Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e33322e302f32302d3234203d3e203534303034.roa
File: 3134372e37392e33322e302f32302d3234203d3e203534303034.roa (raw, json)
Hash identifier: m93wRQVY1rZNDjMu/7cXeMEGKYeRccw/FR2Hgsavwks=
Subject key identifier: 71:01:E0:AF:FA:B6:A4:DD:2B:1D:DF:07:A4:11:3A:BC:3B:30:4B:C2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 52ACA164CACD9AF63A48CBAA4FF6F522B3F17512
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e33322e302f32302d3234203d3e203534303034.roa
Signing time: Thu 04 Apr 2024 01:46:12 +0000
ROA not before: Thu 04 Apr 2024 01:41:12 +0000
ROA not after: Thu 03 Apr 2025 01:46:12 +0000
asID: 54004
IP address blocks: 147.79.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ac:a1:64:ca:cd:9a:f6:3a:48:cb:aa:4f:f6:f5:22:b3:f1:75:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 4 01:41:12 2024 GMT
Not After : Apr 3 01:46:12 2025 GMT
Subject: CN=7101E0AFFAB6A4DD2B1DDF07A4113ABC3B304BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:80:60:4e:60:76:3a:94:77:5a:21:69:1f:
b8:83:70:63:43:fd:3e:b5:d4:ac:4b:ef:58:25:d8:
93:90:ae:79:34:af:ba:1b:f3:fd:5f:09:20:bc:f2:
4e:c4:0a:a2:2d:9e:de:43:72:16:6f:7b:87:39:ac:
a8:07:db:14:cc:db:03:da:47:6a:27:75:89:0b:a3:
46:67:44:85:05:d6:5c:60:f8:aa:44:71:f1:02:3d:
7f:70:ef:c3:7a:87:2a:d5:75:80:77:ec:bc:15:80:
be:39:7d:8b:2a:73:cd:15:10:a3:e8:41:3d:4a:2d:
b9:8e:dd:cd:78:db:5f:9c:e1:66:cb:49:3b:c2:2d:
38:ef:ab:31:4a:47:01:7b:2d:24:34:8b:6f:d0:77:
3a:72:69:98:63:b7:96:54:0b:9d:d5:09:83:23:d5:
d3:aa:8b:1a:f3:6d:db:fc:74:d5:a4:d1:de:91:4a:
0b:a5:c4:dc:dc:d5:aa:fb:68:a6:e3:7c:c9:12:33:
9e:e8:ad:b8:42:26:f9:5b:c7:e7:f6:d5:a0:f8:f9:
c6:3d:16:72:f8:67:8e:a4:92:ff:bc:08:c9:5e:ce:
61:aa:d9:60:a0:eb:93:f1:20:c3:08:f9:2b:7a:f2:
3a:56:64:f7:d8:c0:f9:35:8d:bf:bf:19:d8:d4:9e:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:01:E0:AF:FA:B6:A4:DD:2B:1D:DF:07:A4:11:3A:BC:3B:30:4B:C2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e33322e302f32302d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.32.0/20
Signature Algorithm: sha256WithRSAEncryption
67:b9:53:3f:50:c7:09:e5:65:d1:c0:49:21:65:d0:9f:5b:4c:
c4:4e:f9:de:89:1d:60:a3:87:59:28:42:12:d2:e4:e0:a4:f2:
a0:2a:32:da:c6:31:8d:92:fc:cd:10:48:83:6b:24:bb:2e:ad:
c4:27:2a:8b:8c:ff:3d:2f:d4:5d:e1:3f:48:22:f9:94:d2:c1:
60:e4:4c:8f:0f:b0:d5:47:9a:1d:08:15:28:90:7b:9a:6d:2f:
6e:6e:0f:2d:b7:4d:29:eb:20:16:d8:5e:a0:7f:99:d2:eb:39:
e0:2f:ff:98:47:e1:ba:15:55:3c:29:fa:1f:ac:b0:5a:c7:fd:
77:33:7d:fa:56:33:71:0f:43:8c:58:c7:16:2a:23:30:4b:31:
83:cb:d8:2d:c2:ea:c3:d6:86:96:0c:32:a7:ae:38:d3:a3:37:
d0:94:e0:71:75:a1:65:b0:71:92:a7:16:0e:9b:f8:85:ec:0c:
4c:1f:22:31:8e:29:a3:fa:13:90:f8:e8:93:3a:f7:4a:3f:7d:
58:28:bf:3c:5d:ed:ff:ce:c8:4a:26:be:a4:52:ff:06:7b:06:
ec:87:d2:0c:71:94:c2:b7:d8:71:4d:f1:a2:01:24:fa:75:f3:
ba:be:dc:59:f2:cf:95:72:57:07:9e:1e:cf:d6:ca:8d:d1:90:
e3:08:fc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 12:13:37 2024 by rpki-client on console-fra.rpki-client.org