Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e203132383339.roa
File: 3139332e3139342e31362e302f32342d3234203d3e203132383339.roa (raw, json)
Hash identifier: WmxA4fhRa73EV1CcUukR1Kju3Gt6/fYN/W4JhAqnwjo=
Subject key identifier: 0E:70:4B:68:29:B3:E2:51:2F:8F:31:93:0A:AA:CD:74:CB:4F:06:4C
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 1F0CA3027E4DFC41DA79E07935CFEAECA5DD1DAA
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e203132383339.roa
Signing time: Tue 04 Jun 2024 19:30:03 +0000
ROA not before: Tue 04 Jun 2024 19:25:03 +0000
ROA not after: Tue 03 Jun 2025 19:30:03 +0000
asID: 12839
IP address blocks: 193.194.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 20:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0c:a3:02:7e:4d:fc:41:da:79:e0:79:35:cf:ea:ec:a5:dd:1d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Jun 4 19:25:03 2024 GMT
Not After : Jun 3 19:30:03 2025 GMT
Subject: CN=0E704B6829B3E2512F8F31930AAACD74CB4F064C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:17:ab:24:37:ee:91:ff:a7:74:87:11:51:
d3:78:b2:86:84:22:58:60:2f:36:34:74:54:fc:01:
a4:ce:ee:7e:08:b1:1f:36:44:3b:9e:92:88:b4:43:
6c:63:b5:3c:0e:a6:dd:ad:ac:cf:14:62:23:20:cb:
b9:43:6e:c7:be:16:46:3b:96:52:cb:02:f8:fe:28:
fb:62:4a:a9:ff:fe:c3:ac:25:2a:48:38:3a:86:8c:
45:31:65:f2:f2:ba:cf:2a:81:18:ac:ba:81:6e:f0:
35:a4:a9:4c:dd:bf:57:e8:6f:b6:d4:d1:5b:b1:99:
6f:59:42:cd:90:ea:a9:02:37:ff:9e:ef:34:b2:3c:
a3:b4:40:01:dd:95:ec:5f:ff:60:25:a2:e2:2d:7b:
ea:56:1c:f1:78:b0:c7:d9:ad:aa:b4:1d:d4:ac:84:
a9:be:e7:20:88:3b:99:f5:5c:c1:54:15:5a:eb:f8:
b8:ab:20:d7:3b:9d:ac:d3:37:55:7d:17:85:5a:7e:
1c:f8:42:d6:47:f9:d5:bf:ad:4a:c8:f0:95:5c:7f:
ed:8e:a0:a5:a4:94:f2:b4:11:44:5d:80:b8:42:9d:
a7:df:ec:01:32:2a:b7:38:fb:2d:f6:4b:29:6e:52:
24:37:3c:f1:7d:3d:b3:d6:21:5d:46:c5:c2:9d:bb:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:70:4B:68:29:B3:E2:51:2F:8F:31:93:0A:AA:CD:74:CB:4F:06:4C
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e203132383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ed:42:c4:52:f2:b4:04:91:85:ab:4b:26:5e:cb:2c:2c:18:
18:17:c5:22:26:20:2f:1e:42:40:d8:49:b1:1b:e6:24:a8:9c:
92:cb:cc:bb:9a:b4:2a:39:0f:08:de:f4:d5:06:62:90:35:fb:
45:f5:0b:65:72:6f:c2:8f:f6:89:e2:b3:d6:7f:7e:c6:5a:4f:
39:85:59:02:75:a5:ae:73:87:ba:fe:0c:12:3a:9a:e6:3d:48:
1f:eb:66:5a:b7:1b:9e:dd:66:11:5d:38:ca:98:ed:20:4a:17:
81:32:1c:98:7e:c2:d3:c8:8c:cf:6e:0f:82:4b:40:e3:c2:4c:
67:be:97:18:45:c4:8e:73:fe:f4:0a:26:78:a0:53:ca:de:49:
93:df:57:f0:89:62:88:a8:4b:0d:55:48:31:1a:ba:b2:f8:74:
1a:d0:b3:38:7c:58:cf:89:cb:fd:a8:2e:9e:de:fe:91:62:fb:
ba:56:b2:b4:ee:0d:f8:ed:53:3f:33:bc:71:a0:47:59:b0:e7:
c2:12:bb:81:5b:3c:09:00:d1:87:12:a3:4b:74:30:35:ce:ae:
b5:3d:50:cf:f3:04:3e:14:7d:cf:94:8a:65:80:81:14:ca:97:
3e:69:7b:29:cd:e8:97:eb:00:f9:a4:97:c3:70:c5:77:36:bc:
e8:f9:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 21:30:40 2024 by rpki-client on console-fra.rpki-client.org