Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e20323036353035.roa
File: 3139342e3135302e3230342e302f32342d3234203d3e20323036353035.roa (raw, json)
Hash identifier: vvhAiXuwt4B64y2Pz+cz8tKRp+RmrC+bYyiYqB4IHBY=
Subject key identifier: 5F:66:2A:F8:D3:2F:0B:BF:4E:8A:F2:19:E9:CA:93:2A:CC:7B:8B:23
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 705C1EB4FA33F253A2E9A8EE1C26E840EE71F15B
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e20323036353035.roa
Signing time: Mon 23 Oct 2023 09:41:45 +0000
ROA not before: Mon 23 Oct 2023 09:36:45 +0000
ROA not after: Mon 21 Oct 2024 09:41:45 +0000
asID: 206505
IP address blocks: 194.150.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:5c:1e:b4:fa:33:f2:53:a2:e9:a8:ee:1c:26:e8:40:ee:71:f1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:45 2023 GMT
Not After : Oct 21 09:41:45 2024 GMT
Subject: CN=5F662AF8D32F0BBF4E8AF219E9CA932ACC7B8B23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:d8:47:05:66:10:06:42:c0:ed:76:d7:3f:
14:bc:60:b7:86:a5:a6:9c:26:93:13:61:b0:4f:c6:
0c:c0:11:93:9b:5a:49:bb:b8:7f:26:ac:1e:82:3e:
22:4e:f5:5d:d2:06:a2:a0:c8:c8:bd:12:51:c9:2c:
31:6e:93:a1:99:32:0d:0e:d3:17:62:8a:d9:2b:fc:
e4:d5:4a:92:af:bf:9f:9d:ca:b8:e2:64:c6:6a:18:
0a:50:19:28:af:1d:7d:8c:5f:21:06:64:20:fe:c2:
04:cb:0e:eb:a0:fd:72:92:de:d0:e6:f2:92:e2:4c:
40:5d:87:22:f1:8c:2a:ee:b0:62:bb:57:95:08:5a:
04:a2:f2:2d:ba:ed:23:f5:6f:da:07:bc:ba:d3:66:
01:c8:9a:a4:58:2a:51:4d:89:c0:64:53:25:eb:65:
02:03:17:71:62:88:d6:d3:70:74:cb:74:49:39:83:
40:01:4b:e0:81:42:d9:a0:ef:2d:c1:05:9d:80:a2:
0e:6c:1c:09:15:e4:da:ff:ed:f6:5d:da:02:af:3a:
3e:54:3a:b8:79:d0:04:37:18:be:fd:64:02:d7:c4:
9a:32:13:a0:bf:52:e6:48:0f:60:19:c9:ea:73:bc:
85:57:5b:4c:47:da:9d:31:a8:e1:c0:51:b2:b3:d8:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:66:2A:F8:D3:2F:0B:BF:4E:8A:F2:19:E9:CA:93:2A:CC:7B:8B:23
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e20323036353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.204.0/24
Signature Algorithm: sha256WithRSAEncryption
75:67:45:73:fb:ab:ed:b0:ca:d2:0e:a9:ea:30:43:95:e1:01:
31:2a:4f:ad:6f:55:7f:9c:28:8b:56:2b:6d:cb:3e:1c:a0:d0:
8f:f3:c3:3e:53:b7:7c:fb:3c:18:ca:80:96:3e:6c:a1:e9:c8:
1e:db:3f:60:64:b3:20:a7:46:64:13:98:26:da:0f:2f:e9:0b:
c2:3f:f0:07:77:50:a1:43:30:f2:9a:c9:e9:2d:d3:d3:d7:49:
20:06:f8:e0:c1:08:41:9a:9b:bc:07:e1:66:c7:70:46:b4:17:
4d:3e:6a:0a:64:ec:c6:ae:f2:f0:82:7f:36:6e:a8:11:53:be:
2c:85:83:27:d1:44:4f:8a:9e:2e:36:c2:61:92:40:ac:c3:30:
a5:3a:39:da:91:53:cd:fb:8e:5c:ad:8b:9d:97:e3:56:4a:73:
5a:a0:30:50:c8:43:40:a0:c9:e0:02:1f:31:cd:b9:be:93:44:
f3:fb:66:22:ca:df:17:ba:e2:0c:e7:61:61:ac:4d:65:73:4a:
56:85:c2:42:37:2c:c8:75:50:28:5b:40:ae:ae:af:14:ea:4a:
dc:b3:3a:77:73:21:6b:73:b1:4a:9c:82:88:18:2e:cb:a2:de:
06:91:ab:9d:5e:96:8e:d1:2f:34:b9:a5:a4:86:f4:d2:14:73:
06:d2:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org