Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e203132383339.roa
File: 3139332e3139342e32302e302f32342d3234203d3e203132383339.roa (raw, json)
Hash identifier: KGvGj5EycnYCUklax4736xN5zXmOqnEsLnvX46IvJz4=
Subject key identifier: F8:E2:1F:CC:C0:D9:E3:77:9E:7C:AD:0D:44:21:46:A9:17:93:DC:24
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 0C1F37E87F13C369679A4027A2FB64F2CFB2A71C
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e203132383339.roa
Signing time: Sat 01 Jun 2024 21:05:50 +0000
ROA not before: Sat 01 Jun 2024 21:00:50 +0000
ROA not after: Sat 31 May 2025 21:05:50 +0000
asID: 12839
IP address blocks: 193.194.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 19:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1f:37:e8:7f:13:c3:69:67:9a:40:27:a2:fb:64:f2:cf:b2:a7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Jun 1 21:00:50 2024 GMT
Not After : May 31 21:05:50 2025 GMT
Subject: CN=F8E21FCCC0D9E3779E7CAD0D442146A91793DC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:ef:d0:9b:01:55:32:aa:e1:7d:46:af:3a:
84:7f:75:8f:9c:1a:c4:58:04:88:35:dd:c9:6f:a7:
aa:af:e9:00:b5:c5:59:86:fb:4b:13:e8:a4:85:61:
fc:f1:3f:b2:0f:2e:9c:50:ae:dc:a6:92:9f:43:de:
02:4c:20:7e:34:f0:c6:76:8d:a5:ed:8a:97:f3:06:
83:04:73:e2:ef:33:23:cb:66:1a:ea:72:91:55:f0:
7d:25:ad:0a:60:3e:bd:04:d7:d7:89:55:11:ce:b0:
c1:f6:4a:6c:a5:2c:98:5b:e4:14:80:59:d4:a2:91:
dd:d1:02:6d:d7:0f:66:7c:b6:fa:61:82:2c:19:d5:
c2:a7:43:0e:ce:ef:8b:b4:d3:71:d1:e1:20:9e:5e:
74:1f:2d:43:d4:21:56:11:a2:67:13:89:1d:c5:d5:
7b:70:d6:a5:72:a3:d2:72:d9:bb:f9:ae:0d:c9:25:
3e:9d:54:67:da:c9:47:d3:6f:4a:d7:2d:23:6e:bb:
75:27:19:2c:1a:1f:0e:69:18:26:ae:85:41:70:60:
fc:e6:55:38:f7:54:2b:ca:03:7a:5c:42:4f:82:e4:
18:71:cf:07:d4:18:6a:4a:30:c4:b9:91:63:65:30:
43:72:c8:a7:a3:22:91:b6:b7:0a:71:ca:6e:a1:e2:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E2:1F:CC:C0:D9:E3:77:9E:7C:AD:0D:44:21:46:A9:17:93:DC:24
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e203132383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:57:6b:04:7b:22:b6:cf:d3:b3:26:df:af:74:61:57:c7:31:
58:ba:b3:52:b2:0d:25:c6:9f:e0:97:da:7c:a2:a9:e0:36:df:
64:75:de:b3:24:e2:2d:28:9c:3f:61:d6:58:4c:44:35:50:f2:
72:a1:73:4a:c0:51:0c:c1:f7:ef:a0:0e:54:20:c1:03:16:5f:
40:53:18:50:3d:1b:33:d1:7d:3f:10:4e:3f:c3:34:e3:5c:80:
75:a5:b4:8d:67:37:6f:0b:72:e5:b1:6f:c9:5b:c0:a7:ea:92:
e5:e0:71:67:6a:42:e7:c3:9b:5d:60:04:44:47:95:ac:7a:7a:
5d:69:99:cb:ff:a2:23:25:af:00:77:63:d1:ad:fc:6b:64:a4:
f3:38:f6:de:dd:f9:f1:3d:a4:21:63:64:c0:00:14:7a:55:c2:
a0:78:5f:b4:64:cf:97:02:f4:61:cf:fa:56:ee:bd:9b:19:d1:
2b:90:52:f6:a4:5f:74:86:18:ce:86:ae:ac:ab:e7:12:86:7c:
4c:78:4d:0d:c3:da:42:ef:3a:9a:df:e7:2c:f0:72:52:3e:ef:
d0:1c:71:25:f6:eb:53:be:7d:35:cd:17:fe:fa:e3:3b:12:78:
85:84:34:f2:e8:8c:c4:05:34:78:35:89:08:25:60:5f:fd:e0:
fb:2f:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 20:22:08 2024 by rpki-client on console-fra.rpki-client.org