Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e35362e302f32322d3234203d3e20383334.roa
File: 3134372e37392e35362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: k3pK0eL2RgyHEK96/XxNJE9GhYbBXOyvcKrcmnkYzM0=
Subject key identifier: 80:7C:57:63:96:D1:DE:C8:1F:5C:40:05:26:B1:C3:44:FF:79:04:58
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0783BB4D6531768E30105695A0B5E55DA704BFF2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e35362e302f32322d3234203d3e20383334.roa
Signing time: Sat 23 Mar 2024 15:00:06 +0000
ROA not before: Sat 23 Mar 2024 14:55:06 +0000
ROA not after: Sat 22 Mar 2025 15:00:06 +0000
asID: 834
IP address blocks: 147.79.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 18:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:83:bb:4d:65:31:76:8e:30:10:56:95:a0:b5:e5:5d:a7:04:bf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 23 14:55:06 2024 GMT
Not After : Mar 22 15:00:06 2025 GMT
Subject: CN=807C576396D1DEC81F5C400526B1C344FF790458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:a3:42:16:e5:67:a1:9b:75:51:a9:33:54:
39:88:90:75:d9:23:43:d9:5f:61:6c:a5:6c:d4:c2:
2b:98:10:71:2a:8d:8f:39:fb:e6:15:1c:73:6b:59:
0b:b8:52:57:9a:2c:0c:2b:d6:89:bc:b5:8b:cf:71:
5f:72:2d:c9:90:46:4b:7d:0e:19:be:f8:be:95:f0:
51:3d:15:bf:a5:1f:6f:a0:2e:75:97:ef:e0:70:a6:
38:22:aa:f7:50:54:66:de:6e:bd:e9:9c:b6:55:2f:
a6:8e:13:6b:29:92:ea:fd:9d:61:6b:df:cb:e6:55:
94:a3:fd:92:cc:05:f7:8f:f9:c4:5d:55:3e:6e:83:
34:b8:ab:11:68:ab:e4:92:eb:7d:53:d5:e2:c8:28:
90:eb:e6:64:14:e6:26:32:50:b0:3d:4d:48:eb:86:
e8:b6:07:08:02:9f:d6:59:e6:c0:86:3d:dc:f1:2a:
72:7c:38:97:c7:59:31:9c:cd:25:3d:9f:6e:c6:82:
6d:b3:33:ed:02:7c:69:8d:da:fe:87:5d:31:4c:cc:
99:64:44:a8:29:ea:11:af:ad:0a:4c:48:e5:89:79:
1b:ff:8e:ad:84:64:a2:17:5f:24:9b:81:84:14:61:
91:e9:13:b7:74:eb:96:98:6d:09:ef:ec:8e:51:6f:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7C:57:63:96:D1:DE:C8:1F:5C:40:05:26:B1:C3:44:FF:79:04:58
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e35362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:2f:09:2c:de:65:94:39:de:23:57:0a:d3:2b:8b:7d:45:88:
51:b3:db:2c:ac:ed:65:7b:e7:8f:dc:bd:b2:5b:0b:bd:9c:bb:
a7:c7:95:8d:62:3e:6c:d2:cb:09:ea:be:8c:6e:b0:09:fd:ff:
65:c0:f8:2e:b5:b9:e7:6d:51:17:50:c0:66:e7:b4:be:93:45:
ea:b2:db:f3:59:28:2e:36:78:08:8f:92:33:4a:d9:46:e2:e3:
41:d8:e6:70:6e:5c:bb:21:18:d8:7e:0f:a5:e2:47:29:4b:6d:
51:ec:22:1f:c5:6f:eb:30:c8:ee:21:1d:28:93:8e:86:c5:2f:
e9:ae:b0:3d:f1:a6:9a:e0:2f:7a:df:a8:c2:7f:d2:30:d7:61:
c9:d4:31:08:3b:4f:77:4d:84:2a:7f:e7:32:5a:26:58:6a:5f:
68:06:03:96:20:e8:18:c9:13:6b:47:23:2d:09:33:ad:2c:96:
7a:8f:fd:78:de:6b:81:ff:bd:de:b0:b6:42:12:2c:03:0a:1d:
07:b0:c9:f8:b8:cd:2b:7c:0b:34:ad:69:e7:a2:65:67:dd:81:
8a:a9:98:13:52:b5:d0:a4:b8:8f:30:b2:17:7e:b6:1b:99:24:
36:5d:43:e7:c5:4e:e5:06:e0:5a:98:7e:0b:b7:e6:e7:e4:b1:
07:b0:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org