Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36302e302f32322d3232203d3e20313734.roa
File: 3134372e37392e36302e302f32322d3232203d3e20313734.roa (raw, json)
Hash identifier: kylBnZP5U6MaM1EU+t6Rl9fNuh/2DbZBl9eSlWoL0bs=
Subject key identifier: 31:2D:DD:F3:C3:61:FD:3F:55:49:79:26:87:43:95:59:E9:B2:AE:B1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 235092FAA6B45AF4CE4CC509997748A788E07BA5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36302e302f32322d3232203d3e20313734.roa
Signing time: Wed 13 Mar 2024 13:46:44 +0000
ROA not before: Wed 13 Mar 2024 13:41:44 +0000
ROA not after: Wed 12 Mar 2025 13:46:44 +0000
asID: 174
IP address blocks: 147.79.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:50:92:fa:a6:b4:5a:f4:ce:4c:c5:09:99:77:48:a7:88:e0:7b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 13 13:41:44 2024 GMT
Not After : Mar 12 13:46:44 2025 GMT
Subject: CN=312DDDF3C361FD3F5549792687439559E9B2AEB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:59:dd:92:c0:76:00:b2:b1:b6:85:b8:cb:
fe:31:dc:27:75:ce:5c:c9:43:2f:6a:14:3d:16:04:
e1:bc:18:5c:5f:f2:e0:c1:6e:2f:c3:30:46:c4:0d:
9c:c8:df:eb:fe:1b:61:cc:58:e2:c8:7e:94:25:de:
4d:3e:94:1d:f4:70:f3:72:6f:62:e0:2a:1e:86:a1:
8e:2a:12:59:7e:67:5f:50:2f:f8:07:f6:56:07:3b:
d4:53:30:34:f2:c7:24:9a:c2:98:e5:3a:c0:f5:76:
fa:e0:90:14:3e:65:b3:55:ba:53:02:a9:d1:c0:4d:
39:f8:f1:9b:1a:a6:76:f0:3d:3e:64:ca:34:fa:9e:
7b:2e:74:95:86:ec:fa:33:f2:4d:15:03:03:0b:58:
55:6e:2c:dc:83:a4:fb:a8:51:13:b7:76:d1:9b:18:
b7:8c:f1:d8:c5:47:be:51:2b:c3:9f:3c:c8:ae:44:
6a:54:eb:c8:14:6a:6e:c5:ca:95:c4:30:f7:5f:29:
2b:e4:cd:12:49:dd:26:7a:c0:bc:d2:c9:30:ba:29:
ae:24:fd:96:a8:e5:cd:2e:80:ef:b7:26:52:7a:4a:
8f:35:44:d3:91:05:b4:df:68:b6:66:62:bf:1a:a0:
ea:94:c2:bb:c0:10:0f:9d:35:26:44:00:fe:d0:27:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2D:DD:F3:C3:61:FD:3F:55:49:79:26:87:43:95:59:E9:B2:AE:B1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36302e302f32322d3232203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.60.0/22
Signature Algorithm: sha256WithRSAEncryption
93:c2:5e:49:14:a9:dc:74:8e:eb:76:f9:ca:77:e7:6a:38:72:
78:c6:d8:7e:a8:58:af:60:65:83:8c:c0:52:82:bf:52:55:d0:
5f:25:9a:b8:4f:fd:5c:9f:b8:b3:a4:ff:c5:82:e0:b3:8c:16:
89:d3:b8:fd:f5:ad:1b:95:fc:e4:8f:a3:08:d8:fa:5c:de:55:
78:73:a7:d5:5a:e6:08:fb:08:aa:b0:7c:c3:fe:4f:20:0b:f3:
38:07:b2:3a:ec:c8:1c:50:b7:10:c5:56:4f:b5:66:99:62:1a:
d9:0f:36:6a:8c:a6:f9:17:61:4c:c4:fb:b5:f8:08:f8:ef:f6:
d4:10:61:3e:81:f7:cb:93:4b:25:fe:53:5d:f5:65:4d:89:fe:
e1:cf:f5:03:bb:a5:95:e5:f8:cc:ad:74:31:6e:d3:2f:0f:3e:
28:01:67:61:5e:0a:4c:36:15:ba:ef:f4:6d:4d:c4:01:ab:8d:
49:72:a3:06:1d:13:35:10:2c:da:ec:37:5b:5d:42:ef:35:be:
ec:45:6a:d0:bd:6b:23:9e:3e:f9:10:26:d3:48:60:28:5e:6c:
cc:22:e5:17:fe:97:2b:d5:29:ea:9d:a6:40:e1:77:7e:77:10:
29:70:5e:9e:64:3d:14:6c:6e:ea:0e:9f:e8:ac:7c:ba:bc:95:
20:b9:13:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org