Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32322d3234203d3e203132383339.roa
File: 3139332e3139342e31362e302f32322d3234203d3e203132383339.roa (raw, json)
Hash identifier: iD6BQ2L0e/NQ9XsfIPBNNI2xQPa3ZJgfkgw6tmMFOgs=
Subject key identifier: 20:C5:12:D3:95:BE:CE:91:27:76:42:1A:E5:8C:EF:3C:72:81:3F:19
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 41B7A9F4BB8AD27E0E90E1F74E877B416C8FB6AF
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32322d3234203d3e203132383339.roa
Signing time: Sat 01 Jun 2024 21:06:32 +0000
ROA not before: Sat 01 Jun 2024 21:01:32 +0000
ROA not after: Sat 31 May 2025 21:06:32 +0000
asID: 12839
IP address blocks: 193.194.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 20:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b7:a9:f4:bb:8a:d2:7e:0e:90:e1:f7:4e:87:7b:41:6c:8f:b6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Jun 1 21:01:32 2024 GMT
Not After : May 31 21:06:32 2025 GMT
Subject: CN=20C512D395BECE912776421AE58CEF3C72813F19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:14:91:87:a2:44:3a:22:24:36:dd:bf:ce:
11:a5:e4:a4:dd:d5:78:66:33:56:56:97:24:a1:ca:
74:89:c7:00:93:40:ca:e3:db:c7:4f:af:9c:c0:58:
e7:44:ba:fc:07:42:35:7e:94:ae:52:77:32:9d:45:
02:e3:33:45:44:86:9b:d1:8a:47:16:4b:d9:eb:fc:
69:e3:db:b8:fb:e6:35:9e:bd:91:b7:1d:d7:e1:64:
48:59:53:f1:c8:5e:81:39:64:8d:da:5b:e8:0e:c9:
d0:86:93:08:f1:86:b2:6c:d2:e6:3f:8a:3e:8f:83:
8a:b3:e7:1a:c3:cc:75:2b:73:36:de:80:f6:9b:b0:
9a:49:cb:7e:7c:6f:4a:9c:1c:20:1a:08:fe:22:f7:
23:a9:aa:5d:6e:f8:fb:ab:df:2b:15:2c:c6:37:83:
7b:f0:e0:a2:32:fe:97:3e:77:49:0a:93:20:5b:e2:
c6:61:ab:80:d0:64:91:59:32:bb:f3:0b:45:d5:0a:
7c:38:d2:65:6e:de:25:e1:52:be:f3:d3:70:f0:6d:
f7:b8:9f:4b:53:d4:87:c2:cf:27:b3:a7:02:97:04:
98:6a:65:b6:b7:f3:f2:72:49:f4:3e:5c:f4:73:d0:
b2:dc:d6:8a:97:19:c0:30:8c:e9:3c:d8:ba:67:b5:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C5:12:D3:95:BE:CE:91:27:76:42:1A:E5:8C:EF:3C:72:81:3F:19
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32322d3234203d3e203132383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:31:dd:0f:22:f8:5e:89:f7:52:c5:fa:3e:27:50:fb:f9:42:
bd:ac:a0:97:b5:f6:df:87:87:03:16:84:f8:f2:e0:cd:76:c4:
0d:3a:80:1f:43:43:0d:68:bc:ce:4a:cb:94:ac:e7:c1:cd:27:
69:d7:89:9c:24:0a:f6:0c:10:fa:ce:6c:e4:ea:a5:45:ea:29:
a0:07:7b:a1:cd:6e:18:41:a9:f9:cd:8e:ce:16:83:c1:91:2d:
4a:d3:cf:d7:e1:a4:e3:02:47:ab:7a:43:86:db:2e:33:6d:45:
cf:dc:61:e7:8e:d4:71:55:24:4d:25:41:43:3d:7a:63:ff:82:
2f:2d:b8:55:f5:15:46:c0:ce:cc:61:ab:de:20:ee:33:f5:c9:
ce:59:a8:ca:bd:bc:61:da:ff:3c:b2:59:5f:e4:59:82:81:d0:
5e:3b:aa:a3:da:0f:41:b3:5b:35:35:da:8a:cd:2d:ee:64:db:
fa:91:3e:c8:2d:82:58:46:65:ca:06:fe:e0:d7:b7:ce:97:c9:
8e:68:92:55:4d:74:13:cc:1c:6e:56:8d:a9:6f:6e:c1:b0:3d:
3f:ed:92:3b:42:27:45:bb:03:05:31:d7:35:76:89:eb:03:55:
49:08:34:6c:62:9e:45:db:86:50:d3:bd:f5:76:39:c1:8e:28:
f3:34:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 21:30:40 2024 by rpki-client on console-fra.rpki-client.org