Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e35392e302f32342d3234203d3e203633303233.roa
File: 3134372e37392e35392e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: 73l4dYgr5WSEXCDJ9C/jiZpxBpke1V0SUXned+bi98k=
Subject key identifier: 2E:F1:0B:70:85:8A:DE:3A:E5:EB:90:FD:A5:11:E0:6C:82:1C:77:25
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6C34BA6CBE220654D6914BFE348A549F26AAE7B8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e35392e302f32342d3234203d3e203633303233.roa
Signing time: Fri 05 Apr 2024 18:15:34 +0000
ROA not before: Fri 05 Apr 2024 18:10:34 +0000
ROA not after: Fri 04 Apr 2025 18:15:34 +0000
asID: 63023
IP address blocks: 147.79.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:34:ba:6c:be:22:06:54:d6:91:4b:fe:34:8a:54:9f:26:aa:e7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 5 18:10:34 2024 GMT
Not After : Apr 4 18:15:34 2025 GMT
Subject: CN=2EF10B70858ADE3AE5EB90FDA511E06C821C7725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:8a:15:07:1a:bb:a3:70:8d:e5:d3:7d:e5:
ec:5b:fd:7b:80:e9:e1:b3:a4:e1:da:d7:74:7b:b8:
37:69:7b:f6:e4:ea:54:98:38:92:89:53:f8:84:ae:
ea:a6:28:de:97:ba:5a:68:f6:3c:c5:8d:52:b6:b2:
22:0b:20:34:23:28:0a:e6:0f:3d:a6:c3:7e:c3:68:
31:80:47:62:e5:f5:b5:94:e8:80:e9:56:7f:50:89:
4f:5c:fe:e7:6d:da:f6:02:16:27:73:92:5c:06:0d:
33:e0:a9:4f:9f:17:6a:e4:c0:24:bb:b7:9f:f4:f0:
38:9d:19:f5:ea:5c:1a:ae:3b:c0:2e:9b:d8:fe:4c:
4f:77:90:bb:8a:72:b6:5d:cd:94:eb:97:9a:d0:0f:
3b:c7:37:e1:87:03:df:1f:23:4c:6a:70:b8:98:ba:
14:9e:0f:ce:09:52:ea:a9:31:ee:bd:e6:64:d7:00:
73:7a:6d:56:d5:79:29:c6:5d:02:dc:98:da:05:ac:
32:83:d0:9f:53:a7:71:bf:b7:5e:7a:45:40:3c:95:
61:5d:95:25:79:0d:b6:4b:5c:de:37:96:2f:c1:fa:
4b:b4:17:2e:f8:93:52:ed:3d:63:de:45:41:a2:5c:
4c:30:98:ae:bb:28:f5:ff:94:ec:d4:cf:45:46:84:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F1:0B:70:85:8A:DE:3A:E5:EB:90:FD:A5:11:E0:6C:82:1C:77:25
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e35392e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:29:f9:5e:65:17:bb:ac:a3:ca:ef:16:5a:95:ba:01:0d:b6:
02:ae:5b:e6:51:e3:50:48:0b:25:af:0b:08:3d:eb:4e:2f:e2:
53:82:d1:0e:d7:f4:dd:9b:dd:51:09:99:d0:2a:7b:3b:f3:b3:
79:40:85:bb:f5:cb:43:76:7e:de:53:e1:4d:b5:0d:f4:de:8f:
eb:99:07:cc:d4:9b:0e:aa:22:ef:fb:68:77:79:d7:a0:3b:86:
90:63:fa:dc:9d:00:8f:04:17:3e:16:5c:e6:19:b8:2f:8d:84:
4b:e8:25:6d:41:17:9f:2e:d8:86:64:86:0e:f5:47:d8:54:57:
07:51:77:3a:b2:52:55:b2:7a:0c:98:85:1e:23:0d:aa:c1:7b:
9a:ee:b5:97:9d:36:18:36:6c:ab:79:7e:5f:6b:94:eb:94:4a:
d7:e9:15:5a:5e:36:75:15:27:b4:86:c5:99:15:3c:96:ba:82:
c1:18:35:13:29:56:47:8b:39:a5:6c:4f:50:0e:43:ab:de:58:
b1:82:58:27:aa:2e:75:84:5f:fa:e8:ee:e8:1f:88:19:81:f4:
c8:ce:07:9f:b1:bd:45:c9:88:ee:e4:55:eb:39:5d:d3:9e:7f:
5e:c7:35:5b:b0:11:5e:06:ff:56:95:59:e4:d9:df:7a:17:de:
2f:26:64:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org