Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3234203d3e20383334.roa
File: 3139332e32342e3233322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: CM421QaCU+Ms2RXUyB97Mz1OvxJCC0nkybSuJoVBwNQ=
Subject key identifier: 92:1A:CE:57:3C:86:D7:E1:D3:E4:AA:83:F6:EE:D9:34:AB:83:DE:D1
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 422A21D595B861EBB8407AE736BE2C7494C3EC4A
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3234203d3e20383334.roa
Signing time: Tue 01 Oct 2024 10:45:48 +0000
ROA not before: Tue 01 Oct 2024 10:40:48 +0000
ROA not after: Tue 30 Sep 2025 10:45:48 +0000
asID: 834
IP address blocks: 193.24.232.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 11:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2a:21:d5:95:b8:61:eb:b8:40:7a:e7:36:be:2c:74:94:c3:ec:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Oct 1 10:40:48 2024 GMT
Not After : Sep 30 10:45:48 2025 GMT
Subject: CN=921ACE573C86D7E1D3E4AA83F6EED934AB83DED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:6f:58:6c:b5:4e:0d:78:55:51:7f:23:af:
f8:3c:28:b5:fb:f7:b1:92:35:80:cc:40:7d:ba:1e:
4f:2f:7f:1b:6b:f5:7d:1a:e8:ff:5c:c8:20:79:cb:
db:1e:2d:d7:e9:7b:51:55:d3:5a:92:52:66:2a:38:
2b:68:ab:2c:47:fb:47:63:d4:11:22:f7:d3:50:a0:
ce:f8:bf:2e:08:43:d0:7c:7e:c3:e8:4e:b6:b4:9e:
c2:e1:33:3e:77:d2:69:f3:ed:00:32:de:62:93:91:
fc:2a:bb:83:96:d5:45:89:b1:aa:2e:2c:6c:9b:5f:
9d:72:f7:64:36:6e:a2:d9:2c:2c:5c:04:37:58:8c:
d2:2d:cf:72:09:98:c0:81:6a:62:53:98:8e:7e:15:
32:2f:27:1f:9f:43:94:22:b6:51:a2:65:a3:2c:12:
fb:55:f7:3e:67:ad:e8:49:71:8f:58:88:77:8e:c2:
2c:13:6a:03:23:6a:54:03:ed:9a:da:84:08:2a:81:
5f:2a:10:ff:c2:0f:d3:ba:ec:88:bb:06:a1:78:24:
db:a9:25:6c:00:3e:d0:68:15:d2:e2:42:b4:92:cd:
b1:35:b8:06:c8:97:db:d6:d8:b0:56:e7:50:ad:d3:
06:c6:66:83:06:0a:fc:57:8f:39:03:9a:a0:33:42:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1A:CE:57:3C:86:D7:E1:D3:E4:AA:83:F6:EE:D9:34:AB:83:DE:D1
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.232.0/23
Signature Algorithm: sha256WithRSAEncryption
74:f7:d0:82:59:e2:81:44:79:f0:3d:0e:42:cc:87:36:1c:24:
3f:39:97:e4:17:53:28:8b:98:af:7e:17:fd:a8:99:a5:24:1f:
42:a3:f2:cf:38:6c:71:88:6a:d8:01:f6:08:e2:5b:03:d7:16:
3b:b3:07:eb:f1:e8:37:75:21:d7:e4:ad:6b:97:48:4e:bf:db:
7e:9b:67:47:45:f7:7c:5d:fd:81:c8:71:ee:05:bd:be:fc:98:
e5:2c:d4:21:e9:fc:0f:09:9f:e5:93:65:68:93:3f:9d:d5:49:
eb:4f:88:61:8b:58:d3:5b:5a:54:00:2a:bf:cb:b4:76:46:f7:
34:66:ca:3e:c1:f2:0d:8b:23:f5:95:70:17:6f:77:87:d3:7b:
ba:6c:f7:0c:0a:37:30:56:31:14:49:cd:0f:84:0c:53:cb:16:
47:46:15:e6:e6:5f:51:73:8e:da:3c:89:37:a7:54:ef:cb:50:
0f:fe:3e:b7:42:4d:4b:ab:20:d0:4e:a8:62:44:dd:9d:94:4e:
e8:2b:69:8e:c6:02:dd:9b:43:63:6e:e2:5c:ec:38:62:80:44:
f6:97:cb:6b:bf:bf:df:bd:36:b4:dc:99:7b:93:c0:cf:4b:b5:
aa:d1:60:74:1b:cb:bd:6e:4c:6c:8e:58:14:17:6f:4f:d8:fb:
b0:72:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 19:10:56 2024 by rpki-client on console-ams.rpki-client.org