Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20383334.roa
File: 3139342e3135302e3231312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: F7g7UF8swvKh7ppQul3YnJhMMYcQmHcSAb3dzY/oulE=
Subject key identifier: CF:6A:62:12:1D:B2:B4:5F:5E:56:1D:2A:8F:52:B8:48:7B:03:51:85
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 02066F5D4C89435475AC61D744B68BF1643AED60
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20383334.roa
Signing time: Fri 26 Jan 2024 00:00:08 +0000
ROA not before: Thu 25 Jan 2024 23:55:08 +0000
ROA not after: Fri 24 Jan 2025 00:00:08 +0000
asID: 834
IP address blocks: 194.150.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 15:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:06:6f:5d:4c:89:43:54:75:ac:61:d7:44:b6:8b:f1:64:3a:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jan 25 23:55:08 2024 GMT
Not After : Jan 24 00:00:08 2025 GMT
Subject: CN=CF6A62121DB2B45F5E561D2A8F52B8487B035185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:72:86:98:58:ca:ff:c4:e8:35:1f:cc:5a:
b0:cf:4d:89:e3:09:a9:a6:9f:f1:9f:c2:69:e8:16:
a9:67:1e:04:38:92:40:75:b7:0f:c2:52:fb:f6:f3:
ab:87:e4:7d:fa:cd:4c:10:e9:ab:dc:b9:7f:a6:81:
d9:a3:f6:cf:e4:0e:ed:0b:21:c9:f4:cc:76:07:c5:
f8:75:1e:3e:9e:ff:6c:78:d4:14:64:b2:6f:45:8e:
50:2c:77:85:b1:ce:ca:40:88:94:e7:a5:67:af:d4:
5a:a2:7d:8f:b8:a2:2e:11:56:a0:5c:31:e4:7b:f4:
7f:2c:38:1b:59:c3:31:bd:5c:22:ce:62:3d:a7:2d:
59:09:79:45:97:3c:e9:6f:8b:32:68:f7:5b:29:2a:
ba:3b:de:a6:61:d7:0a:d7:be:fb:8b:06:f4:e3:47:
a9:b0:47:03:3a:87:b6:8a:8c:f0:f5:2e:8e:ab:62:
bc:dd:92:c2:78:6a:0b:f7:4a:3c:59:b5:eb:c1:40:
20:b1:6b:25:9c:2e:af:00:9f:56:81:4d:72:2b:b5:
78:a9:2e:26:ce:41:c9:5c:37:46:cf:fd:cf:b4:c7:
17:a5:89:06:53:52:b0:75:7f:50:ba:89:5a:cc:8c:
5f:ca:16:bc:eb:f7:80:4c:bc:c2:17:65:46:ba:23:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6A:62:12:1D:B2:B4:5F:5E:56:1D:2A:8F:52:B8:48:7B:03:51:85
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.211.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b3:b6:e3:42:3c:73:09:7e:01:02:34:a3:72:d5:7a:5c:5a:
26:ce:84:b1:a3:7b:7a:bd:52:ba:e3:4c:0f:1c:fd:d6:d0:db:
df:70:17:5c:7f:bd:8c:7e:a3:a9:bb:f9:1b:f7:f9:37:61:5a:
76:88:f9:15:1d:b0:6a:03:c2:f6:df:03:ed:51:fd:5d:47:91:
21:6b:33:d7:e8:0e:0e:44:dc:6a:75:72:71:8d:b3:f5:f4:b8:
39:a0:3a:6c:ed:6a:f4:ca:af:f1:6e:96:00:b3:5c:17:61:48:
48:0f:42:89:2b:df:17:1e:8d:25:c7:41:25:44:77:82:da:1a:
66:f0:98:09:47:1c:c9:7a:c6:68:db:07:5d:d9:2e:5a:62:aa:
c3:fe:9f:69:2c:b9:23:22:72:0d:2b:39:b7:34:ac:90:eb:6c:
1e:b1:52:8c:6b:cd:dc:5d:d3:15:7d:e6:1a:0e:80:29:8f:94:
49:82:78:14:41:54:66:b0:d8:76:d3:61:e4:f0:ca:ad:ec:74:
d4:2c:a6:d2:10:6d:bb:fe:78:d5:21:57:68:aa:34:af:70:1c:
2f:33:e2:5c:b6:1e:eb:88:34:db:99:aa:f6:06:c9:f2:81:ce:
6b:8e:a3:16:79:39:e0:23:da:71:3e:19:1c:81:f2:1b:59:77:
47:f1:e2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org