Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36342e302f32302d3234203d3e20383334.roa
File: 3134372e37392e36342e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: UrKzUQoFqtg4rrN8laDEt/r4km4rk3Johj0PSgtYggI=
Subject key identifier: FA:31:4F:B9:8E:7C:A4:61:F0:2F:69:16:3B:E4:1E:A7:83:01:FD:4E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 59F2BC13908EC5C6FC2B13C136FC41129EDB5871
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36342e302f32302d3234203d3e20383334.roa
Signing time: Sat 30 Mar 2024 23:51:16 +0000
ROA not before: Sat 30 Mar 2024 23:46:16 +0000
ROA not after: Sat 29 Mar 2025 23:51:16 +0000
asID: 834
IP address blocks: 147.79.64.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 16:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f2:bc:13:90:8e:c5:c6:fc:2b:13:c1:36:fc:41:12:9e:db:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 30 23:46:16 2024 GMT
Not After : Mar 29 23:51:16 2025 GMT
Subject: CN=FA314FB98E7CA461F02F69163BE41EA78301FD4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:ab:ba:f7:cc:6e:40:a3:a9:f0:aa:82:62:
06:ac:ca:ee:c8:80:f9:3a:55:49:35:70:0f:c4:69:
c7:2e:e2:c2:bc:b5:89:16:f4:41:1a:57:81:03:5c:
e6:59:b4:ab:16:ce:5f:08:38:d0:ca:20:47:43:f4:
3b:a8:11:9d:de:96:57:99:0d:3e:64:2c:1d:6f:de:
5b:c2:39:ef:03:cc:30:0b:6f:06:26:26:75:99:b0:
5a:eb:c4:ed:f4:13:aa:ed:0e:74:1f:31:90:cb:6d:
b4:d8:b1:ad:b5:1d:5d:83:6b:a7:cc:90:2c:55:b0:
41:3d:cd:c2:ef:e3:9b:d9:62:89:f3:f8:b4:cd:9d:
d2:15:56:e9:a8:95:4f:ed:3e:95:46:d4:82:1e:d6:
bd:5d:68:dd:ad:09:56:14:2a:4b:97:4d:77:b6:91:
e1:78:bf:47:be:28:b1:0c:01:78:45:1c:3a:f8:47:
76:c9:0a:0f:54:a6:df:f4:94:fa:b2:4d:c5:8b:35:
de:b5:f3:b2:17:28:f7:ac:65:ad:10:b0:5f:b7:cd:
23:a6:cb:85:b9:4c:ea:f6:d9:98:fa:94:e5:12:f6:
11:a5:62:a4:6d:3f:b2:e6:0e:04:f1:45:93:fc:b9:
88:95:a4:e0:0b:6b:6a:df:f4:26:07:9f:65:51:c9:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:31:4F:B9:8E:7C:A4:61:F0:2F:69:16:3B:E4:1E:A7:83:01:FD:4E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e36342e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.64.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:2a:b5:e6:1c:c5:9c:f8:8d:2f:1c:44:c2:eb:b0:26:e9:cc:
d9:15:68:8f:7c:ac:40:0e:30:29:de:7d:f6:75:e2:f3:ad:00:
d0:4c:df:0b:07:dc:4c:05:2b:2c:69:26:4a:2a:1c:14:03:2e:
32:4d:62:d7:af:97:ad:fb:ea:3e:b4:63:bd:d1:a7:5e:5e:91:
3d:31:a9:82:b1:fc:7d:3b:2f:08:9b:a5:e3:d9:af:ca:20:a6:
e2:e1:6d:2c:3a:08:6b:f7:d3:00:c4:32:bd:01:d3:60:77:da:
a4:b4:ac:3c:15:cf:4b:3b:71:64:7a:4e:7f:0f:df:32:ed:22:
96:a4:ba:61:82:f2:bf:03:be:e8:4b:0c:10:46:38:a7:f6:70:
f9:c8:a3:aa:5b:bc:52:5e:c8:da:a2:47:b1:c4:cd:0f:cf:ff:
5d:9e:25:d8:8d:fa:37:0d:5a:42:87:9b:d8:0e:c4:6f:8b:00:
44:58:ee:3e:03:4a:74:2a:f9:7e:ae:38:d3:3f:78:7b:06:cf:
ae:79:f4:6a:7b:39:13:4a:48:d0:32:87:3a:9e:bf:c4:29:2e:
ab:58:be:f9:01:f2:33:19:de:eb:3a:08:fd:16:8b:92:5a:47:
09:2d:43:27:59:be:ac:b6:f3:df:bc:9a:b6:68:f9:87:21:06:
60:33:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org