Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20313938383833.roa
File: 3139342e3135302e3231312e302f32342d3234203d3e20313938383833.roa (raw, json)
Hash identifier: LpqoYcfxr0+GlloKlmRBcDIsQcxkymdpvt5c53UjYaQ=
Subject key identifier: F0:25:6F:2E:A9:27:85:4E:69:1B:DD:54:B1:55:38:77:A5:36:99:A4
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 621885212249EBB4DFF045BD7C39D5E66848787A
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20313938383833.roa
Signing time: Mon 23 Oct 2023 09:41:38 +0000
ROA not before: Mon 23 Oct 2023 09:36:38 +0000
ROA not after: Mon 21 Oct 2024 09:41:38 +0000
asID: 198883
IP address blocks: 194.150.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:18:85:21:22:49:eb:b4:df:f0:45:bd:7c:39:d5:e6:68:48:78:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:38 2023 GMT
Not After : Oct 21 09:41:38 2024 GMT
Subject: CN=F0256F2EA927854E691BDD54B1553877A53699A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:3a:78:e1:d1:d1:5a:f6:b3:2c:e2:1e:fb:
10:39:e4:d4:f7:e0:e9:9b:4f:57:c9:bc:cb:90:8a:
e6:07:6d:a4:32:20:6d:a3:b3:e9:8a:da:26:3b:4b:
c1:e0:c7:35:a6:90:96:fb:9c:76:fd:82:31:93:44:
9d:61:2a:98:4d:15:73:4c:81:f3:94:7d:df:94:37:
0d:8d:3c:9d:b9:99:47:a6:c7:06:5b:cd:51:6e:22:
c1:d9:91:a5:78:f3:60:bc:de:38:2d:dc:95:09:1b:
cd:28:c0:16:23:72:ce:2b:da:b7:ea:78:ce:99:95:
10:db:35:04:68:5b:6b:66:f7:c6:2b:a1:f5:0b:9d:
78:26:e8:f5:12:7f:3b:a6:d4:b9:4c:d9:23:55:4d:
74:79:4c:bc:c2:d9:cc:d1:44:2c:36:ad:1b:e6:a3:
7e:fc:73:af:ed:b9:ad:05:a3:21:19:ce:c2:ea:dd:
6e:35:ff:d1:ec:16:95:c4:a1:5f:ed:84:e1:10:c0:
84:8f:10:ff:16:c6:92:a9:e6:73:26:1d:36:ae:ae:
48:f8:3b:b6:53:c7:32:9d:7e:b4:02:97:bc:d0:a9:
7a:a2:24:4c:fb:93:92:42:40:38:9f:69:2f:62:95:
6d:32:08:43:94:39:64:a8:c8:ed:69:ee:05:ba:9c:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:6F:2E:A9:27:85:4E:69:1B:DD:54:B1:55:38:77:A5:36:99:A4
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20313938383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9b:b3:9e:da:05:da:9d:71:cd:ef:f4:18:de:0d:10:cc:a2:
a0:66:97:d9:91:5e:47:18:5b:e1:bb:f8:47:1c:2f:6d:bb:bf:
1e:dc:96:42:a8:83:0b:c1:1e:bc:87:81:5a:28:b6:42:76:77:
40:d9:98:d0:cb:45:7f:76:ad:4b:09:b1:70:c2:0a:9e:e4:85:
e0:c4:fc:78:4f:9d:e6:c8:13:74:c4:bd:e6:33:0a:b3:9c:5f:
d7:5f:ad:13:9d:8d:ca:50:a7:52:f3:16:49:21:3d:cb:fb:41:
f7:80:f9:3f:a4:a8:79:41:e3:c0:da:f7:6d:49:54:61:23:58:
54:a4:b9:bd:26:cf:fe:03:58:1d:0e:de:73:72:51:25:15:19:
fd:08:3e:39:3e:c0:e1:53:49:a4:3a:d9:b5:fd:62:2b:7a:1a:
82:b7:6d:80:71:72:5f:a8:87:74:ed:6a:e8:ab:64:68:0c:4b:
84:2d:fa:bf:07:82:39:4c:2d:4b:8c:60:55:f9:26:dc:9e:e6:
bd:c1:6f:48:b8:8d:6d:fc:0d:1b:15:4f:b1:a5:f9:cd:82:9d:
2f:ef:ad:54:3f:7f:24:4d:8a:9f:d1:c3:ff:41:e1:90:31:01:
d2:12:10:81:4d:da:f4:c7:14:88:96:3f:a6:1f:a8:f9:37:e2:
70:31:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org