Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20323037333236.roa
File: 3139332e3130392e3139372e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier: cqHTO3ZisRPZHNGKIvv+1rI5Hzq8LNzGN4UFVOJf3vQ=
Subject key identifier: F1:D4:64:54:48:DC:A3:19:C5:77:D2:81:BE:AB:E5:7B:2C:DD:80:3C
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 7711488F2C776D51162BB24ADC1ACD52DD70EC4A
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20323037333236.roa
Signing time: Tue 09 Jan 2024 16:02:04 +0000
ROA not before: Tue 09 Jan 2024 15:57:04 +0000
ROA not after: Tue 07 Jan 2025 16:02:04 +0000
asID: 207326
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 07:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:11:48:8f:2c:77:6d:51:16:2b:b2:4a:dc:1a:cd:52:dd:70:ec:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jan 9 15:57:04 2024 GMT
Not After : Jan 7 16:02:04 2025 GMT
Subject: CN=F1D4645448DCA319C577D281BEABE57B2CDD803C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:e6:5b:58:29:44:a3:61:a7:c0:bb:76:09:
16:68:71:70:24:34:a9:ab:d1:32:15:e0:a7:e9:f1:
0f:95:ff:c9:b5:d2:e2:67:97:d3:a2:2a:33:6a:0f:
91:68:4c:db:6d:71:8d:9a:01:8e:95:22:51:12:16:
bf:cc:15:bd:42:c6:b6:93:e4:5a:96:9a:67:fe:65:
33:be:37:10:2b:54:fd:d6:5f:91:62:6d:b8:65:d4:
1b:ac:ce:c1:66:e3:ba:21:75:5a:ae:8e:78:42:1a:
1c:3c:56:fe:43:6e:f7:de:4c:77:df:f2:71:d0:25:
cd:a9:42:5f:14:15:df:53:e1:32:7a:b9:4a:39:03:
25:e2:74:2b:2d:22:50:b7:f8:14:83:d8:af:64:62:
9e:01:99:02:b1:7c:3f:fa:75:05:07:f0:f9:6f:bf:
5d:ba:e4:f7:2c:85:bc:d3:06:2c:68:07:72:1e:ff:
e9:99:08:d9:25:60:26:b9:ce:df:db:3e:fd:b3:95:
00:20:1d:0c:4b:af:c6:cd:cd:e9:e9:38:e0:8b:d3:
17:55:6f:fd:1a:db:d8:d5:26:a1:74:00:42:90:17:
34:44:2b:af:4f:c9:c6:89:f9:b3:8f:45:ad:52:41:
1f:60:17:3c:5b:52:71:25:81:61:6f:89:a8:5b:67:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:64:54:48:DC:A3:19:C5:77:D2:81:BE:AB:E5:7B:2C:DD:80:3C
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20323037333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:39:4a:f1:10:95:b7:fd:05:b0:4c:0d:60:63:b3:39:60:cf:
02:09:f2:d5:86:6b:e6:07:ec:a9:a0:30:b5:c9:f1:6a:51:97:
85:4e:43:e5:7b:36:9a:60:e1:ce:1c:55:cf:77:0c:b6:f3:b9:
eb:1f:e7:d5:2c:90:6a:78:ff:96:b7:20:5b:d3:f0:6e:fa:ae:
5c:3b:7c:2b:df:5d:ad:a2:67:42:37:7a:5b:ce:91:08:24:9f:
67:e3:91:04:71:58:41:79:15:e8:a3:e6:6a:5d:dc:2e:3d:28:
1e:04:19:b1:92:37:ac:f0:82:28:e0:00:8a:ee:1b:b1:ee:04:
b4:32:94:07:6a:16:c5:da:8a:f3:18:63:11:79:07:ed:d4:89:
0e:99:3b:a3:a3:64:7e:62:ad:9a:e1:a8:53:19:46:8e:6d:34:
93:ca:52:4d:04:e1:e4:87:f7:12:b3:1f:b3:12:93:f4:60:55:
cb:8d:eb:0a:34:e2:1c:fe:24:84:4c:99:a2:32:c5:a9:a8:31:
dc:cc:ab:53:35:3f:b5:fc:f3:1d:58:62:b7:c3:53:df:3a:9a:
7d:35:54:c8:19:7c:b2:4e:9d:66:c4:b1:bb:fe:2a:ac:49:88:
b7:98:79:70:f9:3b:bf:5b:1c:a1:5e:f9:2c:ba:05:84:c2:d7:
50:dd:70:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org