Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e20383334.roa
File: 3134362e3234372e35382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: SN57bh+XHbUB/qHIZx1CuVDqOM1Gww8F9ue4hU913r4=
Subject key identifier: 61:59:FA:93:16:3A:FC:D2:39:11:39:6F:6A:C6:18:66:5C:BE:79:22
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 5FA1AC4C6F6E122626552F9FB47C9885F202CDEF
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e20383334.roa
Signing time: Wed 16 Oct 2024 10:49:00 +0000
ROA not before: Wed 16 Oct 2024 10:44:00 +0000
ROA not after: Wed 15 Oct 2025 10:49:00 +0000
asID: 834
IP address blocks: 146.247.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 19:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a1:ac:4c:6f:6e:12:26:26:55:2f:9f:b4:7c:98:85:f2:02:cd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Oct 16 10:44:00 2024 GMT
Not After : Oct 15 10:49:00 2025 GMT
Subject: CN=6159FA93163AFCD23911396F6AC618665CBE7922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:4c:b8:7a:0c:a9:7a:9d:da:f8:2e:0a:d2:
77:aa:36:35:4f:01:9d:94:0a:e4:fd:46:29:3d:97:
64:ba:d6:e1:2b:f7:1d:eb:c4:69:41:e9:9a:38:c0:
9e:f5:fd:2d:5d:0a:5f:63:8b:03:2c:79:a3:54:6d:
ee:bc:18:6d:af:a7:38:db:89:1f:03:9f:32:79:d2:
7d:d4:9f:0a:c6:45:7d:84:6b:d0:2b:88:85:d2:9d:
e5:43:ed:48:67:76:5d:b6:8e:5b:12:e7:90:14:46:
00:00:f9:d5:57:e9:1c:bf:ff:db:1e:5a:db:9b:36:
ee:7f:e4:71:ba:33:1c:2e:20:52:dd:4c:56:41:6a:
ac:4e:f4:44:6f:94:85:93:ad:62:54:8e:ba:a2:75:
08:13:2e:a7:39:96:5d:6b:fa:63:c4:b4:95:1b:70:
38:ff:c2:51:b9:53:1f:5b:c2:48:fa:a7:8b:c2:d9:
a6:ff:45:aa:9a:c1:2b:6b:e0:7e:14:fc:b8:ff:b0:
c3:94:32:ab:0a:a3:3f:b9:65:96:98:30:b0:c9:23:
71:0f:50:40:28:d8:36:e0:b3:2e:79:c2:1a:ca:b8:
5c:9e:f2:fe:08:04:e9:8b:e5:34:8c:5e:b1:84:54:
7c:69:11:aa:9a:68:7b:06:1f:b8:20:e5:c3:6e:1d:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:FA:93:16:3A:FC:D2:39:11:39:6F:6A:C6:18:66:5C:BE:79:22
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
39:de:8f:b6:f3:dc:ad:7a:cf:26:51:8a:1d:ad:f9:11:71:86:
e0:3d:f0:62:2e:07:eb:9a:62:c8:7f:11:22:2b:8b:d9:82:de:
1a:0c:a6:98:2d:6d:30:92:cc:19:d6:5a:7f:3c:fc:bb:37:9f:
24:af:ab:2d:45:f1:9b:f9:1f:f9:a0:1c:e9:eb:82:18:62:ce:
81:29:bd:6e:61:fb:07:45:d9:06:ef:83:6a:e9:34:4b:a7:19:
e2:d9:35:aa:10:02:3e:b0:01:8a:27:4f:84:78:b4:84:17:43:
60:34:3e:32:2d:d1:e8:b5:e9:01:3e:42:64:10:00:3a:eb:7d:
43:ad:71:19:97:31:5b:04:99:c7:22:26:e1:8c:fe:88:bb:c6:
a6:c3:60:1f:57:08:f3:a1:04:04:eb:2e:cf:7b:a7:51:ca:d2:
53:bb:5a:cf:7f:d2:4a:77:7e:84:c5:e9:06:8e:83:9e:ed:74:
99:a4:31:7d:6a:64:cf:79:69:df:75:03:fd:7d:d9:4f:da:79:
32:dd:eb:84:c8:83:78:1b:32:20:2f:aa:5b:82:4a:a2:f3:ca:
67:01:2c:54:b0:7d:79:53:ca:11:7b:14:46:d3:65:0e:be:a0:
e2:00:fd:4e:7c:ef:d0:79:5e:d4:8a:9b:56:1c:86:45:22:e5:
72:bf:b9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:48 2025 by rpki-client