Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31372e302f32342d3234203d3e2030.roa
File: 3139332e3139342e31372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: aO3doQm5adm9y5SiGZbuhHOXEtnUIqXzvX5azg5+3Jw=
Subject key identifier: 05:E8:F0:C2:91:F6:FB:FB:92:9D:60:3E:BE:2B:8B:4F:ED:8D:10:7D
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 5EAE572D16B104A84B705B2A84525674198F3453
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31372e302f32342d3234203d3e2030.roa
Signing time: Fri 05 Jul 2024 22:32:51 +0000
ROA not before: Fri 05 Jul 2024 22:27:51 +0000
ROA not after: Fri 04 Jul 2025 22:32:51 +0000
asID: 0
IP address blocks: 193.194.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 19:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ae:57:2d:16:b1:04:a8:4b:70:5b:2a:84:52:56:74:19:8f:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Jul 5 22:27:51 2024 GMT
Not After : Jul 4 22:32:51 2025 GMT
Subject: CN=05E8F0C291F6FBFB929D603EBE2B8B4FED8D107D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:54:63:f3:db:fa:1c:00:a2:27:89:6c:79:
d2:88:0c:de:5b:6b:06:24:95:32:81:cb:a5:16:7c:
1e:37:86:3b:bf:36:6d:0e:00:0a:dc:14:18:78:83:
42:b7:b1:d5:d9:7c:43:dd:aa:7f:53:a0:dd:7b:ed:
42:ec:21:fc:25:09:ac:7b:6b:dc:f1:83:6c:cb:13:
82:bd:06:36:27:0d:21:f6:a1:0b:c5:fe:7a:31:8e:
d7:9f:25:ce:d0:ed:ab:df:c1:d6:2e:d8:b9:67:d4:
d9:d7:29:b9:d3:05:8b:71:14:fc:46:1e:aa:07:ec:
51:1f:1d:3f:34:ee:99:73:c9:e0:94:11:cd:bf:1e:
13:e1:dc:7d:c4:c8:10:91:56:b7:c8:3b:be:2c:f8:
bb:fe:52:18:0f:e3:64:da:db:9b:b6:82:7c:f6:fb:
7b:6b:89:64:28:9d:3d:2a:95:d8:57:e9:4e:0e:ff:
3a:e3:b7:cc:fc:61:97:1e:ef:08:22:67:6d:0c:26:
1f:6a:04:70:9f:9c:ff:e3:e1:ff:c0:36:a9:04:00:
57:15:72:86:82:9c:31:9c:32:ee:5e:46:fc:63:27:
e5:e2:fb:82:95:9e:31:ae:7c:6a:ee:ee:e4:a6:86:
f2:43:80:4b:36:6f:eb:94:74:83:35:97:d7:ea:72:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E8:F0:C2:91:F6:FB:FB:92:9D:60:3E:BE:2B:8B:4F:ED:8D:10:7D
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.17.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3e:b3:28:09:4d:41:8f:bb:5d:ae:26:21:22:0e:ff:16:0c:
e2:9d:04:80:79:39:1e:3d:dd:e0:88:47:ff:62:8a:04:ea:68:
62:a2:5b:23:2b:ae:0b:00:fb:69:fe:2d:d7:cb:a1:ac:d2:47:
a7:37:9b:d1:65:97:8e:9c:1f:89:9f:eb:b7:ca:eb:33:2f:ed:
9f:94:f5:1d:a9:cb:a0:62:4e:d9:c6:cc:b3:a1:28:17:10:44:
b1:8f:51:de:3b:87:e4:9c:91:a6:28:3f:6a:f2:e3:1a:a8:43:
b4:e1:9a:6b:b9:09:b0:1c:d9:02:44:27:56:f6:44:e9:28:be:
dc:62:31:c7:8b:4c:07:ce:27:dc:07:57:fd:3a:63:22:da:ee:
bf:a7:4b:e6:21:e3:d1:66:4b:2d:2b:ff:f3:df:a6:f0:29:3c:
2b:70:11:f4:bf:9a:37:83:f1:03:38:4e:bb:2e:aa:40:fc:6c:
a0:74:94:be:79:41:b1:19:1d:5e:a8:51:78:71:ab:ee:cd:14:
35:cb:3d:48:3c:70:c8:d6:70:1e:4f:fd:6f:b6:14:23:18:f3:
82:c5:99:fb:77:c4:b7:ed:14:d0:59:8c:e7:ea:d6:69:e1:52:
e1:3e:ff:e3:b5:59:0d:78:96:be:f8:b1:cd:c4:80:06:73:2f:
9e:88:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 20:22:08 2024 by rpki-client on console-fra.rpki-client.org