Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3139322e302f32302d3230203d3e2030.roa
File: 3134382e3133352e3139322e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: RCgDXypDnkRVYZhhDd2OXLtblgO4HVTAUYhKI3BKOzo=
Subject key identifier: 15:F9:48:5D:85:0C:FC:69:6D:77:36:83:06:C7:FC:B9:DE:99:5F:66
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 274650B37E9B78ACBB9DF25BC1A6B02E8F664FB1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3139322e302f32302d3230203d3e2030.roa
Signing time: Fri 05 Jan 2024 10:05:08 +0000
ROA not before: Fri 05 Jan 2024 10:00:08 +0000
ROA not after: Fri 03 Jan 2025 10:05:08 +0000
asID: 0
IP address blocks: 148.135.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:46:50:b3:7e:9b:78:ac:bb:9d:f2:5b:c1:a6:b0:2e:8f:66:4f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 5 10:00:08 2024 GMT
Not After : Jan 3 10:05:08 2025 GMT
Subject: CN=15F9485D850CFC696D77368306C7FCB9DE995F66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:dd:15:68:6d:78:83:1b:53:16:01:9c:37:
54:49:11:4d:d5:69:28:ca:43:9c:7c:20:13:c3:f2:
5b:77:1c:cb:2c:9b:a4:21:60:e2:44:1e:9e:78:03:
ec:7c:63:11:c3:c9:c8:fb:fa:5f:95:dc:88:07:4e:
d1:55:9f:77:0f:c5:96:9e:78:c3:16:90:50:fb:dc:
57:7e:49:53:2f:e8:f3:63:6f:5d:30:c0:35:0a:e7:
bb:f5:80:a2:a5:bd:6f:7a:29:2b:73:a9:b1:d9:f9:
db:3b:26:88:e6:c2:4c:bc:c7:4d:e3:64:ee:2b:47:
8e:fa:b0:e8:fb:80:f4:73:33:13:e3:4d:d6:2c:55:
05:d7:a5:b3:07:ba:4a:4d:eb:ed:8d:d9:70:f7:7b:
bb:57:84:dd:32:97:da:85:bc:58:32:9c:92:a8:27:
ee:e7:50:3f:8b:21:fa:be:25:02:dd:7b:27:4b:bc:
20:9b:73:58:9c:f4:be:d3:ed:43:da:22:41:c3:5c:
69:5f:19:8b:eb:47:5b:35:9d:52:bc:6e:1e:16:9e:
57:fc:84:0b:f9:75:52:a8:f2:f6:8a:bf:2a:1a:08:
89:06:34:3a:c8:8e:8c:c3:eb:09:79:58:8a:ef:db:
0d:27:23:58:05:40:a4:a2:73:13:a7:ce:c9:03:38:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F9:48:5D:85:0C:FC:69:6D:77:36:83:06:C7:FC:B9:DE:99:5F:66
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3139322e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.192.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:1b:04:52:bf:1b:9c:b8:9d:cb:79:4f:70:40:e3:46:69:fa:
4b:ac:e3:be:23:26:ca:63:95:73:e0:76:5d:08:b6:21:0e:68:
3d:56:56:3a:90:af:79:ce:11:2a:9b:d4:18:4f:d7:a6:da:ff:
0d:76:e7:17:50:22:28:73:41:08:0f:35:c5:76:9c:9d:2e:86:
82:0e:f6:c3:34:62:1a:93:67:d4:1d:5d:00:59:0e:18:b8:d2:
7b:af:fd:b8:cb:fc:52:c4:bb:e3:0a:a2:14:d0:18:fe:88:a6:
e1:69:6e:a5:25:d0:9b:30:28:fd:c1:76:26:c3:96:37:10:fd:
34:fa:a3:29:a4:f0:b3:78:e2:1f:b7:3a:32:da:95:42:4f:3a:
86:3c:00:43:c0:4b:17:86:07:a6:3a:99:0f:b9:31:0b:10:cc:
0e:b9:04:9d:30:d1:98:13:fd:bd:73:99:3f:8f:5b:93:d9:8a:
f8:a9:d4:b4:49:d7:97:68:c8:70:6f:d9:6b:ae:44:e0:c0:62:
a1:ad:f5:e8:2c:8b:cf:5b:ea:7c:71:b0:3f:c0:8e:07:33:4f:
ca:45:36:45:b2:2d:6b:a3:14:9b:b7:d2:fc:15:9e:58:00:bc:
0a:b9:5e:18:f2:6d:6d:00:f7:4a:22:f3:5c:ed:54:12:89:0a:
49:55:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org