Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e203632383830.roa
File: 3139332e3139342e31362e302f32342d3234203d3e203632383830.roa (raw, json)
Hash identifier: x8TtF6PK1aUA6YAW5Vd0+t5HTQl5xUCcitvDW2ZxvO0=
Subject key identifier: 4F:89:10:05:CE:CF:1C:EE:D5:10:A3:D7:1A:48:35:88:33:BC:A9:E0
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 1A0CFC08516237DF77FC88461E22606D47D23BF8
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e203632383830.roa
Signing time: Wed 14 Aug 2024 17:56:36 +0000
ROA not before: Wed 14 Aug 2024 17:51:36 +0000
ROA not after: Wed 13 Aug 2025 17:56:36 +0000
asID: 62880
IP address blocks: 193.194.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 12:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:0c:fc:08:51:62:37:df:77:fc:88:46:1e:22:60:6d:47:d2:3b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Aug 14 17:51:36 2024 GMT
Not After : Aug 13 17:56:36 2025 GMT
Subject: CN=4F891005CECF1CEED510A3D71A48358833BCA9E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:62:77:27:94:90:3d:70:4a:b7:6a:71:db:83:
8c:68:b5:7f:05:fc:39:ed:4a:e3:c9:8b:59:7a:75:
59:45:0e:2a:7f:32:e8:f9:53:8b:bb:f4:5f:f4:46:
9e:20:6c:5e:f7:7b:be:f4:91:62:4b:a9:35:9e:30:
2d:dc:97:73:e8:d6:00:3f:f8:c5:44:5b:97:e3:97:
94:26:a4:a7:be:76:8e:97:44:64:2d:59:74:d4:cb:
f2:e3:d5:f1:d9:a5:a1:93:f8:4b:9b:ac:a1:de:79:
16:98:99:bd:7a:ce:ad:82:95:45:44:6a:eb:e3:c6:
99:5d:8b:cd:9d:0e:1e:5e:69:d6:78:c7:9c:d0:88:
2c:ec:06:a0:d0:77:b4:11:12:e7:86:ce:e4:3b:d5:
8b:88:f1:ac:32:0e:a1:bb:5f:6d:3e:13:81:e3:d8:
ec:ed:67:73:84:db:45:87:e5:3d:14:a0:51:9d:84:
df:2f:46:ca:32:d2:fc:40:46:94:f3:4c:f8:89:a6:
16:6f:9b:c9:32:a3:21:ab:39:b3:96:5a:38:1f:76:
71:b1:ac:aa:87:ff:9f:87:37:aa:ea:8f:27:6a:bb:
b2:d3:33:4d:4c:25:82:19:f8:6f:44:c8:a7:fc:5e:
59:f0:dd:0f:8c:9d:61:1a:20:f4:5e:d4:c8:91:32:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:89:10:05:CE:CF:1C:EE:D5:10:A3:D7:1A:48:35:88:33:BC:A9:E0
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e203632383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6a:86:ed:01:fa:3f:a0:6f:14:a2:97:6a:87:8b:b1:bb:df:
02:f4:b4:cc:6c:aa:60:15:1c:e1:80:e8:d8:d0:e5:99:4e:5b:
e9:76:23:be:fd:70:8d:da:12:18:01:9b:6a:03:bd:5f:fe:88:
50:2c:a8:b2:fe:8a:11:c8:a7:7b:0a:e1:84:db:ec:7b:ad:9f:
1c:fb:e1:b8:6e:37:65:78:ed:56:d0:8e:c4:83:25:c5:e2:7c:
38:6a:9e:13:f9:ab:08:f2:24:9b:e5:ca:5d:d9:96:83:43:70:
16:90:56:e1:bb:f7:ea:27:5e:59:3d:92:57:0a:41:ac:2b:87:
17:33:61:c0:e0:53:a6:c1:23:32:95:90:df:2f:6c:75:40:1a:
95:57:9b:2c:56:81:e2:5a:85:40:50:02:ad:78:83:e3:ed:b2:
b2:8a:c5:de:b9:9a:f7:bf:ec:56:91:33:47:59:37:cf:2f:33:
b1:db:cb:82:1a:7b:1f:83:e1:77:78:67:db:87:4b:05:c7:e9:
ed:ea:cc:c4:07:1c:6b:fb:ea:25:12:55:f4:86:7e:e3:9f:71:
83:1d:f5:c3:fa:40:f3:6e:07:f2:ad:54:57:68:52:a4:d2:9e:
6e:68:0e:d9:75:7a:45:6a:1d:00:a1:d2:72:18:03:65:f8:c4:
02:c1:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:36:46 2024 by rpki-client on console-ams.rpki-client.org