383334.roa
File: 3134372e37392e33322e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier: NYQ53pCMEc3hdu6LQKwD9tdAKeNXAbRCrk37AL+m6Xk=
Subject key identifier: 3D:77:5E:B5:C4:8A:04:2F:64:47:44:B3:9E:E0:C7:06:28:6D:2D:6B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 61EA73174F267412C7B62E23AF4D604541CE27AC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e33322e302f31392d3234203d3e20383334.roa
Signing time: Tue 27 Feb 2024 00:52:18 +0000
ROA not before: Tue 27 Feb 2024 00:47:18 +0000
ROA not after: Tue 25 Feb 2025 00:52:18 +0000
asID: 834
IP address blocks: 147.79.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 10:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ea:73:17:4f:26:74:12:c7:b6:2e:23:af:4d:60:45:41:ce:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 27 00:47:18 2024 GMT
Not After : Feb 25 00:52:18 2025 GMT
Subject: CN=3D775EB5C48A042F644744B39EE0C706286D2D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:a0:ef:2d:8b:8d:79:cd:4f:d8:3b:e3:e4:
4f:53:ae:c8:b0:86:2c:88:1e:47:a8:cb:de:85:ba:
43:74:b4:37:22:6f:b4:dc:ff:8d:96:10:ca:1a:0a:
79:14:fa:40:38:2a:5d:58:22:94:6a:83:aa:f9:37:
4b:99:8c:4a:c8:f6:0d:37:aa:47:4d:ba:31:76:8d:
fa:0d:0f:55:4b:7e:57:49:ef:20:7c:fb:a6:09:e3:
8e:c2:30:a8:9a:b6:74:74:15:77:f0:4e:37:01:fe:
80:81:9f:29:30:44:4f:cc:c7:9d:39:84:d7:a8:4a:
32:53:40:8c:1a:6f:7b:42:27:d9:08:0e:39:fe:18:
5f:8f:c9:60:d3:07:34:f6:8e:77:c4:49:37:c2:fd:
ff:77:c5:3a:56:ab:05:4e:26:1c:b7:1c:18:22:d5:
a9:57:83:f4:1e:b8:8f:12:29:e0:5d:19:7f:c5:e5:
8f:2f:67:f7:0f:40:a3:0f:98:83:c7:85:22:c2:e8:
04:32:bf:d5:83:d2:03:c8:a6:07:1d:28:fc:93:94:
e4:b5:05:95:3d:2b:a9:86:a0:e6:aa:18:15:fc:dc:
64:47:5a:e8:6d:38:ef:54:fb:50:bf:5c:54:c0:17:
d6:29:44:84:a2:0b:2f:28:e9:4e:50:10:38:04:6e:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:77:5E:B5:C4:8A:04:2F:64:47:44:B3:9E:E0:C7:06:28:6D:2D:6B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e33322e302f31392d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:3b:2f:d8:f3:e0:76:26:02:29:2e:f6:ce:3e:50:72:88:65:
57:76:4e:4c:24:7d:23:95:36:e4:c7:0a:c5:eb:2d:c8:e7:92:
56:3e:b0:f3:85:96:9d:3b:3f:6d:e0:48:1b:db:7d:36:11:f8:
aa:b8:68:28:57:0b:ee:fc:af:1e:ec:84:3d:7a:77:fd:15:c6:
14:dc:53:44:50:d3:1c:78:8a:fe:c7:ed:8a:e9:57:49:a4:a6:
42:2d:39:fe:52:08:27:5d:1d:0c:1f:7f:26:ea:fc:37:af:62:
eb:3f:ed:c0:eb:5e:23:23:20:3b:a8:45:f9:a7:ca:43:e5:23:
37:2f:99:16:e3:89:cb:a5:86:32:a6:3a:60:2e:1a:da:ef:27:
8d:93:bf:8d:51:77:12:58:11:ce:0b:e3:c3:ff:b5:21:54:9b:
3a:ca:a2:dd:1a:e1:91:50:93:b6:70:c5:36:66:21:1c:a5:8e:
c7:72:a8:f2:33:a7:9e:c0:80:8c:72:32:1b:15:1b:d7:15:7f:
bb:e5:44:e9:72:6a:13:15:14:35:62:88:34:9f:31:7e:4a:36:
3b:1c:7e:3f:3e:96:42:30:ac:31:a7:1f:61:9a:dc:7d:8e:e8:
20:45:fb:5d:09:49:99:16:22:ef:a8:b2:57:9e:35:4a:2d:ec:
e9:f5:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org