Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e2030.roa
File: 3139332e3139342e31362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: +Aia1i7dVTPKa/Pv6AUcUQpa62f33/+yI3Z6/OxYNgc=
Subject key identifier: 4C:DA:1F:93:6A:08:9B:8F:0D:29:9F:B6:07:21:21:3B:FC:DE:A3:1E
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 63DBA27636A49F7D596F1A7590E787F264E3FA9F
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e2030.roa
Signing time: Fri 05 Jul 2024 20:14:01 +0000
ROA not before: Fri 05 Jul 2024 20:09:01 +0000
ROA not after: Fri 04 Jul 2025 20:14:01 +0000
asID: 0
IP address blocks: 193.194.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 19:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:db:a2:76:36:a4:9f:7d:59:6f:1a:75:90:e7:87:f2:64:e3:fa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Jul 5 20:09:01 2024 GMT
Not After : Jul 4 20:14:01 2025 GMT
Subject: CN=4CDA1F936A089B8F0D299FB60721213BFCDEA31E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:0d:30:a7:d8:31:2b:78:8c:43:a8:99:59:
94:6d:9c:3b:e5:0a:45:31:98:15:a4:f8:02:d7:80:
5e:3a:4d:99:bd:8c:6f:f2:80:77:8e:7a:26:bd:d0:
85:0f:be:c4:da:30:5c:74:21:d1:00:fe:0b:50:bf:
7c:d0:70:08:13:a2:e8:d4:e2:1c:39:24:58:55:8a:
f1:e9:fe:5e:1c:d3:50:4d:85:ee:52:2f:01:10:d1:
de:18:21:ad:19:88:9b:a1:1f:48:64:b9:0f:e6:ae:
dc:84:17:fa:09:fa:1b:56:a2:71:8d:c7:de:1f:d6:
f1:6e:75:85:a3:0d:3b:29:c3:26:b3:7a:82:3b:64:
ff:a6:2d:fe:9b:8d:d5:07:be:d0:7e:d9:0e:65:e8:
b8:16:16:af:db:39:d4:20:c3:50:ca:ca:d4:45:7d:
ac:fc:7e:9f:8a:01:ca:e3:1f:d4:84:73:be:52:05:
75:71:32:40:73:7c:4f:ce:34:c3:4f:6b:e6:05:b6:
3e:2b:56:36:c9:17:8d:0c:c6:68:4b:3b:87:51:bc:
1d:6f:e4:6f:3d:d5:82:25:81:10:65:d6:8e:47:e5:
b6:76:f9:6b:da:58:65:2e:18:3c:45:c3:75:2a:49:
f3:77:cb:1e:a3:05:ad:00:3e:a0:3f:f2:90:fa:0e:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DA:1F:93:6A:08:9B:8F:0D:29:9F:B6:07:21:21:3B:FC:DE:A3:1E
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ed:24:21:1c:01:a3:1a:d4:66:d2:51:23:28:18:63:9e:87:
f6:61:30:27:86:08:83:79:8a:6c:70:38:ee:1c:83:3b:c3:e8:
b4:70:6a:c7:17:1f:c5:d9:be:7d:c7:a1:e4:f3:d5:6c:3d:66:
50:32:91:5a:4d:91:ea:6b:c8:54:6c:01:4c:ad:e6:02:02:bf:
bb:e0:cc:09:c1:34:1c:78:48:13:21:bc:5a:f9:ea:e1:b9:61:
fa:64:d4:16:03:53:68:23:ae:fd:ef:64:b2:44:c6:fe:64:3b:
3c:b5:1e:ca:93:68:d0:b3:6f:37:55:59:92:4b:7d:29:65:e6:
51:d7:81:1e:79:50:d6:98:53:5f:dd:fc:3a:07:dd:83:8a:35:
f4:d2:18:ec:31:ac:a9:6a:7e:b2:3a:f5:5a:6a:e4:af:bd:1e:
c1:2c:b6:4a:9d:23:4a:d9:e7:fd:f2:23:be:5d:46:6e:55:0b:
a5:f5:3b:b5:4b:9d:52:66:93:51:33:5c:ae:f2:2c:71:fb:93:
56:32:ed:e7:1b:8e:d5:2f:39:bf:ee:07:47:7c:ef:32:a6:bd:
4e:f5:47:03:84:db:18:7c:41:b3:cb:d1:70:fb:a6:00:f7:a4:
a3:59:d6:d6:ca:d1:d2:3e:82:ae:5a:ca:8f:39:35:64:c9:d9:
31:53:af:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 20:22:08 2024 by rpki-client on console-fra.rpki-client.org