Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3134342e302f32302d3230203d3e2030.roa
File: 3134382e3133352e3134342e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: QQ8npOEu1EVjMHZ2E/GBAOh+McB10qEvkYdQBUN+4Yk=
Subject key identifier: 6B:BC:95:C9:33:15:AF:EE:D7:C0:BC:4E:EE:52:9A:69:2C:F7:B8:7A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 079E17BDF04FC00C816862DDA5134C669604F91B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3134342e302f32302d3230203d3e2030.roa
Signing time: Fri 05 Jan 2024 10:05:08 +0000
ROA not before: Fri 05 Jan 2024 10:00:08 +0000
ROA not after: Fri 03 Jan 2025 10:05:08 +0000
asID: 0
IP address blocks: 148.135.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:9e:17:bd:f0:4f:c0:0c:81:68:62:dd:a5:13:4c:66:96:04:f9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 5 10:00:08 2024 GMT
Not After : Jan 3 10:05:08 2025 GMT
Subject: CN=6BBC95C93315AFEED7C0BC4EEE529A692CF7B87A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:24:3c:17:66:fe:25:54:15:29:0a:4f:2f:
b8:fd:ff:25:8c:dc:61:e5:7b:f8:db:6f:be:23:66:
6a:0c:5c:a4:4c:5f:9f:3e:2e:d2:1a:88:fd:e3:e2:
99:9a:88:d0:27:00:be:7b:bb:9c:3e:60:d1:e5:4c:
90:15:22:13:2a:1e:51:60:28:89:89:a2:72:42:67:
d3:52:22:c2:5a:b6:7f:7a:2a:cf:5d:8f:fe:9e:6a:
59:fd:26:7b:46:a2:89:46:18:02:e5:da:0b:02:7b:
6f:95:8f:cc:ec:c2:02:21:bc:44:55:04:41:0b:26:
6d:89:7e:75:b8:28:2e:2b:3e:e6:1d:e3:4f:c4:62:
75:bd:d3:4a:5d:6b:58:d3:bd:8e:f7:32:c7:7f:b9:
6b:ac:aa:b4:7f:08:33:50:25:39:12:ba:12:77:2f:
28:6b:1d:50:8c:13:b7:6d:d3:ff:87:ad:c2:e2:37:
86:dd:99:11:fc:fe:a2:5b:d2:d8:49:43:1b:92:06:
5d:9c:94:93:4e:65:fc:ac:ed:ac:b3:72:b9:cd:6e:
10:62:7c:dd:2a:d6:42:8f:86:07:97:dd:e9:85:90:
9a:44:17:60:a3:7c:1c:f3:84:f9:fc:0c:81:f7:8b:
7e:fc:ab:e1:16:8d:ca:63:e0:d2:8a:2f:15:de:e0:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BC:95:C9:33:15:AF:EE:D7:C0:BC:4E:EE:52:9A:69:2C:F7:B8:7A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3134342e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.144.0/20
Signature Algorithm: sha256WithRSAEncryption
57:e0:52:c3:8e:41:70:29:f7:f7:c4:43:da:f3:88:c5:0e:36:
00:50:0c:fe:d5:19:d7:cb:4e:9c:92:1b:5c:17:1d:49:9a:88:
ef:25:98:2a:cd:1b:c4:8a:af:51:d3:fa:de:72:51:71:26:36:
41:9f:5d:6b:af:8e:d6:31:58:4a:d0:f9:0f:b9:c3:b5:40:17:
df:59:7d:1e:fd:80:d2:d7:2f:17:37:9c:aa:7e:65:0e:17:68:
74:a1:12:22:13:75:69:4f:a7:90:55:ef:7a:57:05:18:0d:fb:
23:72:c5:10:75:fb:22:e7:f4:11:77:48:f7:57:77:b7:63:99:
53:c7:42:5f:e5:aa:32:49:f8:e6:a0:cb:af:46:af:80:9a:3a:
f8:77:33:90:b0:6e:10:e7:65:e4:f4:71:18:07:d6:52:78:fe:
71:fa:73:8f:c5:7c:6f:2c:2c:4b:ab:dd:79:a3:e4:b7:d0:d1:
ae:a7:ef:db:f6:2d:2a:d2:3d:f6:54:cc:7d:b6:7f:4b:96:bf:
c1:6b:bb:65:a7:fc:c6:e8:37:57:87:89:3f:bd:bd:1c:32:84:
11:42:ec:c8:c9:56:79:58:6c:a4:83:29:7b:37:8f:36:c8:32:
59:13:07:4f:75:22:07:fc:17:07:ff:47:2f:23:cf:41:2c:63:
08:17:74:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 12:13:38 2024 by rpki-client on console-fra.rpki-client.org