Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e203231383539.roa
File: 3139342e33312e3139372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: wo07pC+odF++qtCPqIwETehbWGutIwEoBQBqJiqV+50=
Subject key identifier: 3F:46:C8:7F:43:91:28:DF:07:62:39:A0:B7:B2:33:A3:BD:F3:06:ED
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 74FB3121CF055486DA02C09C6AA1AD84E422039E
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e203231383539.roa
Signing time: Fri 08 Dec 2023 12:10:26 +0000
ROA not before: Fri 08 Dec 2023 12:05:26 +0000
ROA not after: Fri 06 Dec 2024 12:10:26 +0000
asID: 21859
IP address blocks: 194.31.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fb:31:21:cf:05:54:86:da:02:c0:9c:6a:a1:ad:84:e4:22:03:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Dec 8 12:05:26 2023 GMT
Not After : Dec 6 12:10:26 2024 GMT
Subject: CN=3F46C87F439128DF076239A0B7B233A3BDF306ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:7a:bb:80:9d:a3:94:80:91:e9:40:d6:45:
f8:40:52:3d:f7:50:bc:e4:82:5b:72:11:fa:c5:8d:
5c:9b:ee:ac:57:04:9f:01:20:76:30:1d:11:91:42:
98:2a:54:2f:2d:d7:c3:99:61:bb:f9:70:76:58:d1:
a6:b3:04:2f:96:53:b8:80:d5:dd:71:58:b6:23:d6:
e7:40:7e:ee:97:29:24:6c:8e:b3:41:f0:c0:a4:2b:
b5:f0:2e:c4:f1:82:e7:04:d8:e0:66:fe:19:63:50:
de:13:7f:cf:05:60:71:8a:d4:92:41:31:56:c1:a4:
5f:78:ac:38:98:d5:49:46:71:83:86:53:53:be:66:
c7:5c:d3:ab:74:88:9b:cb:ab:68:53:2a:13:c2:9b:
54:80:b7:f8:86:e0:d5:14:b3:37:80:82:13:25:5a:
3a:0f:63:5d:99:6d:c8:33:af:dc:5a:c5:a0:ef:22:
6a:62:44:66:36:93:98:b7:91:c1:62:f7:81:aa:f3:
6f:11:a5:ea:6c:f0:d7:d8:d6:e6:4b:96:54:40:56:
1f:33:3d:71:15:c6:e2:c4:10:6b:70:20:6e:6a:5a:
28:81:55:5f:d1:58:bc:22:b5:7c:fb:a3:d1:82:19:
37:a1:2e:70:8b:52:d5:06:0c:f0:c9:2f:ae:66:26:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:46:C8:7F:43:91:28:DF:07:62:39:A0:B7:B2:33:A3:BD:F3:06:ED
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b1:05:6b:d2:8c:05:68:d6:75:6b:cb:23:23:bf:9d:95:b9:
3c:32:fd:07:cc:fe:39:ad:0a:9f:4f:ad:2f:f0:fb:b9:84:91:
07:6c:eb:a6:6e:4b:eb:67:e6:e0:98:4c:7b:6e:d1:0b:7a:76:
c2:b5:95:37:93:20:c9:87:78:3e:0a:6e:2c:6d:e8:6f:0d:51:
bd:98:cc:07:25:da:9c:b6:21:88:70:b3:2c:4d:01:d2:c7:ff:
bb:ef:17:02:d2:61:33:ae:93:b6:cb:34:2e:05:dc:53:b8:df:
5a:73:7d:4c:ae:f1:f4:ab:ed:26:ad:b0:26:90:9d:58:5f:f2:
92:40:04:ba:29:6d:83:98:ff:60:f6:b5:34:a2:6f:81:64:c8:
0a:06:53:00:01:df:ff:6f:1e:26:cb:6a:94:bb:b4:fa:65:6e:
05:51:32:5b:7f:12:b3:20:7a:3e:97:a7:00:77:4d:5b:07:b3:
09:9d:f6:5f:44:bc:e3:f6:2b:dc:b6:5c:92:56:79:e2:fa:b6:
67:2f:5f:59:50:ba:8e:17:5f:19:0b:0d:39:72:c9:b4:fa:c0:
62:5c:22:bb:c1:32:e4:c1:71:8d:f9:0e:18:71:7b:d0:aa:a6:
4c:a6:eb:76:cd:96:b2:09:f8:96:93:35:24:17:eb:06:5f:ea:
42:af:03:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 02:24:10 2024 by rpki-client on console-fra.rpki-client.org