Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e342e302f32322d3234203d3e20383334.roa
File: 3134372e37392e342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: gLb3/bWkAX6rBePm/+Ru6ohHnCQLE9CA91ogUDG+MQI=
Subject key identifier: AE:89:BD:D2:BD:BC:63:37:66:EF:19:F6:B3:62:D3:59:EF:A4:F0:0D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 06B762485BAB080ADDCFEA62B516D387910F9310
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e342e302f32322d3234203d3e20383334.roa
Signing time: Fri 05 Apr 2024 11:02:38 +0000
ROA not before: Fri 05 Apr 2024 10:57:38 +0000
ROA not after: Fri 04 Apr 2025 11:02:38 +0000
asID: 834
IP address blocks: 147.79.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b7:62:48:5b:ab:08:0a:dd:cf:ea:62:b5:16:d3:87:91:0f:93:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 5 10:57:38 2024 GMT
Not After : Apr 4 11:02:38 2025 GMT
Subject: CN=AE89BDD2BDBC633766EF19F6B362D359EFA4F00D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:30:6a:0e:db:d2:bc:30:2c:08:8c:ce:1d:
d3:e4:7b:96:bd:5b:dc:f3:6b:c5:da:88:df:aa:8b:
01:21:b2:51:c9:50:82:05:a1:56:3e:76:ea:43:58:
a3:79:4e:bf:7b:08:8f:22:ba:29:dd:2b:80:3a:b2:
71:4a:3c:14:13:a0:bf:7e:f9:23:7e:19:bc:01:08:
ba:77:f1:db:7a:60:9d:b5:b0:77:e2:68:c6:66:17:
7a:a9:78:05:d9:5b:eb:d8:a4:05:00:14:d7:30:24:
c0:22:2b:fd:51:11:20:ce:5e:68:90:00:9a:00:d8:
3a:67:61:24:0c:1f:74:34:b2:d2:42:ba:36:97:94:
70:80:c7:8b:d2:12:93:74:59:1c:37:f7:e1:c7:79:
23:ce:68:e3:5d:cd:5b:53:9e:dc:f1:d3:a5:21:df:
66:d1:04:17:b5:e8:91:10:45:74:61:ab:89:05:de:
ab:5e:b3:ec:ea:43:02:09:01:49:02:53:be:f4:a4:
b1:c7:86:a9:1a:b5:f6:22:fc:a1:b5:ec:cf:d4:ec:
c6:5a:a7:d4:3b:07:b6:16:2d:9f:c8:bb:8c:7b:64:
61:42:71:35:f8:c0:1b:9b:6a:ba:ef:7c:54:d9:f6:
9e:1c:4b:02:d9:60:39:d5:8c:d0:75:a0:2f:9b:a5:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:89:BD:D2:BD:BC:63:37:66:EF:19:F6:B3:62:D3:59:EF:A4:F0:0D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:45:da:8d:7c:e5:be:c2:1c:13:42:9b:0c:ea:c3:85:5f:93:
b2:d2:5f:3e:c6:1a:f3:d1:70:f3:2e:7b:2a:f4:4a:ea:03:50:
12:9c:17:81:52:bd:8f:7b:da:ad:51:45:b2:48:f3:7c:d7:2b:
fc:fb:25:e4:af:f7:d9:03:1a:1b:2a:b7:44:9a:af:9d:c6:db:
56:a6:90:15:b0:0f:74:aa:84:e1:ca:44:da:a6:40:08:57:43:
5a:57:a8:4b:ee:13:d3:5f:20:27:f5:96:fc:1c:e6:15:d4:26:
3c:57:dc:a6:92:24:fc:71:93:1c:b5:78:31:71:12:61:5c:db:
c3:6f:06:65:be:e0:17:75:ca:af:c4:b7:00:bb:78:3b:04:b2:
b1:7b:2b:06:25:14:f2:1d:db:78:70:17:ad:92:c5:87:8b:c7:
5c:c9:b6:13:92:fe:d8:d0:a4:f7:25:e8:87:04:23:c4:a3:f6:
fe:75:c9:9e:42:da:d4:56:12:da:2b:49:75:da:b9:eb:d7:f9:
d9:58:84:cf:23:f2:af:9a:84:ab:90:05:76:da:10:5a:fb:e9:
e6:73:ed:80:cf:97:d0:07:fc:93:8b:cc:b5:54:2a:27:86:5b:
65:74:27:80:41:9e:8e:a2:14:94:6f:2c:14:ce:15:64:f9:31:
0b:25:a6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org