Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20323135333131.roa
File: 3139332e3130392e3139372e302f32342d3234203d3e20323135333131.roa (raw, json)
Hash identifier: xh/HFqMIVcdVrPCMDYdizQrZD18cLfCVlAbxpGI4Jj0=
Subject key identifier: C1:C1:21:BF:C8:9A:65:C0:07:5D:35:8B:C5:F9:1A:C1:34:8F:5D:03
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 765AC376446ABF117B39CA7654BB4E48F6C17AA6
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20323135333131.roa
Signing time: Sun 17 Mar 2024 15:02:08 +0000
ROA not before: Sun 17 Mar 2024 14:57:08 +0000
ROA not after: Sun 16 Mar 2025 15:02:08 +0000
asID: 215311
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jun 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:5a:c3:76:44:6a:bf:11:7b:39:ca:76:54:bb:4e:48:f6:c1:7a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Mar 17 14:57:08 2024 GMT
Not After : Mar 16 15:02:08 2025 GMT
Subject: CN=C1C121BFC89A65C0075D358BC5F91AC1348F5D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:6a:dc:8c:83:16:62:44:6d:29:7f:d4:79:
d3:d0:5e:86:b1:2f:5d:04:d4:01:69:27:e7:18:ac:
00:44:cb:78:17:83:ea:52:e1:83:2f:3a:33:23:5c:
29:3a:3b:c8:2b:c6:88:d7:76:67:6d:a3:e4:bb:14:
de:96:05:be:df:c0:c3:1d:17:d5:c0:3d:3d:78:f0:
73:12:f5:3b:56:2b:14:6f:7a:c2:6a:45:90:d5:84:
22:20:1e:e6:cc:fd:a4:66:28:6f:88:ba:fa:73:1c:
82:d8:6c:5e:4d:6f:e7:c2:0f:b5:3c:ed:71:05:be:
c2:2c:49:ad:3a:f2:85:a1:20:ea:8e:53:28:49:91:
fc:68:66:5b:3b:56:0c:a4:60:2b:ed:b2:e0:84:b6:
80:d4:31:0c:dc:79:a5:1b:5b:c6:3e:65:15:bd:59:
59:54:5e:90:79:26:70:74:b3:a1:35:68:89:fd:ee:
26:bf:e7:bb:cf:62:93:26:f5:ad:88:dd:ce:ab:91:
cc:d3:70:99:d1:3c:41:69:13:9c:56:56:16:b2:50:
8a:4e:7f:0b:83:c4:73:17:34:97:45:ec:63:2d:dd:
9f:a2:ed:bf:4f:dc:86:4e:f4:db:5b:96:73:77:de:
06:8e:db:3e:ee:c9:ef:3f:80:a7:e0:1d:c6:9a:2e:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C1:21:BF:C8:9A:65:C0:07:5D:35:8B:C5:F9:1A:C1:34:8F:5D:03
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20323135333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:09:32:e3:5d:df:dd:c3:74:2f:66:36:27:8c:5e:5e:03:fb:
bd:69:93:1d:50:23:fe:d5:3c:14:8c:31:45:c4:8b:42:a0:b9:
4c:83:95:f4:de:44:e4:cc:64:b4:6e:06:30:45:cd:d3:f7:ed:
a8:a4:5f:97:cd:66:a4:71:c6:28:a8:7a:8f:af:08:e7:2d:b4:
64:06:f9:a7:69:6e:c1:95:db:ab:78:23:41:a2:fa:fb:08:4f:
83:65:36:dd:b7:1c:4a:4c:e9:e9:f7:06:e4:3c:48:0e:0c:bd:
67:22:c1:f5:24:0f:d2:3d:59:2b:69:60:04:4f:1e:10:9b:62:
ad:46:95:fb:26:1a:2b:65:6d:a6:62:3f:8f:9f:8e:c4:b0:a7:
03:6d:98:2d:13:ea:af:8d:b9:d6:ff:28:7a:23:eb:2a:f1:7d:
9d:1b:99:02:68:6f:6d:ba:2f:40:9b:f5:f9:c6:d3:61:de:95:
b0:68:df:de:19:3e:82:ae:44:6f:81:af:71:84:2b:e7:55:17:
9d:1b:f0:83:5c:db:8e:f0:ee:a5:45:5d:30:08:23:ff:ee:c7:
51:dd:61:28:5e:06:1a:99:26:d1:b0:87:ec:42:15:cb:91:f5:
c6:6a:1f:7d:ad:fe:0c:d0:41:a5:70:8a:9e:f3:4b:27:c1:64:
58:e3:59:20
-----BEGIN CERTIFICATE-----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Generated at Mon Jun 17 02:58:38 2024 by rpki-client on console-ams.rpki-client.org