Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e2039373132.roa
File: 3139342e3135302e3230342e302f32342d3234203d3e2039373132.roa (raw, json)
Hash identifier: 26BMuhsGGmTGXMG1xXDl+2Cna2JvEgspGIPIN8EhRKA=
Subject key identifier: F4:70:CC:1B:AE:6C:B2:DE:B4:EE:3C:B3:98:61:F5:7C:6E:AE:7B:26
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 48CF5AE63FE0030D6FB0B84898EA98ECDFCAF6FF
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e2039373132.roa
Signing time: Thu 18 Apr 2024 04:06:50 +0000
ROA not before: Thu 18 Apr 2024 04:01:50 +0000
ROA not after: Thu 17 Apr 2025 04:06:50 +0000
asID: 9712
IP address blocks: 194.150.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cf:5a:e6:3f:e0:03:0d:6f:b0:b8:48:98:ea:98:ec:df:ca:f6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Apr 18 04:01:50 2024 GMT
Not After : Apr 17 04:06:50 2025 GMT
Subject: CN=F470CC1BAE6CB2DEB4EE3CB39861F57C6EAE7B26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:25:04:4b:90:25:1b:f9:0b:96:9d:c4:bc:
4e:04:34:71:35:aa:22:31:39:88:1b:cf:25:89:e4:
dd:e9:e2:ca:f7:a3:97:a3:a7:6e:b0:a8:40:91:57:
3f:4d:32:d9:5b:ef:78:7a:b2:26:bf:b4:c8:9f:9c:
4d:45:96:c5:61:a2:55:8a:57:b8:5a:66:2f:5d:ad:
ca:55:45:76:be:05:48:4e:a9:73:59:9a:c4:e0:65:
e1:ee:4b:b0:0e:57:81:50:1b:5d:d8:ac:f1:f0:32:
37:b1:36:bf:99:dc:4f:af:00:fe:ce:d3:41:e2:98:
e4:71:23:e7:2b:ad:db:10:6a:a5:d3:e3:db:ca:22:
2c:c1:0a:0a:88:62:e7:47:e5:f4:47:49:7f:bb:87:
65:7b:c6:98:c2:6b:d9:b4:ba:74:8d:b3:a4:d7:98:
f6:b4:31:d8:1d:80:b8:6f:83:50:93:f0:19:eb:73:
51:c1:5b:ca:d7:2d:4e:88:be:3b:2c:cb:60:c6:cd:
32:d1:ee:a3:f4:73:4f:db:3e:53:73:1f:5e:c8:85:
57:5d:b9:3e:63:04:fd:ca:2b:0d:da:e8:ec:89:5b:
73:7c:28:9b:0a:5b:08:c3:8e:8e:16:bb:a1:4f:4b:
8e:08:2c:23:64:c5:b5:35:41:ae:66:1a:ad:5c:ce:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:CC:1B:AE:6C:B2:DE:B4:EE:3C:B3:98:61:F5:7C:6E:AE:7B:26
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230342e302f32342d3234203d3e2039373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.204.0/24
Signature Algorithm: sha256WithRSAEncryption
60:70:1d:f4:44:2b:d6:d2:df:ff:1b:0e:3d:6d:e0:33:91:d3:
70:e6:c4:55:37:1d:31:f7:93:4c:a3:54:25:95:59:d7:2e:7f:
e0:81:21:98:c6:9d:cb:56:42:44:f2:9c:3d:11:3c:a2:dd:84:
26:64:04:08:99:e6:7b:7f:a4:da:3e:97:14:f9:87:27:b2:10:
12:54:9b:a6:0f:50:36:21:df:d4:bc:7c:e9:eb:7b:d9:cf:c0:
98:ef:eb:af:70:94:2d:f6:bb:37:4b:27:25:7a:39:a9:c2:29:
a2:0c:b9:1f:3d:df:1c:46:c8:8a:a3:ec:1e:06:9e:23:27:45:
74:d8:5b:ec:2d:95:2a:92:e1:17:e1:ad:25:e8:00:81:68:e8:
f0:cb:87:37:0a:f0:cf:54:96:d8:61:d5:69:24:49:1f:f2:02:
bd:b2:4a:6f:48:60:fd:8b:1b:42:07:e5:9e:28:87:ad:67:f0:
1a:f2:af:d6:45:9a:ef:5c:7c:a9:29:5b:ea:72:9c:2f:f2:89:
60:63:b1:15:9f:83:b1:94:17:dc:2d:77:21:3d:39:b2:e4:9c:
4f:84:5b:61:0e:c1:bc:1a:50:b5:35:1b:75:99:f2:29:30:97:
b7:57:92:62:57:d1:e4:2c:16:03:d0:60:4c:39:3e:91:35:d4:
36:eb:1f:54
-----BEGIN CERTIFICATE-----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Generated at Tue Jun 18 01:14:11 2024 by rpki-client on console-fra.rpki-client.org