Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32322d3234203d3e20343031303339.roa
File: 3139332e3139342e31362e302f32322d3234203d3e20343031303339.roa (raw, json)
Hash identifier: P2QkCn4+5iu9vtGoOBFtwLsXJHNhb8cD8ouS31HXwFs=
Subject key identifier: D1:24:6B:03:68:64:96:43:81:D0:12:1A:9B:60:35:E6:B8:6B:E5:11
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 39C6246F929882CE233E3F0C9B893ABA6DF391A3
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32322d3234203d3e20343031303339.roa
Signing time: Wed 22 May 2024 18:36:19 +0000
ROA not before: Wed 22 May 2024 18:31:19 +0000
ROA not after: Wed 21 May 2025 18:36:19 +0000
asID: 401039
IP address blocks: 193.194.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 17:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c6:24:6f:92:98:82:ce:23:3e:3f:0c:9b:89:3a:ba:6d:f3:91:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: May 22 18:31:19 2024 GMT
Not After : May 21 18:36:19 2025 GMT
Subject: CN=D1246B036864964381D0121A9B6035E6B86BE511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a0:4a:c9:37:66:24:3c:d8:e2:aa:73:75:3a:
36:6c:c5:86:82:bd:98:45:53:aa:bd:3e:4c:1c:60:
87:b0:dd:ca:dd:de:33:28:c2:c3:62:20:2c:2d:a5:
fc:30:66:77:75:17:77:5d:2c:7e:cf:34:62:f6:72:
fe:7d:23:de:3e:fa:77:d4:f4:aa:c1:d6:9d:b2:38:
dc:ec:22:01:4f:65:c1:1e:51:46:aa:29:a7:5a:30:
c5:ca:5a:f9:cf:af:92:d8:b5:fe:36:15:03:1e:2c:
94:57:b8:09:1a:aa:c1:b2:cf:73:a1:f6:98:89:da:
bf:52:22:08:87:b9:3d:5c:ba:39:dd:6b:f2:91:a9:
c6:4b:f2:b7:92:5a:a0:45:7a:e7:ae:0c:5e:73:d6:
96:ec:a2:f6:d6:bf:af:28:1a:28:9e:44:39:8c:43:
18:73:4e:ed:9d:3a:8f:62:80:b5:53:d6:2c:8a:87:
69:63:66:23:52:aa:e7:96:6c:4e:7f:94:25:2c:83:
58:cb:42:a1:8d:cc:df:fd:33:25:45:9a:f1:4b:be:
51:80:30:ac:3d:f3:a7:11:74:e2:9c:15:1a:77:07:
5e:e9:c6:d3:36:c1:ef:a4:f2:c7:ab:20:a9:a0:cb:
e4:5b:be:1d:10:b9:c8:23:c2:b1:56:fb:d2:a8:a9:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:24:6B:03:68:64:96:43:81:D0:12:1A:9B:60:35:E6:B8:6B:E5:11
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32322d3234203d3e20343031303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:52:2d:97:88:ba:53:23:59:53:f6:80:c9:37:c7:1d:a7:bb:
7d:24:89:91:3d:bf:ac:6e:54:4c:fd:66:e5:7e:9a:6e:ed:c9:
ee:f0:7e:60:aa:ef:31:30:e7:7c:b1:07:82:c0:17:53:cd:78:
3a:23:3c:f4:7a:cf:a3:1b:b3:63:7b:24:d6:0d:0f:6c:2e:df:
9f:ea:e8:42:7a:0e:c1:b2:d0:65:ca:98:b3:fa:a5:c1:98:68:
7a:b0:90:0c:5f:28:49:69:3f:00:37:06:61:e9:09:62:a3:98:
11:ba:96:dc:cd:b9:43:78:c6:c0:e5:df:ed:f3:bd:db:eb:1d:
43:63:30:ce:c6:df:5e:36:d6:b9:07:c2:d6:07:83:92:ac:49:
96:88:00:5c:bd:94:43:96:76:5e:b2:31:e8:4b:46:de:fe:ef:
03:41:6c:31:b7:8e:8f:3a:c9:71:9d:56:55:ed:20:ae:b6:78:
7e:33:56:2f:81:05:fc:1d:e2:39:4b:af:24:22:c2:2e:b3:ed:
82:66:c8:44:ac:bd:16:78:cd:51:41:0c:8a:b2:7a:d1:13:d8:
7e:4b:4b:0b:5f:9f:98:55:5d:ee:28:ca:77:5b:20:b4:9a:a6:
06:9d:ac:44:f4:29:f0:60:7d:b2:8e:9f:ee:35:6c:69:52:c9:
0c:ea:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:11 2024 by rpki-client on console-fra.rpki-client.org