Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e20383334.roa
File: 3139342e33312e3139362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0GKOpuaPzBIf7Rcx32m1L6YZtJhie6T8J0EZ81aEfgc=
Subject key identifier: F8:2E:FF:CA:52:3C:99:91:18:E0:78:5C:05:84:86:08:4F:C7:1C:47
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 715439470B793185106E845AA9B83FC65CBEE004
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e20383334.roa
Signing time: Thu 08 Feb 2024 00:04:54 +0000
ROA not before: Wed 07 Feb 2024 23:59:54 +0000
ROA not after: Thu 06 Feb 2025 00:04:54 +0000
asID: 834
IP address blocks: 194.31.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:54:39:47:0b:79:31:85:10:6e:84:5a:a9:b8:3f:c6:5c:be:e0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Feb 7 23:59:54 2024 GMT
Not After : Feb 6 00:04:54 2025 GMT
Subject: CN=F82EFFCA523C999118E0785C058486084FC71C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:d7:c2:ab:40:17:46:a0:1d:f7:30:1b:41:
37:67:45:bd:44:41:5e:76:6e:60:b4:49:ed:18:32:
2b:87:07:a4:6c:20:a8:c2:e0:c5:35:99:d8:33:b9:
0b:cf:bc:3a:30:56:27:8a:91:57:6e:13:37:f5:55:
32:ef:56:e3:94:ef:f9:06:bf:38:67:30:70:60:04:
0f:3f:1e:22:1a:f2:98:be:fb:b6:b2:ca:d4:3e:c6:
7c:2c:d1:ee:92:d8:d6:fd:58:d5:2e:7f:cd:f5:65:
15:73:92:4a:a9:70:35:c7:bd:58:15:f2:0b:14:f7:
50:25:63:82:b4:9c:99:0a:57:8e:70:a4:11:4f:d0:
47:90:0d:ed:d0:6c:a5:9d:0b:12:79:1b:8a:7d:8f:
a1:63:ff:6a:d8:4e:8f:bd:8c:d5:f0:fc:f0:bc:a2:
09:4e:08:4e:65:a0:4e:98:de:d8:87:8c:f2:39:39:
e3:67:9a:95:c9:ff:35:07:4d:24:ec:4c:7d:9e:ba:
59:2d:79:ca:87:6e:00:7d:91:5a:39:70:27:dc:fe:
03:9d:05:f0:ed:ad:7b:ff:22:e4:2d:94:30:73:74:
15:3a:8a:be:f7:e4:a3:ff:bb:f2:6f:51:c4:3d:af:
df:31:8f:d9:a7:a6:da:9c:f1:5b:bb:03:6f:f9:2e:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2E:FF:CA:52:3C:99:91:18:E0:78:5C:05:84:86:08:4F:C7:1C:47
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:33:21:78:8f:c9:77:9c:1e:72:8b:96:3d:33:a9:d9:5b:6a:
bd:54:28:23:08:da:59:73:5c:16:3c:53:f2:d2:33:17:07:3d:
81:fd:c8:5b:ed:91:c5:1d:f9:07:5b:81:0e:fa:ed:d0:9b:15:
c7:7e:d6:80:d0:89:61:ec:71:9d:1e:eb:c6:a4:d4:82:ad:57:
41:61:91:66:68:33:ef:8b:93:1c:8d:6e:f9:a4:5d:17:df:4d:
5e:18:74:9d:c2:f7:b9:b6:cc:b3:a8:06:e9:73:2a:85:4d:02:
eb:56:d3:28:cf:9f:51:ce:39:2f:63:12:c2:01:89:f3:e8:81:
6c:83:df:8a:3a:88:fd:e1:53:79:42:87:7e:3e:27:11:16:e1:
73:4e:f9:0f:24:57:1c:2f:8e:e5:b3:cb:c4:1b:e3:2b:6a:01:
f3:80:14:2c:3c:93:98:0d:51:cf:37:bf:a8:52:5c:51:4b:9a:
cf:38:c3:a0:51:cc:00:a4:a7:df:a1:0b:74:a9:8b:3d:50:de:
f0:34:c3:7f:9b:c9:7e:b3:73:a6:f1:1b:84:60:b8:23:8e:4a:
bd:08:1e:6c:31:a3:1a:81:f7:44:12:0e:07:61:f9:d4:07:5f:
37:d6:32:c3:b8:bf:4a:1f:63:04:38:34:dc:ae:30:a9:e0:33:
08:4b:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org