Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e34302e302f32322d3232203d3e20313734.roa
File: 3134372e37392e34302e302f32322d3232203d3e20313734.roa (raw, json)
Hash identifier: SYwc79aKbPzVWXxJdqMCzl+SVImnCAWB63ud7xVfvss=
Subject key identifier: F5:26:01:31:99:0A:4B:97:F6:97:11:4D:8B:E1:38:32:29:6E:34:5A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0F50F40BFF3AC442937CDC28AA7D52D54587C529
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e34302e302f32322d3232203d3e20313734.roa
Signing time: Tue 05 Mar 2024 10:20:02 +0000
ROA not before: Tue 05 Mar 2024 10:15:02 +0000
ROA not after: Tue 04 Mar 2025 10:20:02 +0000
asID: 174
IP address blocks: 147.79.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 18 Mar 2024 14:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:50:f4:0b:ff:3a:c4:42:93:7c:dc:28:aa:7d:52:d5:45:87:c5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 5 10:15:02 2024 GMT
Not After : Mar 4 10:20:02 2025 GMT
Subject: CN=F5260131990A4B97F697114D8BE13832296E345A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:66:23:b0:e8:a2:1c:d1:08:31:79:d6:45:
c9:a7:d0:db:cd:db:f9:89:8e:f5:20:e5:eb:de:39:
0c:1a:76:a5:64:15:cd:7c:0e:b8:0e:be:24:50:0c:
ca:d1:85:a4:11:38:00:46:65:76:d8:20:4e:50:bb:
35:ef:b7:ef:dd:d6:04:55:8b:55:6f:b0:73:05:ac:
aa:2c:7f:d3:82:48:ca:ce:0a:cb:af:41:72:7c:3d:
c6:58:c7:a6:f8:31:c6:84:62:22:e3:81:2e:bf:8d:
7f:b5:70:1f:c8:92:05:63:e5:10:17:e9:f5:a5:30:
3f:b3:d5:4b:0d:b3:aa:05:56:a8:0d:15:9a:ff:e9:
fa:73:ed:99:df:eb:fd:95:30:cd:ae:d9:cb:70:dd:
00:39:cd:5d:40:5a:0a:17:48:ea:33:96:35:80:60:
0d:1c:12:17:39:45:9e:b4:4d:38:86:59:34:b5:17:
bb:96:b4:b3:17:2a:38:88:94:5b:47:eb:d8:db:74:
da:74:d4:01:24:96:98:07:45:64:7b:f3:e3:6e:9e:
31:3a:d8:21:cd:9c:aa:35:57:3a:a2:54:c3:dc:78:
17:fe:5a:73:4f:e4:fd:25:36:c8:4f:84:e7:0b:0f:
cc:8b:0d:54:4c:77:e2:42:27:da:4b:e9:86:5b:a3:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:26:01:31:99:0A:4B:97:F6:97:11:4D:8B:E1:38:32:29:6E:34:5A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e34302e302f32322d3232203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.40.0/22
Signature Algorithm: sha256WithRSAEncryption
71:69:a6:ac:78:3d:0f:de:f3:b2:57:75:9a:00:94:d0:03:6d:
6a:73:3d:da:dc:94:8b:cb:fc:e8:a3:12:da:c8:4e:20:8b:03:
92:d1:1e:29:1c:ea:28:c7:b9:a8:07:44:49:51:86:4c:7c:cd:
1c:6e:8b:90:9a:21:3a:e8:a2:fe:72:88:64:d1:2a:f0:df:03:
cc:49:c4:98:a0:18:39:25:67:e9:ba:fa:3b:e2:bf:7e:4c:69:
2a:a3:5c:55:45:b6:55:27:77:a5:aa:49:0a:4e:cd:ee:79:c5:
fc:e1:5d:c2:9f:3d:7e:a1:92:c0:1d:33:b5:b1:79:f8:01:f6:
74:75:c0:d0:31:50:75:4d:9a:e7:1f:42:cf:90:a0:18:da:e8:
a1:0c:de:57:de:5f:6a:74:60:a3:2f:e5:2d:92:55:b4:ef:e1:
03:2c:7c:91:cd:5d:1e:7d:3d:e0:ff:b5:a4:ca:7d:7e:5c:cc:
8f:ec:25:dd:5b:c9:87:3f:26:3e:90:e0:80:da:07:fb:91:b8:
29:d2:0f:f7:76:0d:f6:28:ad:61:eb:d9:79:83:8e:e4:0e:53:
ff:96:29:a3:b9:ee:93:e6:80:56:65:73:19:de:8f:dd:3b:de:
7f:04:4c:13:e4:07:fd:34:c1:4b:d3:96:2f:65:40:e2:bd:d5:
9d:39:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org