Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e35382e302f32342d3234203d3e20383334.roa
File: 3134372e37392e35382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: f6jHuYfMxOTZYN6TLD7+qaTgNSKBRrgo1ZK3PdqZhH4=
Subject key identifier: D6:E2:F8:3D:B3:CD:6F:70:34:B6:47:82:F3:41:96:C8:3C:A6:01:CC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 724D95BBF5428DB0C08FC897B710FCBE2C1A8D64
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e35382e302f32342d3234203d3e20383334.roa
Signing time: Fri 05 Apr 2024 18:17:35 +0000
ROA not before: Fri 05 Apr 2024 18:12:35 +0000
ROA not after: Fri 04 Apr 2025 18:17:35 +0000
asID: 834
IP address blocks: 147.79.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4d:95:bb:f5:42:8d:b0:c0:8f:c8:97:b7:10:fc:be:2c:1a:8d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 5 18:12:35 2024 GMT
Not After : Apr 4 18:17:35 2025 GMT
Subject: CN=D6E2F83DB3CD6F7034B64782F34196C83CA601CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:bb:e0:ff:d4:c8:7f:b0:19:fe:18:5e:fd:
cd:e0:78:30:41:ed:9a:cb:d8:26:01:b3:69:ae:9b:
cb:7b:4b:2e:ae:ab:d6:de:66:73:6b:b4:a3:27:4b:
34:3c:1f:d1:71:93:ca:de:45:dc:5a:2d:73:cd:b6:
11:8f:ee:d8:86:ea:ca:1e:bd:86:78:ce:12:66:60:
b7:94:44:c1:20:18:2d:ac:bc:8e:ec:bf:de:a2:d5:
ca:f3:ff:3b:a3:f6:6a:21:c5:2c:f8:cf:4c:32:fb:
4c:95:6f:66:60:8c:fd:2d:97:f0:32:38:5a:77:f1:
3f:09:bd:fd:27:f0:6d:19:4b:b5:27:3d:9b:24:3e:
e3:f2:7a:4f:31:b0:c2:16:18:7e:ba:2c:3e:e1:b0:
5b:83:95:a1:0b:90:32:a0:a7:88:05:fd:cf:4d:f8:
98:4c:83:f9:b3:13:f6:10:85:22:82:c7:a2:0f:fa:
57:38:35:fa:7f:27:cf:75:94:27:b7:d1:a0:a2:71:
78:ab:9f:0b:1e:ce:59:86:53:bc:b1:6c:63:a3:cc:
22:9a:db:a9:dc:91:ad:f6:61:e5:49:71:b4:4e:92:
07:b8:90:fb:76:11:2b:f0:fd:04:b8:29:51:bb:1b:
c5:0d:bf:4f:d3:dc:46:c0:02:8c:b3:19:a3:34:74:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E2:F8:3D:B3:CD:6F:70:34:B6:47:82:F3:41:96:C8:3C:A6:01:CC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e35382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.58.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cc:b8:84:a0:c9:50:04:71:af:4e:71:df:ae:ec:1f:08:0c:
49:96:3f:a6:94:5d:19:13:bd:e6:bd:e2:91:dd:5a:b5:39:1e:
31:fc:36:66:16:ca:80:65:b5:5b:6d:45:1d:bf:27:24:6a:d7:
6c:b6:a6:46:1b:c2:5e:1e:fd:68:ae:15:7e:89:00:4c:eb:c1:
ab:af:ac:da:7a:82:92:6f:31:63:7d:60:04:ba:d1:88:08:b7:
5f:b1:4f:fb:24:8c:c8:1f:f3:da:a8:d1:5e:ca:0b:be:0d:38:
ad:2d:59:31:75:17:c9:52:e0:9e:6d:e5:63:e8:ab:64:a4:36:
32:89:62:2b:fb:17:8b:44:85:67:9b:6c:b6:3e:0a:33:a5:fa:
7e:c7:22:0b:db:59:04:42:e6:b0:00:a3:1f:aa:b2:a3:e6:c6:
90:e1:06:33:db:af:b3:7b:d6:70:ae:fd:2c:9d:a1:b4:e4:31:
2e:78:62:27:aa:76:c9:b8:b6:5b:c3:8b:9a:83:15:e4:f9:e7:
28:88:f4:3f:65:37:90:c0:23:02:cf:7f:b4:a9:ad:95:ab:81:
3f:c1:18:23:f3:81:f8:97:d1:f2:51:28:8b:3c:5d:46:41:ce:
7d:d7:c3:ba:b1:92:b0:e7:11:be:73:49:53:cd:34:aa:b2:97:
e7:0b:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org