Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36302e302f32322d3234203d3e20383334.roa
File: 3134372e37392e36302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: TMMOGvGTPqRdAb2B42aKxp/djgKfHnxhYBZDIhyeD8k=
Subject key identifier: 12:10:2A:16:EA:37:85:DE:49:1E:FC:BD:8D:9F:D6:F4:F0:A9:60:B5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6B4BAD8D66CA0AE84048FF05A63BFB6679B24652
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36302e302f32322d3234203d3e20383334.roa
Signing time: Tue 05 Mar 2024 10:22:13 +0000
ROA not before: Tue 05 Mar 2024 10:17:13 +0000
ROA not after: Tue 04 Mar 2025 10:22:13 +0000
asID: 834
IP address blocks: 147.79.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 13:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:4b:ad:8d:66:ca:0a:e8:40:48:ff:05:a6:3b:fb:66:79:b2:46:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 5 10:17:13 2024 GMT
Not After : Mar 4 10:22:13 2025 GMT
Subject: CN=12102A16EA3785DE491EFCBD8D9FD6F4F0A960B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:58:b9:5a:51:74:84:38:c4:67:73:3e:e4:
4f:93:29:7f:b7:3a:4b:9c:82:05:9e:06:ea:a8:c3:
b5:ec:b3:00:6f:2b:17:37:2d:e1:ff:55:57:12:c9:
ba:09:23:bd:4d:75:6c:2d:a9:95:df:bd:8b:0a:12:
38:de:3d:be:7e:cd:a7:ac:56:ac:ca:f4:42:d6:81:
5c:32:fd:0d:6b:d5:2f:84:37:fc:73:cf:4e:7e:f8:
6d:ea:28:5e:50:ee:e4:08:d9:cb:bd:49:d0:aa:47:
36:de:7f:4c:a1:3f:48:31:ed:f5:52:c6:ed:d9:10:
6f:2b:2d:74:c9:8d:95:b9:cc:ef:62:89:5b:fd:19:
50:f7:ab:ca:82:2d:92:37:42:7c:64:96:37:0f:9a:
12:52:3b:aa:ba:da:76:21:3f:21:05:fa:33:6f:e4:
da:fd:0e:26:05:98:b0:bf:3f:60:52:ca:b9:f4:cd:
30:d7:06:7b:d2:04:d3:80:a4:a8:23:b0:e8:bd:49:
de:1a:7c:5a:f8:f7:f7:24:91:81:cf:52:2d:2b:99:
74:e5:52:db:bd:53:da:8c:07:04:ef:00:4d:1b:99:
ba:c5:cd:f2:48:e6:8b:81:d3:bd:97:78:aa:91:3d:
bd:1e:cc:68:74:c9:1d:21:05:19:80:eb:78:5a:a2:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:10:2A:16:EA:37:85:DE:49:1E:FC:BD:8D:9F:D6:F4:F0:A9:60:B5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.60.0/22
Signature Algorithm: sha256WithRSAEncryption
55:8f:9d:87:64:e7:20:90:86:39:c2:a0:ff:aa:7f:a3:d5:ac:
22:9d:76:2b:0e:6e:32:23:ca:a0:c4:46:b1:39:63:09:c9:13:
31:62:17:d9:a9:97:64:41:eb:be:c5:a4:9f:4b:d6:58:92:18:
74:60:98:45:8f:15:9c:aa:02:c8:ea:cf:5d:7d:b8:44:49:2f:
ce:9e:58:d5:35:2e:93:ed:bc:d2:dd:1f:53:35:4b:3e:21:6d:
f7:2d:d6:cd:30:b8:0b:de:4b:37:21:bc:bd:31:f4:9b:4b:61:
cc:71:ab:dc:7a:6d:f5:b4:cd:21:b7:6c:c1:7b:ab:6c:fe:96:
57:59:a6:2e:09:c3:73:fe:b3:eb:cc:71:11:08:f7:19:ac:2c:
1b:6f:10:b7:73:9d:18:ef:96:0c:0c:f4:02:03:ba:98:ba:23:
fc:a0:5a:05:72:f8:49:02:8f:1f:03:f4:79:2e:3a:39:24:dd:
55:89:fa:68:9d:02:90:f5:8a:72:d9:6f:16:e7:6d:97:ab:24:
91:c9:8f:fd:a3:42:a5:30:d1:14:76:ff:e2:b8:b8:97:6c:2a:
22:2c:a8:68:19:2f:9f:37:4f:15:11:0d:98:0b:6c:14:df:e5:
c9:9e:49:fb:f6:bf:6a:b5:30:b9:60:43:ac:ff:9f:81:da:e1:
e9:91:70:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org