Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36342e302f31392d3234203d3e20383334.roa
File: 3134372e37392e36342e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier: DWAu4yP0/UncR7ptxW9tePhNCAtt0Hc3dj42dR45ZT8=
Subject key identifier: C8:FF:19:C0:80:C0:0B:87:9F:14:F1:77:C3:0A:CE:A3:85:6D:03:14
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3946B70C61064B2C6C091528DC60F8DC243C7E1A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36342e302f31392d3234203d3e20383334.roa
Signing time: Thu 14 Mar 2024 16:50:06 +0000
ROA not before: Thu 14 Mar 2024 16:45:06 +0000
ROA not after: Thu 13 Mar 2025 16:50:06 +0000
asID: 834
IP address blocks: 147.79.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 23:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:46:b7:0c:61:06:4b:2c:6c:09:15:28:dc:60:f8:dc:24:3c:7e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 14 16:45:06 2024 GMT
Not After : Mar 13 16:50:06 2025 GMT
Subject: CN=C8FF19C080C00B879F14F177C30ACEA3856D0314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:6c:11:b1:bc:97:d9:3b:2c:95:2a:b6:4f:
8e:84:c0:6e:ce:ec:ae:de:52:fc:a7:92:cf:35:67:
65:51:6b:f6:0f:4c:a5:b1:7b:c5:2b:6b:a7:21:fc:
86:a2:a2:5b:e4:15:e5:6e:7d:7d:bb:98:05:6d:c8:
ef:6b:95:ae:4b:cc:54:95:bd:a6:d9:ca:31:66:73:
37:b9:0c:f0:e8:42:cd:df:5f:dc:fa:ae:ba:12:ac:
6c:93:54:c3:23:fb:4c:4f:46:93:99:f1:85:49:6c:
08:60:da:0e:47:e6:8d:4d:9f:0f:6c:10:71:a9:06:
b2:f4:14:67:04:c4:bd:e0:ab:f1:b0:a9:4f:1e:5a:
5d:e6:2e:f1:18:62:8d:86:64:e4:c1:48:b8:77:c6:
74:67:19:cc:8f:46:d8:f5:ad:22:46:3b:4b:3d:cf:
03:a0:24:b9:9f:15:07:3c:de:2f:a6:c0:26:90:d1:
a8:ed:87:2c:96:2f:ba:7c:a7:75:88:2c:8c:03:88:
96:29:ed:06:04:54:76:0e:36:40:24:a4:fa:8d:98:
8f:d6:df:2f:31:b3:2e:45:c3:3e:94:44:58:7b:b0:
39:fd:0c:dc:23:54:e8:12:7a:66:1c:a4:9c:9c:e5:
e2:f3:d8:fe:f7:39:af:12:6b:4f:85:92:47:fd:e2:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:19:C0:80:C0:0B:87:9F:14:F1:77:C3:0A:CE:A3:85:6D:03:14
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36342e302f31392d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:f9:72:65:52:e4:45:be:b3:4a:7e:50:16:ea:0b:0f:83:10:
15:70:f8:a5:ef:1b:c7:01:e7:f6:d1:00:b6:f9:ac:e3:c6:de:
59:2e:2e:1b:bc:0f:45:64:ab:49:70:76:09:bc:fc:e9:01:a8:
54:36:09:c9:a7:8b:b4:2e:b8:e0:7e:b8:b2:f5:0f:53:94:7e:
c3:bb:1a:68:a8:e5:b1:ca:49:ec:3c:ee:bc:35:4c:e7:f2:cc:
ea:7f:4b:d9:ad:c2:90:7f:68:a5:ed:17:ae:89:88:80:8c:c6:
e0:50:bf:d2:2d:8f:83:99:a0:83:e5:e2:08:44:c8:62:83:fd:
e9:af:9b:ec:a8:b1:8a:0f:6c:f4:9e:e6:76:24:c3:a8:81:b4:
f8:86:8b:4a:8a:5e:04:86:25:43:fa:f8:2c:6e:f2:e2:08:b8:
ae:31:fc:3a:40:46:a2:70:78:c4:48:fb:3b:ee:0d:30:bd:1e:
01:04:a7:87:24:7c:e3:25:f6:96:92:ee:fa:6e:7c:0c:7b:6c:
ea:d7:1f:be:08:c0:d3:84:3e:fe:4d:a7:ab:9d:46:c7:72:c8:
8b:97:f2:ff:a9:73:e6:1c:d3:23:fc:56:77:14:e3:c5:93:9c:
aa:8b:84:04:a9:97:60:04:e5:9c:4a:95:df:80:ca:a1:1d:62:
79:c7:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org