Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20323135373237.roa
File: 3139342e3135302e3231312e302f32342d3234203d3e20323135373237.roa (raw, json)
Hash identifier: spIgmHaAYO+ap4hC2kWGAxdU1fhhQdq7z4hB0Qhz+fE=
Subject key identifier: B1:79:1F:B8:7B:29:8B:66:09:C8:48:0D:FB:42:18:E9:3E:4F:16:BB
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 4680546704AED9370F7AF2E36797798F8108C8EB
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20323135373237.roa
Signing time: Sun 14 Jan 2024 16:44:52 +0000
ROA not before: Sun 14 Jan 2024 16:39:52 +0000
ROA not after: Sun 12 Jan 2025 16:44:52 +0000
asID: 215727
IP address blocks: 194.150.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:80:54:67:04:ae:d9:37:0f:7a:f2:e3:67:97:79:8f:81:08:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jan 14 16:39:52 2024 GMT
Not After : Jan 12 16:44:52 2025 GMT
Subject: CN=B1791FB87B298B6609C8480DFB4218E93E4F16BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:6e:22:ec:d9:80:18:74:53:36:1b:38:bd:
ee:90:89:75:3d:bf:0e:1a:e6:e0:8a:5a:3c:a8:53:
e1:c3:b0:ca:32:f1:cf:f3:0d:0a:2c:07:1b:89:5f:
5f:80:c1:09:7c:9e:e6:0b:d2:33:df:f6:d4:cb:b7:
5b:ea:57:78:18:41:40:e2:18:fe:f8:0f:6a:6d:b1:
7b:a6:db:ef:0d:0f:59:86:4c:bc:5c:cf:13:da:6c:
ee:84:03:6b:52:7e:ac:b2:c8:0f:16:f3:7f:c0:7a:
61:6d:de:0c:de:27:98:af:13:cb:b2:4c:d5:f9:9f:
1e:29:01:67:83:be:36:62:de:3f:97:c8:b3:ed:e6:
f4:f9:a7:02:17:01:d8:a7:a5:8f:d4:57:71:c8:17:
2f:60:77:25:88:fe:75:76:59:46:2d:93:d3:28:83:
5f:10:b7:d8:a9:6a:f1:4e:76:c0:30:e0:76:dc:05:
5d:39:e4:bc:d0:b5:59:4c:f9:60:af:60:5e:0d:a4:
3f:0e:e8:1b:65:bc:83:7c:ab:f5:da:62:75:94:d2:
07:c2:a1:94:cc:78:26:54:9c:fe:d0:f9:b6:76:26:
d9:37:ab:53:7b:9c:ea:f2:20:b1:de:a7:f4:30:b4:
bb:d4:d7:ea:d0:68:7b:48:f1:f2:a7:52:b3:32:38:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:79:1F:B8:7B:29:8B:66:09:C8:48:0D:FB:42:18:E9:3E:4F:16:BB
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20323135373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.211.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:3e:93:8d:1b:b5:3c:09:d6:4a:cf:da:7a:3e:58:de:b5:5d:
99:98:d4:b3:5d:59:1c:32:e0:6f:83:83:c4:66:2e:8f:9b:42:
23:df:53:78:fe:ca:94:96:69:34:60:6b:28:a1:56:ae:0d:dd:
fc:cd:e7:f7:6b:4a:db:09:36:c8:db:e7:d8:d1:6d:2e:bb:44:
7c:ca:26:bc:02:e2:59:30:60:f3:98:6f:74:9f:08:33:de:38:
7b:e8:19:b6:a9:03:5e:b5:f2:3c:40:1e:86:9e:b0:5b:44:c4:
f7:a4:de:4c:60:23:9d:c5:c6:f5:92:86:bb:15:b9:32:b5:44:
74:b6:73:94:b7:77:a1:4f:32:4b:fc:8b:3d:e6:e1:9c:be:a2:
e3:c1:b7:e6:38:5a:25:b5:53:c4:f1:e7:3c:26:ab:9c:78:1f:
28:b0:fe:b3:1a:f5:3d:d3:16:e1:fd:d9:d9:b9:00:0a:11:21:
24:c7:73:a1:36:ec:22:c5:4a:01:69:a7:02:68:03:89:b5:cc:
30:bd:e3:fd:d6:26:da:e5:b2:98:0c:76:eb:4c:fd:ad:27:fa:
a9:7e:67:8c:38:1f:b8:cb:3f:22:15:b6:cb:10:a3:a2:3b:8d:
3c:f8:06:7d:54:e1:a8:5b:a2:33:d5:15:91:82:c7:3d:d4:3d:
fa:1b:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org