Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3234332e302f32342d3234203d3e20383334.roa
File: 3139342e35302e3234332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5vyPZ1aqAeZeJF/McE8szgjPMX6nB/jc2B+VIKlz6us=
Subject key identifier: 60:AC:60:92:B4:06:BB:0D:35:6C:5B:AE:75:31:CB:9E:08:68:2C:9C
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 75E714B215FE469C3841E0F8A53BAF1BB29CA094
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3234332e302f32342d3234203d3e20383334.roa
Signing time: Wed 11 Oct 2023 00:00:07 +0000
ROA not before: Tue 10 Oct 2023 23:55:07 +0000
ROA not after: Wed 09 Oct 2024 00:00:07 +0000
asID: 834
IP address blocks: 194.50.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Nov 2023 20:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e7:14:b2:15:fe:46:9c:38:41:e0:f8:a5:3b:af:1b:b2:9c:a0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 10 23:55:07 2023 GMT
Not After : Oct 9 00:00:07 2024 GMT
Subject: CN=60AC6092B406BB0D356C5BAE7531CB9E08682C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:e8:a3:d3:a5:e2:28:65:49:b7:b5:da:13:
40:f9:02:69:0d:0c:45:0b:3a:f7:d8:ae:9b:30:15:
7d:21:5b:2f:cc:e0:29:53:8f:22:a5:f7:8d:98:23:
71:fd:c2:af:19:ee:e9:58:59:7c:3e:ee:50:4f:27:
45:62:f4:7a:df:df:16:19:85:bc:5a:ec:59:6c:a9:
d0:dd:68:0e:c8:c0:18:ca:75:12:ab:86:20:f1:a0:
15:19:15:d0:ca:b3:7b:13:84:0a:b8:66:ff:a7:cb:
d2:8c:c3:24:ca:58:b7:6a:63:af:94:b1:26:8a:96:
04:55:33:4a:06:73:e9:37:cd:b6:a2:74:18:55:07:
c0:50:af:63:94:bb:41:2e:30:05:ce:43:c6:91:9e:
29:16:21:8f:3d:4d:25:4e:1f:15:1c:90:9f:1e:b7:
38:76:7e:3a:c9:d1:f3:ba:a9:9c:94:99:b9:56:1b:
7b:26:66:a0:a4:67:47:6d:63:a0:2f:0c:18:8f:ad:
ea:02:35:7d:d0:02:66:4c:45:5c:d2:cd:23:3a:2c:
b9:b1:4d:32:bd:b5:5f:c1:4b:b1:e9:94:e7:a9:80:
0d:a7:9a:47:91:25:51:32:d6:22:1f:13:17:f6:c6:
45:78:57:27:b3:0a:0c:d3:22:ed:21:60:17:25:2d:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AC:60:92:B4:06:BB:0D:35:6C:5B:AE:75:31:CB:9E:08:68:2C:9C
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3234332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.243.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9d:c1:f3:75:ad:70:8d:cd:ff:1c:17:f3:54:cf:a1:fa:0e:
c4:90:26:f7:a3:0e:6e:62:a4:4a:00:be:76:a5:20:1b:a8:fc:
a6:d2:5a:84:26:b7:2f:46:5c:02:4a:90:23:1a:c0:5f:f0:c7:
24:28:9e:ce:3d:27:f5:e7:ff:6e:f9:c2:4e:e1:ae:a0:f0:32:
5b:af:a6:e7:d4:6d:8b:0d:cf:c9:5e:b5:b2:7b:b5:01:cf:86:
13:a3:28:bc:2e:53:d5:13:13:19:9c:7f:8d:0d:7f:3d:94:74:
17:08:1b:dc:00:f2:ea:05:38:de:d9:7d:c5:9d:c5:4d:4d:16:
3f:b0:14:14:2c:02:06:c5:b4:90:a0:05:a7:7d:64:d7:47:c5:
03:d5:fd:92:a1:cc:0c:03:c7:53:00:9e:88:a6:ac:1a:03:be:
9e:3d:0a:9e:03:de:81:a2:9c:4c:70:ac:7b:5d:55:f6:64:3c:
e5:80:d0:19:b5:1d:7c:4a:e4:a2:8c:12:5a:7a:15:01:db:72:
da:f9:50:9a:a9:e5:fc:de:42:8e:2c:16:cc:db:c0:87:8c:03:
3e:0c:ad:c0:71:b0:1a:9f:47:60:0d:34:68:3c:fc:24:c8:f2:
bf:51:55:85:2e:7f:03:27:ab:e2:e7:d3:90:c6:5e:a1:18:cb:
aa:cc:53:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org