Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31392e302f32342d3234203d3e20323135303531.roa
File: 3139332e3139342e31392e302f32342d3234203d3e20323135303531.roa (raw, json)
Hash identifier: URpsRw9p6jvJp0a0pqyIfl0uewr4fWuqx1xTUNs+CM8=
Subject key identifier: AE:92:EF:D4:BD:D8:AA:7D:A5:7F:E0:85:24:4E:7F:75:81:A1:16:D8
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 17E95ED8709DA6FEABAC8C462AA2225700AE2B84
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31392e302f32342d3234203d3e20323135303531.roa
Signing time: Tue 28 May 2024 17:05:31 +0000
ROA not before: Tue 28 May 2024 17:00:31 +0000
ROA not after: Tue 27 May 2025 17:05:31 +0000
asID: 215051
IP address blocks: 193.194.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 19:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e9:5e:d8:70:9d:a6:fe:ab:ac:8c:46:2a:a2:22:57:00:ae:2b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: May 28 17:00:31 2024 GMT
Not After : May 27 17:05:31 2025 GMT
Subject: CN=AE92EFD4BDD8AA7DA57FE085244E7F7581A116D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:36:88:61:9a:58:7a:85:52:e9:a1:c8:63:
6d:99:c1:83:2a:c7:ef:80:3d:f9:f7:e9:20:49:ad:
49:46:b4:27:64:aa:d8:80:e7:63:2d:0d:e3:0c:a5:
5e:52:fc:de:d5:02:2f:3a:cd:16:ea:1b:ec:2e:6d:
a8:04:b6:90:e7:8b:e1:8e:f3:72:8c:66:9e:bd:c1:
49:35:28:55:ad:8f:21:a1:ce:45:9f:b4:f9:35:b4:
8c:3d:84:4a:d9:9b:48:b8:ec:51:82:fb:6f:c2:be:
2a:43:2e:9a:f5:ff:b2:ec:27:d4:9a:93:4b:96:2b:
bb:e1:4d:ea:3e:ba:1f:b1:69:62:32:e0:4b:8d:64:
34:e9:6e:ce:53:40:6d:eb:3f:ba:ca:97:b2:27:8a:
b4:ba:52:65:13:8d:1b:13:13:80:b9:ec:e2:d8:aa:
67:22:03:ba:40:4d:08:bd:1d:74:52:5c:c7:5d:53:
c2:7f:6f:e1:8b:57:7b:31:0d:5d:78:ba:b6:6d:db:
99:24:ab:e9:54:9e:da:85:0a:25:83:55:9e:52:a9:
d5:ba:48:03:b4:7f:9d:81:37:8a:ad:27:0f:75:2d:
58:bf:f3:12:d7:db:9d:13:89:ce:a2:f6:ad:a4:8c:
26:43:d7:ef:18:bf:16:ce:d1:5f:a0:25:74:2e:9d:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:92:EF:D4:BD:D8:AA:7D:A5:7F:E0:85:24:4E:7F:75:81:A1:16:D8
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31392e302f32342d3234203d3e20323135303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:be:86:71:c3:22:a0:dd:ef:94:9a:7f:1f:fe:22:80:f6:17:
c3:4b:1e:30:b1:77:e8:85:0a:08:b0:46:7b:89:d4:da:fc:18:
12:5f:d8:98:7d:a1:f7:ea:46:07:69:96:3d:ca:ca:26:be:86:
01:c3:30:3c:56:aa:51:2e:57:69:17:dc:45:d2:ac:42:4e:d2:
7d:e3:88:ed:20:71:b5:0a:26:f4:80:45:83:cb:b2:18:3a:ef:
79:7b:42:37:51:24:53:a0:c9:31:12:99:bf:05:1a:2f:85:e3:
91:a0:2b:09:06:d8:a1:cc:2e:84:3c:2b:d6:56:50:64:5c:df:
cf:d5:14:e3:a3:bc:f1:90:ec:a6:b4:c8:84:03:87:0e:c1:e7:
b1:cf:13:5d:22:4e:2f:7c:a1:82:a1:56:3d:ae:d4:ae:b3:8f:
7e:eb:46:74:9b:5d:32:13:4e:74:a3:5a:a5:2e:b0:9f:46:2a:
f6:25:3a:63:c5:e1:64:63:80:c6:07:2e:dd:65:8a:ce:04:85:
ec:fa:77:d8:d2:f6:4e:26:7b:7f:a4:39:bd:0f:85:86:45:7e:
2b:f5:f4:cd:31:c9:da:c5:e0:97:2c:1d:b3:f6:0c:b5:9a:11:
20:ab:4f:ae:85:2f:ad:ae:99:31:43:a1:28:4c:2e:11:bd:e9:
b7:33:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 21:18:57 2024 by rpki-client on console-ams.rpki-client.org