Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e20383334.roa
File: 3139342e3135302e3230342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: CTFroSMRpy0RiIRpwN3+Uy/ZljAP3xqcivOLMVrQxDE=
Subject key identifier: EF:5D:CD:6E:5C:09:BA:F1:02:83:C7:C5:E2:96:4A:F6:85:37:EA:B9
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 539AB59D0F65106FB28A9087408D55B85953FDE8
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e20383334.roa
Signing time: Tue 18 Jun 2024 00:01:12 +0000
ROA not before: Mon 17 Jun 2024 23:56:12 +0000
ROA not after: Tue 17 Jun 2025 00:01:12 +0000
asID: 834
IP address blocks: 194.150.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 06:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9a:b5:9d:0f:65:10:6f:b2:8a:90:87:40:8d:55:b8:59:53:fd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jun 17 23:56:12 2024 GMT
Not After : Jun 17 00:01:12 2025 GMT
Subject: CN=EF5DCD6E5C09BAF10283C7C5E2964AF68537EAB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:05:0f:03:7f:9d:76:1d:c4:5b:7a:de:cd:
50:88:8c:89:f0:77:1c:b1:69:02:36:f5:95:e2:64:
c5:0c:ef:31:a2:e6:74:61:48:7f:8e:c8:f0:89:79:
7c:ea:a5:d9:37:fe:9f:e9:0c:e5:ad:0d:f7:58:13:
e9:c0:e5:f3:36:f0:3b:14:c2:f2:24:83:25:62:20:
9a:ca:03:0b:96:7b:29:57:84:e4:0d:d5:f8:ca:c2:
66:2f:e4:8f:bc:42:d7:bb:88:f7:a1:55:6b:e9:bb:
c5:08:75:cd:fb:a0:e4:e5:51:af:66:7b:8e:e1:94:
a0:d3:c0:ea:48:f6:cb:e4:73:e9:d1:f1:15:0b:7f:
a5:5f:60:00:ec:96:84:48:67:22:d4:76:88:a7:8d:
a7:f0:7b:3c:c7:1f:fe:a1:5e:aa:0f:55:10:68:2f:
79:98:6c:b6:74:df:42:e5:a6:7e:aa:53:72:96:05:
90:60:50:91:48:75:f3:fb:c5:9c:fc:2a:01:3a:80:
34:8a:99:bc:ac:32:e1:0c:72:6c:9c:f9:81:36:11:
0b:52:9c:d6:b8:ec:c4:bf:c2:4e:b3:ed:e4:6a:74:
2b:67:17:7f:df:4e:5c:44:6a:70:fb:f3:d4:38:ec:
a8:09:aa:c9:df:bd:be:bb:6f:28:ee:b7:a5:2c:e4:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5D:CD:6E:5C:09:BA:F1:02:83:C7:C5:E2:96:4A:F6:85:37:EA:B9
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.204.0/24
Signature Algorithm: sha256WithRSAEncryption
af:5f:3e:b2:0a:9c:60:49:c0:15:66:59:61:66:05:06:eb:d7:
c3:da:93:29:cb:41:7c:b3:0f:65:8f:a6:2f:55:e4:2f:9d:93:
76:fc:b0:c6:c7:b2:60:01:2a:95:c5:0d:f7:3d:d5:57:aa:c4:
bd:7f:50:b2:69:8a:8d:16:82:4c:e3:8a:1c:02:99:ea:61:f9:
3f:02:6c:cc:bd:60:35:23:2e:66:01:4c:a3:b4:4d:fa:e9:42:
f2:1b:b7:fd:95:d9:dc:f1:b6:c4:28:c2:ef:86:24:81:18:91:
12:05:33:75:8d:86:66:69:13:64:48:4d:1b:9b:60:51:65:07:
d5:fa:1f:28:21:24:fe:5c:0a:f0:84:05:99:a7:5b:bc:f2:14:
98:05:ed:35:23:29:81:66:c2:11:ed:73:4e:ed:44:49:78:fb:
d0:6d:45:03:09:96:87:6c:3b:e9:d4:2a:8a:de:7e:8d:93:78:
2e:30:63:65:d5:05:c8:14:a4:c4:e2:fe:fe:89:a9:a3:28:73:
ed:c5:c0:fc:8b:21:07:31:fe:11:49:10:e5:56:a4:bf:8f:15:
e4:87:d2:a7:bd:96:a6:3b:8c:d4:de:3a:95:96:ee:e6:16:2e:
eb:e9:e8:5e:a4:2a:f1:01:d6:c3:75:6d:ac:67:ab:00:3a:e8:
f3:29:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 12:08:08 2024 by rpki-client on console-fra.rpki-client.org