Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e20323136323635.roa
File: 3139332e3139342e32302e302f32342d3234203d3e20323136323635.roa (raw, json)
Hash identifier: S5spB17S2oyvpvN4QlhUGu2swcdiRyUMX2zK8Z8FyKE=
Subject key identifier: EC:71:D2:EB:35:AA:1C:8F:83:8A:AF:49:22:BF:4E:0B:A3:52:DE:78
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 46BDFC49FBFB64411E67A7E4F98666CF2A50811D
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e20323136323635.roa
Signing time: Tue 28 May 2024 17:04:41 +0000
ROA not before: Tue 28 May 2024 16:59:41 +0000
ROA not after: Tue 27 May 2025 17:04:41 +0000
asID: 216265
IP address blocks: 193.194.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 19:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:bd:fc:49:fb:fb:64:41:1e:67:a7:e4:f9:86:66:cf:2a:50:81:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: May 28 16:59:41 2024 GMT
Not After : May 27 17:04:41 2025 GMT
Subject: CN=EC71D2EB35AA1C8F838AAF4922BF4E0BA352DE78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:82:44:3b:4b:4f:78:6d:81:71:54:21:04:
2a:05:98:9f:a4:70:c6:ec:50:5b:90:b0:13:c2:51:
53:bb:b2:79:9e:b3:78:c0:6f:88:de:b2:0d:c8:e2:
8a:ce:98:cc:03:65:f1:f4:43:4c:f7:12:bd:17:27:
49:ba:be:b3:ee:d7:21:9b:a5:b7:b5:a5:b1:d4:cf:
13:3d:c4:c8:92:d1:61:15:65:2f:93:21:4e:1b:4e:
c5:0f:cb:c6:1d:21:43:18:b6:cb:c2:d8:48:5f:8a:
53:14:7d:60:a9:8b:13:9d:f4:d3:ec:94:37:e4:3b:
0d:ce:22:03:c5:c6:d0:4f:23:4f:63:ae:b1:96:62:
c0:15:ba:37:0c:d9:6b:62:51:4c:2e:1c:0d:02:e0:
69:ad:3a:2a:52:dd:8b:0a:14:19:ec:0b:03:ed:eb:
d4:29:2c:aa:6c:c9:3d:4e:2d:92:51:3e:87:e5:a9:
7d:13:f8:3d:60:a6:f8:c2:ea:65:51:fd:15:d2:92:
a2:73:15:8d:c9:a7:a2:11:87:a1:1b:d4:70:8b:a4:
81:d8:e7:0b:dd:23:f4:7f:77:cf:dc:ba:69:b7:a8:
06:82:8c:b5:26:5c:ff:30:98:9e:07:b8:cd:08:53:
2a:cd:e7:eb:6b:a1:59:60:44:3d:f0:cb:27:9a:c0:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:D2:EB:35:AA:1C:8F:83:8A:AF:49:22:BF:4E:0B:A3:52:DE:78
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e20323136323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.20.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b3:62:37:dd:40:a5:01:db:10:be:cf:89:df:91:0a:4b:ac:
53:be:22:3e:09:d7:b6:eb:05:fd:60:be:5a:25:d5:bc:86:52:
98:d5:e6:1f:e6:fb:d0:5f:75:b0:43:78:23:64:eb:1b:8e:fe:
0b:98:c4:cd:e0:6a:33:65:76:66:07:91:bb:03:10:5a:f3:81:
57:e2:6b:9b:9d:5c:c4:9e:59:36:cb:b6:08:0c:24:1a:05:42:
97:c6:a4:c6:f4:a3:a0:ae:24:d7:c7:60:ee:4e:35:28:40:af:
bc:98:58:cf:18:7d:2d:30:06:50:10:57:bb:6e:ac:0f:77:ed:
a8:5e:2e:ca:f5:ea:02:bc:c9:d8:69:54:6f:e7:a5:f1:c4:6d:
06:1b:67:46:7e:ef:29:15:50:52:2b:d5:13:3d:cc:27:00:71:
02:4b:7e:13:f2:8f:e6:e1:8b:2a:92:20:6d:c7:3e:ec:7b:16:
37:6f:3d:9b:d7:3b:fb:7b:c4:6b:e9:bd:f1:8b:e1:fa:6a:21:
bb:5a:8c:52:00:18:21:77:bd:01:8c:ea:90:be:1d:2a:6d:3c:
58:37:d8:21:9d:d1:17:99:0c:52:65:4f:c1:61:2e:12:18:50:
5e:f2:85:b0:ec:33:0a:b3:51:5a:06:30:72:4f:c5:32:60:e2:
1f:16:34:63
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 25 20:22:08 2024 by rpki-client on console-fra.rpki-client.org