Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20383334.roa
File: 3139332e3130392e3139372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VGCI84HOf1YtQkJ4oKCg+RVXHX/YuU1iMO1l/Obv37M=
Subject key identifier: 72:00:06:83:5E:C6:9B:BA:D6:C4:50:79:8C:68:1D:70:87:3B:75:C6
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 4CB74E75E6936B37F36E85C697213AEE0A974D6D
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20383334.roa
Signing time: Mon 17 Jun 2024 00:00:42 +0000
ROA not before: Sun 16 Jun 2024 23:55:42 +0000
ROA not after: Mon 16 Jun 2025 00:00:42 +0000
asID: 834
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 06:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b7:4e:75:e6:93:6b:37:f3:6e:85:c6:97:21:3a:ee:0a:97:4d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jun 16 23:55:42 2024 GMT
Not After : Jun 16 00:00:42 2025 GMT
Subject: CN=720006835EC69BBAD6C450798C681D70873B75C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:bf:b9:75:46:a9:cb:a4:53:c8:66:71:d9:
c7:8f:61:32:a4:ed:0b:c7:5c:bf:00:59:0c:4d:b8:
b3:6c:6a:e9:38:07:20:0d:89:e2:56:b6:88:52:80:
e7:d2:2b:f3:a9:ce:bd:de:75:42:62:11:3f:84:1e:
3b:7d:45:f4:47:56:6a:54:c8:11:b2:85:b8:68:f8:
d8:83:cc:a7:83:2c:75:8d:07:e9:ad:18:bd:38:e4:
c6:9b:24:9e:d0:de:b8:b7:b0:86:78:e9:91:2a:1b:
79:48:13:6a:7d:47:58:20:07:1c:84:94:55:70:fa:
85:9a:21:4c:86:ed:d5:ad:a5:83:87:e1:75:df:fd:
3e:13:58:db:7a:8d:fc:2d:1e:43:31:89:3d:93:5d:
3c:1f:a6:64:ad:3c:bb:23:fc:a4:42:72:d0:a0:3f:
1d:36:1f:c4:1a:c0:2c:46:a3:65:d8:c2:bc:de:95:
bc:58:21:63:46:70:19:2c:d6:c5:dd:3f:22:89:c9:
87:12:20:1d:d9:27:d1:45:fa:bc:fc:ee:f2:0c:10:
de:97:be:ed:c0:5f:e1:1d:49:3e:1b:28:f1:5d:e5:
2d:09:30:3e:2f:12:10:b8:39:e9:c2:37:57:f5:a3:
a2:f0:6a:99:10:17:71:99:08:51:33:38:b5:6e:df:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:00:06:83:5E:C6:9B:BA:D6:C4:50:79:8C:68:1D:70:87:3B:75:C6
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
78:00:4c:df:82:3e:82:c6:80:da:84:72:15:89:75:2a:9c:91:
94:21:c9:86:79:63:22:ab:c9:82:c4:10:24:c5:42:e8:10:fb:
d6:ed:0a:c8:78:2e:c5:34:c8:7e:42:10:db:f4:12:08:15:79:
87:34:36:15:5c:05:24:d4:79:54:5a:90:bd:51:e0:60:9d:a0:
d0:36:de:83:33:ad:82:7f:20:81:84:23:19:f0:5c:01:9f:ec:
e7:c2:0f:b8:b0:70:30:ea:f4:a4:48:f9:07:19:67:64:49:0e:
01:89:aa:68:66:3d:dd:f2:ee:77:4b:db:92:6b:e0:31:ab:b9:
b5:6c:fd:1d:36:fe:4e:87:5c:fd:95:67:58:e2:fe:3e:02:4c:
24:32:61:2b:7c:8e:7d:66:8c:88:2e:7e:c9:32:a9:ec:8b:85:
65:b7:a5:43:a4:29:63:54:1f:8b:b4:ee:1f:8f:d3:40:b5:eb:
f1:1e:56:50:9c:ba:01:08:e0:ee:4e:b5:16:74:d3:52:78:4a:
9e:40:02:08:1c:12:4e:ed:8f:e2:53:02:8a:c2:59:88:78:2a:
01:f9:c1:52:f0:19:04:82:f5:bc:32:1a:31:33:42:f8:b4:d8:
ad:21:bd:66:c9:cf:63:29:fa:69:01:b8:6c:af:02:ec:2f:43:
d1:73:2c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:21:01 2024 by rpki-client on console-ams.rpki-client.org