Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32332d3233203d3e203234383531.roa
File: 3134362e3234372e34382e302f32332d3233203d3e203234383531.roa (raw, json)
Hash identifier: RWB6xg/Bj7WVaSxNE5G0YRmqTxfwlS/thooIgaftqUw=
Subject key identifier: 75:0A:2F:6E:64:67:C4:16:D0:0F:67:AE:69:21:90:8D:CE:FD:C5:7C
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 25BE78D0C7326D7ECB2589C3D9A7180A2025EC97
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32332d3233203d3e203234383531.roa
Signing time: Mon 25 Nov 2024 12:43:28 +0000
ROA not before: Mon 25 Nov 2024 12:38:28 +0000
ROA not after: Mon 24 Nov 2025 12:43:28 +0000
asID: 24851
IP address blocks: 146.247.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 09 Dec 2024 14:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:be:78:d0:c7:32:6d:7e:cb:25:89:c3:d9:a7:18:0a:20:25:ec:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Nov 25 12:38:28 2024 GMT
Not After : Nov 24 12:43:28 2025 GMT
Subject: CN=750A2F6E6467C416D00F67AE6921908DCEFDC57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:93:f3:00:5c:48:73:ee:13:e2:fd:01:a4:
4e:bb:65:41:16:c4:de:c2:48:8a:bd:cf:b1:39:21:
5e:5b:95:a4:84:6e:b7:c2:fd:80:ca:b8:6e:24:1d:
0f:32:1d:0c:73:e7:4e:fc:a8:e2:9c:4d:7f:dc:8e:
2e:8e:c9:80:88:0c:df:dd:64:cd:5e:e7:53:d3:b9:
15:53:0c:5a:fc:a0:87:01:ac:a3:82:5c:26:cd:9d:
8b:2d:7c:8f:7a:70:14:52:16:e9:05:26:db:f6:7d:
3a:0f:3c:17:88:3a:dd:91:75:a3:25:4f:02:2f:80:
28:0b:ca:5c:00:9a:21:2d:e1:f6:08:5a:e6:a2:d4:
c3:7d:00:e1:a8:a9:6f:79:05:dc:d0:66:5d:5e:a8:
08:c0:f0:05:8f:48:27:55:15:6c:f2:a0:cd:f1:c8:
2f:df:a2:02:14:9b:24:56:e0:39:d4:b4:24:70:a5:
36:cd:62:bf:4f:c5:78:98:25:77:78:d9:03:c0:70:
8f:26:74:d7:fb:b9:a1:00:26:dd:cd:94:52:b9:e7:
84:c2:23:1c:8c:e3:2c:ad:d3:8f:21:3d:d7:10:f3:
40:6c:a8:6d:f5:25:a8:11:80:80:bf:02:84:84:15:
96:e4:04:cc:f5:1d:0d:ca:e0:43:8f:26:8d:85:da:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0A:2F:6E:64:67:C4:16:D0:0F:67:AE:69:21:90:8D:CE:FD:C5:7C
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32332d3233203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:82:70:1f:89:46:48:ed:88:b2:ac:51:43:78:8f:25:b9:83:
84:c1:cd:28:d4:2d:8b:fa:b0:e0:1a:24:53:66:fb:0e:9b:6e:
90:4e:ff:8d:4f:0c:62:0e:38:03:69:40:88:3a:df:9b:b0:e6:
cd:4c:6b:62:d7:e6:ad:7d:68:56:e5:77:57:f3:e6:24:df:8b:
08:dc:fe:3d:46:42:83:55:6b:5d:0a:96:f4:97:69:6d:6e:df:
40:ce:dd:e8:a3:5f:5a:c6:dc:a5:ae:08:38:fb:bd:e8:9c:1c:
33:f7:60:0b:98:d7:3c:06:7e:0f:d4:81:36:1d:5f:bc:6d:2e:
bb:34:98:13:5c:b1:7a:b1:ef:e3:dc:98:77:12:b7:26:fc:c3:
93:ab:43:76:32:ec:60:9e:9f:b5:95:40:71:a3:c2:fc:a0:1c:
dc:ac:9b:cb:f1:97:05:64:ea:41:ea:77:50:2c:8b:49:e4:49:
5b:ce:53:1d:b2:16:f7:96:23:bd:b2:aa:3c:81:e8:76:55:df:
52:71:36:5b:a7:3a:17:68:b8:ae:fa:3c:19:0d:61:d8:a1:3b:
b6:74:84:54:9c:64:58:fc:e1:8d:1d:5b:2a:ea:db:7c:96:99:
55:64:90:c5:f9:d6:9d:f5:c2:fc:31:2b:23:2b:5c:7f:23:02:
1f:e0:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:19:47 2025 by rpki-client