Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e203231383539.roa
File: 3139342e33312e3139362e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: bXupa5gFOGIkv6osk6j/J50xvtXxdAwgasX5Ybhbr8E=
Subject key identifier: 10:12:19:0B:38:7D:37:36:BE:F7:82:D6:16:A1:77:B6:85:3E:EC:54
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 1A565D23502213F0FC1C819DF1B1076172B280FF
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e203231383539.roa
Signing time: Mon 08 Jan 2024 06:31:01 +0000
ROA not before: Mon 08 Jan 2024 06:26:01 +0000
ROA not after: Mon 06 Jan 2025 06:31:01 +0000
asID: 21859
IP address blocks: 194.31.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:56:5d:23:50:22:13:f0:fc:1c:81:9d:f1:b1:07:61:72:b2:80:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jan 8 06:26:01 2024 GMT
Not After : Jan 6 06:31:01 2025 GMT
Subject: CN=1012190B387D3736BEF782D616A177B6853EEC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:27:b1:9e:fe:55:d3:ca:b1:0b:fc:f4:36:
75:15:df:c1:cb:8e:d6:bb:34:98:c2:bd:39:74:1d:
9f:ed:1e:48:69:3b:a0:e2:2f:bd:35:04:70:89:2b:
59:49:f1:b5:be:6d:8a:f4:8f:be:30:ba:b7:cd:ea:
db:f8:1e:10:42:4d:4e:39:f9:3b:2c:40:90:a7:1b:
8e:43:05:3c:79:b3:81:c4:81:e9:d3:2c:dd:0c:04:
ae:e2:c2:53:a6:ea:d7:ac:3c:30:4d:31:cc:1a:f1:
d6:41:e4:e5:35:3c:23:ba:00:29:3d:a9:fe:fb:5b:
56:7e:27:d4:65:3b:47:fb:96:c6:b0:a9:b5:0d:4c:
ad:e1:ce:cd:25:7d:e5:78:45:8a:04:79:30:f1:04:
74:33:34:c6:4e:c4:99:61:fc:16:b7:63:a2:5b:58:
c5:99:99:88:3f:20:be:fa:b9:72:53:d0:55:a1:9d:
d1:a0:5d:f4:6a:96:47:e1:5d:8b:3b:f3:96:21:5e:
3a:16:24:f5:07:f4:55:c1:fb:d7:ce:91:82:e9:fa:
8a:d7:ca:71:e4:1a:73:e4:ec:42:f7:3a:61:29:8b:
76:33:a7:7a:0f:ec:15:88:28:ce:66:9f:20:f4:4a:
fd:d1:41:fd:a1:aa:83:9e:08:f4:d4:a6:2a:75:26:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:19:0B:38:7D:37:36:BE:F7:82:D6:16:A1:77:B6:85:3E:EC:54
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.196.0/24
Signature Algorithm: sha256WithRSAEncryption
25:93:d7:77:f8:52:e9:80:0e:43:09:52:2f:d8:3f:29:b6:8d:
13:fd:0c:0f:f7:3b:9b:61:0a:3e:32:72:83:d4:90:1f:59:20:
fc:fe:26:5b:e0:d3:b3:ce:4f:8b:f7:67:19:e4:16:91:f0:a7:
85:a3:71:e2:fc:e6:e8:95:8e:34:cc:1c:38:07:36:95:7d:65:
3a:67:89:6d:1f:05:18:86:1f:49:8c:80:ea:34:96:70:ad:f9:
bd:0e:ae:bd:b3:86:d8:4f:80:3b:55:35:39:4d:5a:29:90:22:
31:2b:6e:43:3c:e6:64:a7:04:2c:4d:3a:27:e9:6e:eb:08:d9:
d4:2a:fd:10:e5:c7:fc:24:f2:c0:ec:98:61:b3:36:89:96:6c:
3c:c6:51:a9:5b:57:f6:63:f4:93:12:0b:cd:a8:4e:5e:7a:2e:
7d:96:81:42:8b:b4:3d:ac:98:6f:e4:2d:3b:3f:98:de:b5:9d:
9b:c4:7a:f1:a6:55:3b:22:79:3b:22:bc:01:e4:3b:5e:d4:6c:
1c:95:44:13:fc:5c:3d:99:a6:6a:d1:5f:13:e4:85:d2:70:aa:
99:fb:4c:ba:2f:70:f9:d0:ab:58:cb:3c:4d:a4:b8:4e:f0:5e:
24:52:3b:64:60:e8:d6:f2:5c:2d:10:c0:83:21:d2:cd:4e:ff:
ed:44:f2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org