Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e20343031303339.roa
File: 3139332e3139342e32302e302f32342d3234203d3e20343031303339.roa (raw, json)
Hash identifier: Yau4TDlQcb+ROEZk+pMqPgvU01d2sk4bWey89X0IiUU=
Subject key identifier: 10:1B:00:09:E7:89:D4:64:0F:35:BF:EB:F3:C4:82:D4:B9:47:47:80
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 29DE7F007DF9376482459529F8879278923357C8
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e20343031303339.roa
Signing time: Wed 22 May 2024 18:36:18 +0000
ROA not before: Wed 22 May 2024 18:31:18 +0000
ROA not after: Wed 21 May 2025 18:36:18 +0000
asID: 401039
IP address blocks: 193.194.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 17:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:de:7f:00:7d:f9:37:64:82:45:95:29:f8:87:92:78:92:33:57:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: May 22 18:31:18 2024 GMT
Not After : May 21 18:36:18 2025 GMT
Subject: CN=101B0009E789D4640F35BFEBF3C482D4B9474780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:a3:a1:74:6f:59:ee:07:0b:c5:30:89:4b:
63:03:b2:4f:53:44:06:60:23:75:cc:26:9a:ad:72:
e2:2a:fa:e4:b9:c9:bd:6b:5d:88:25:51:2b:22:41:
73:8b:d6:59:74:81:84:64:02:96:a3:bf:05:ca:f7:
6a:2b:c0:13:3c:2a:a0:6a:71:60:23:3f:83:5b:01:
aa:97:5b:da:02:41:58:27:03:87:9d:f0:ba:bf:74:
3b:19:52:90:31:b7:3d:61:3f:2f:c9:fc:e5:71:c7:
1f:99:ff:a9:a1:c5:bd:79:5d:08:d5:90:d0:12:91:
32:1c:17:65:38:af:4e:87:2d:b8:90:68:11:c1:26:
bd:72:b7:88:17:46:49:b8:37:40:50:f4:ab:05:03:
e6:cd:b0:6f:85:c3:b7:05:74:e2:69:9c:32:2a:37:
2e:f7:a1:34:7e:4b:82:3e:32:2f:84:28:8e:8d:cf:
1e:bc:81:80:90:3a:62:fd:0d:f1:f7:4f:4f:dd:c0:
8c:79:be:9b:2e:29:8b:a4:99:f3:15:f2:c0:98:f4:
39:88:e0:e4:2c:57:a9:f3:a7:65:3b:61:bd:a4:a8:
de:b0:bd:54:5b:59:d8:a7:b4:03:28:a5:b7:f9:9e:
47:7e:ea:9a:73:c1:ab:09:50:cf:3d:45:0f:45:d9:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1B:00:09:E7:89:D4:64:0F:35:BF:EB:F3:C4:82:D4:B9:47:47:80
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e20343031303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.20.0/24
Signature Algorithm: sha256WithRSAEncryption
78:95:7f:97:40:03:ff:23:c2:ca:bd:82:c3:af:99:91:d3:12:
2a:28:ef:48:39:2a:05:fe:1a:9c:7c:3a:6e:55:75:5a:9e:9b:
e0:f5:ce:78:94:05:16:a4:ea:bd:11:1f:8f:80:29:90:16:5a:
96:c2:db:1c:03:df:48:01:c5:75:51:4b:e4:54:c3:f1:e9:03:
fa:43:2a:66:21:57:6a:8c:4e:da:71:77:3c:50:38:83:47:4e:
7b:26:4d:27:ea:96:4f:a9:6c:5e:25:b4:2d:27:f0:7e:2a:12:
d2:6e:f0:cb:ad:1d:5b:46:08:2a:91:39:0b:f3:9d:19:12:f3:
51:a1:67:8f:3f:0a:3b:62:3b:91:a4:81:93:c6:01:38:47:4a:
d0:89:ba:28:57:58:64:eb:2b:c7:fd:78:2e:14:6d:ff:51:75:
86:38:0d:c4:1b:47:7b:ec:cd:9b:84:a0:19:22:25:f1:83:e2:
1a:3d:3e:07:cc:90:68:50:cf:d6:ff:0a:dc:28:72:21:d3:da:
19:57:49:84:74:c4:f4:80:81:04:aa:85:7b:43:34:96:65:56:
ae:2c:68:ed:f0:74:d1:16:c5:1e:51:7d:d7:88:47:df:39:ab:
4e:62:b6:18:59:8f:9e:a8:2a:a9:e3:97:be:de:d6:04:d0:33:
21:c1:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:57 2024 by rpki-client on console-ams.rpki-client.org