Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e34342e302f32322d3234203d3e20383334.roa
File: 3134372e37392e34342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: Qo2udgGPLIVxYYUhrdvLtQ+zQJ/wzzG7VJEbAjKueWo=
Subject key identifier: 2D:14:BD:EB:B9:A3:31:29:13:69:C2:7F:E7:31:24:02:08:E5:1B:AB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 22122ED2741CAE7A068AE19173E17FA0893789B8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e34342e302f32322d3234203d3e20383334.roa
Signing time: Tue 05 Mar 2024 10:22:13 +0000
ROA not before: Tue 05 Mar 2024 10:17:13 +0000
ROA not after: Tue 04 Mar 2025 10:22:13 +0000
asID: 834
IP address blocks: 147.79.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 14:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:12:2e:d2:74:1c:ae:7a:06:8a:e1:91:73:e1:7f:a0:89:37:89:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 5 10:17:13 2024 GMT
Not After : Mar 4 10:22:13 2025 GMT
Subject: CN=2D14BDEBB9A331291369C27FE731240208E51BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:b2:d7:79:d6:4d:d1:09:7f:2c:23:4a:6a:
d1:c9:0d:91:e5:a0:b0:6a:ef:82:4a:19:d4:a9:01:
3c:60:46:69:17:ec:98:77:70:c2:78:fb:09:f0:92:
5a:67:81:ec:fe:be:8a:67:91:c7:5f:71:b3:ce:a6:
d8:a1:db:55:f9:06:c4:f4:94:01:c0:5b:ba:a6:83:
13:09:53:ac:77:b8:86:d2:45:18:a2:3d:af:42:6f:
c8:b2:b5:70:66:ed:4b:fd:b4:15:d2:52:0e:0a:95:
66:7b:5e:2f:cb:ac:63:73:4e:b2:f7:8d:74:bd:6d:
a3:8f:14:5c:9b:d4:f7:de:63:87:3f:3e:6e:96:9d:
26:28:4e:2c:26:ab:f3:68:16:7e:85:8f:96:c5:8d:
93:c5:e3:df:c2:72:cb:34:fb:3b:f2:27:de:7e:e2:
fb:80:62:16:6e:49:2f:74:11:35:44:9e:9d:e8:74:
82:6a:0f:e4:31:8f:83:f2:73:fd:67:1e:1c:86:3f:
55:ab:7c:38:a6:94:f1:17:0b:f1:2b:c6:79:ad:06:
13:41:57:b5:06:d3:eb:33:3c:5e:a3:20:40:38:33:
a8:12:67:7e:87:b1:ab:5e:c5:d7:1c:8e:b8:0d:97:
79:66:a8:e4:b8:64:ff:15:da:12:a5:ac:eb:65:2a:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:14:BD:EB:B9:A3:31:29:13:69:C2:7F:E7:31:24:02:08:E5:1B:AB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e34342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:06:fc:a8:f1:7d:00:dc:b9:e8:b8:88:e0:d8:6c:5e:ca:51:
4d:76:09:0d:fc:f1:d2:4b:aa:68:75:70:fb:79:ce:ce:fe:6a:
0a:4a:a1:ab:dd:6c:15:f3:76:32:58:47:61:9b:2b:27:6f:a4:
08:05:20:01:05:15:ff:4f:aa:3c:f5:2a:85:dd:d6:8a:ac:56:
f2:4f:47:31:aa:89:e9:90:2a:77:c7:a3:a1:7e:88:2c:24:99:
0b:fd:40:5d:45:f8:c3:42:bf:40:ca:80:d9:22:3c:9f:6a:d9:
56:d1:bb:d8:a3:f5:53:f6:5c:da:af:81:c9:0b:56:2b:34:3d:
3c:d7:a4:6e:b6:fa:1f:da:fc:69:75:bf:d5:62:65:68:4d:d3:
6e:b0:95:89:38:8c:41:fe:17:a9:56:d4:52:b1:7d:86:e7:c6:
bb:e8:56:de:f0:ae:9d:c8:1f:a5:a2:7d:f8:79:7c:c2:03:05:
42:90:ec:8f:cf:2c:31:76:c8:bf:1d:a1:0a:ae:b5:ec:c4:9a:
08:ed:05:f5:00:38:c5:a1:ec:15:8b:16:5f:ba:1a:a1:0d:da:
da:61:85:71:30:39:6c:f9:c1:f0:d0:b0:c5:e7:07:d9:b9:60:
4b:97:e6:b1:ad:36:c1:36:f3:9d:65:b2:c1:f2:fb:e6:06:cd:
38:02:53:f3
-----BEGIN CERTIFICATE-----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Generated at Sat Mar 23 16:47:15 2024 by rpki-client on console-ams.rpki-client.org