Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e34382e302f32322d3232203d3e20313734.roa
File: 3134372e37392e34382e302f32322d3232203d3e20313734.roa (raw, json)
Hash identifier: Z1a/4vMdMZAaH9ksaX8MqhOPCxJDkyCEk+WmfQUq/Xs=
Subject key identifier: 10:7D:5E:CC:E2:69:5F:4D:34:24:6E:72:1B:7C:B4:03:14:AC:E5:08
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3B8D53B86EC05291E1FA35CDF036629421C93E45
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e34382e302f32322d3232203d3e20313734.roa
Signing time: Tue 05 Mar 2024 10:20:02 +0000
ROA not before: Tue 05 Mar 2024 10:15:02 +0000
ROA not after: Tue 04 Mar 2025 10:20:02 +0000
asID: 174
IP address blocks: 147.79.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:8d:53:b8:6e:c0:52:91:e1:fa:35:cd:f0:36:62:94:21:c9:3e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 5 10:15:02 2024 GMT
Not After : Mar 4 10:20:02 2025 GMT
Subject: CN=107D5ECCE2695F4D34246E721B7CB40314ACE508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:b4:14:6b:f1:22:8e:f3:08:79:48:49:84:
0a:99:de:78:0f:2b:69:13:62:65:19:88:4f:27:8b:
51:ac:8a:c9:62:ea:d8:f8:61:dc:d1:39:32:3b:2d:
87:c7:3c:ce:72:67:61:d2:47:63:14:b0:b5:0e:e7:
e9:e9:7e:49:b0:09:c8:b7:f2:d1:84:2a:28:d9:4d:
b9:17:51:1e:e2:8f:39:f0:c1:a2:5f:e6:42:d2:6c:
ae:6f:e2:4c:3e:eb:fd:0c:75:6f:92:72:b7:14:4d:
a8:db:ae:a0:6c:d8:2e:d0:a2:4d:e9:62:b4:6e:11:
96:4c:a8:aa:71:ab:5f:3a:05:73:7b:92:b0:1b:a5:
b5:9c:e5:2e:e5:42:43:e0:77:b4:29:b6:b1:aa:8c:
5d:af:15:d5:88:46:3c:be:e2:d7:cd:8a:1f:67:1a:
13:fc:4c:a5:b1:b5:f6:b9:99:e9:2a:4d:b9:e6:36:
dc:54:68:9c:1d:01:a3:84:10:16:28:5b:56:54:db:
fc:53:11:01:73:28:d8:c9:73:b6:74:b7:6d:da:c9:
ba:13:f9:66:7f:86:f9:09:fe:9a:6b:f2:b5:85:4d:
12:41:2d:45:70:8b:d1:0a:5a:f0:ad:84:d2:bf:85:
ea:15:12:5a:1c:01:e4:d8:88:91:1e:d4:fc:8e:50:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:5E:CC:E2:69:5F:4D:34:24:6E:72:1B:7C:B4:03:14:AC:E5:08
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e34382e302f32322d3232203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:76:4e:7a:af:ae:f0:7b:cc:6b:ce:11:b0:46:e7:fe:a4:53:
6b:4d:4b:29:26:cc:7b:db:b1:d2:1f:00:b0:1d:02:43:0c:bf:
84:f6:ef:e4:20:35:8c:6c:99:d5:e6:2e:ac:64:03:2d:bc:28:
ec:70:fa:62:36:e5:c6:0d:83:d8:4e:79:83:c3:d0:37:07:ba:
33:aa:93:a7:df:18:3f:10:6c:6b:82:00:41:6c:12:5d:38:f2:
e6:75:12:b4:b7:ed:89:aa:31:17:d2:95:32:da:6a:e8:f1:ec:
f3:e5:9c:f7:32:46:4f:b1:8d:90:49:57:d6:53:b8:7d:31:3d:
27:75:77:5b:1c:e1:9b:7e:d3:a4:e8:4f:c3:ed:d9:36:91:4f:
98:24:01:72:b3:07:cc:24:2e:57:ac:6f:61:6f:90:3b:44:1e:
3b:07:1e:5e:fa:f9:54:de:92:bf:96:5c:d4:72:83:92:de:5e:
34:17:14:28:83:07:8f:d5:70:ee:5d:9c:66:98:13:59:c5:84:
d4:5c:24:17:28:6b:6f:79:b8:d9:74:15:a4:15:87:a7:8a:60:
f3:99:74:f9:66:1f:88:51:f1:1f:d9:80:20:60:79:87:4e:67:
e7:bf:80:39:38:4c:2b:54:17:53:e7:04:c4:49:69:78:c5:8e:
ae:af:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org