Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32332d3233203d3e20323132323338.roa
File: 3139332e32342e3233342e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: q/UGMwPiC3z6sMFxQeTzDv1wZQaRmzCf0DJ+sKxgj1k=
Subject key identifier: 76:C0:45:65:B6:E9:CB:60:9E:39:62:40:88:97:90:8B:64:22:4A:1A
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 4FB6431B24A400489D0CCD76BE6CDFF6D176B062
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32332d3233203d3e20323132323338.roa
Signing time: Fri 26 Jul 2024 02:57:18 +0000
ROA not before: Fri 26 Jul 2024 02:52:18 +0000
ROA not after: Fri 25 Jul 2025 02:57:18 +0000
asID: 212238
IP address blocks: 193.24.234.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 25 Aug 2024 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b6:43:1b:24:a4:00:48:9d:0c:cd:76:be:6c:df:f6:d1:76:b0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jul 26 02:52:18 2024 GMT
Not After : Jul 25 02:57:18 2025 GMT
Subject: CN=76C04565B6E9CB609E3962408897908B64224A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:8b:92:88:dc:12:2b:1d:f6:89:40:e5:16:
3d:7a:8e:77:89:96:c0:43:c3:f7:92:2c:00:36:e8:
cf:9a:58:27:e5:a5:da:12:ca:cf:9f:74:e5:ef:97:
5c:09:84:2b:74:b6:27:40:ed:91:8b:e4:e7:1a:fe:
19:a5:b3:d1:29:5e:17:30:9a:4c:87:d3:e0:52:ca:
8c:62:60:a9:52:ec:7b:ba:67:8f:27:21:5c:26:91:
11:d8:1f:97:40:58:19:ed:e7:ce:8f:9a:f8:ac:38:
a5:87:9f:5e:d3:29:f6:26:40:c9:14:45:b3:4f:18:
cd:8c:a4:ed:92:88:26:71:70:41:07:53:ae:1e:73:
91:82:a4:23:81:c4:4e:dc:05:ed:c8:b5:99:2c:44:
e2:62:26:17:35:f0:b4:ba:da:ea:d1:c6:07:c5:d2:
fc:cc:63:c9:ab:6e:ca:9e:3b:85:43:9e:f4:5b:37:
1b:94:b2:63:51:65:af:e5:a0:34:cd:7c:ed:60:3c:
75:b8:07:35:7e:a7:d2:3c:13:a3:b6:97:3f:80:13:
6e:88:af:42:f7:51:d8:4a:7c:c7:5f:fd:c0:58:c3:
0d:07:13:f9:40:fd:11:5b:2b:89:bf:af:af:0c:19:
3a:45:30:a7:78:80:93:de:bb:c9:f2:b1:aa:d4:3f:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:45:65:B6:E9:CB:60:9E:39:62:40:88:97:90:8B:64:22:4A:1A
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.234.0/23
Signature Algorithm: sha256WithRSAEncryption
51:3b:9e:a0:b2:0f:b8:fe:ae:8e:81:4c:cd:e3:d0:29:9a:d8:
a5:c1:02:f9:63:50:96:d0:89:5e:82:5e:34:fa:8e:3f:73:4e:
4c:be:28:ba:53:41:de:c5:c7:c3:5c:2e:68:ff:c8:71:e2:58:
85:25:f5:61:57:7c:9d:04:25:3d:5e:35:1f:0e:35:5e:af:12:
af:46:f0:cb:cd:07:23:b2:6d:fa:eb:61:3a:91:06:29:1a:fd:
b5:25:27:34:34:f8:43:d5:16:4e:72:89:ec:74:7e:c3:09:0b:
88:c4:e7:41:da:ac:57:22:36:98:59:c3:c7:fd:88:69:b3:72:
e5:00:d0:c4:8e:e3:62:32:b2:a5:81:11:5f:ac:52:39:1c:e0:
be:bb:05:32:5e:84:4d:cb:85:0b:f6:8b:d6:a6:49:c8:a0:9f:
3d:8c:82:b3:33:bd:dc:33:21:ed:68:3b:5b:8a:d8:40:5d:34:
0d:7d:4c:fa:c6:1d:04:91:c4:c8:4b:80:82:a4:6f:a1:69:ee:
5a:a9:f1:c5:36:c2:bf:c1:5b:15:00:51:a2:70:67:30:d5:aa:
64:a2:4a:80:ef:39:1a:8d:ea:6e:9f:50:d1:9f:be:df:d0:a4:
e8:52:54:d0:e4:aa:84:93:2d:f9:d1:89:7e:25:e1:a1:9a:c6:
c1:b3:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 02:34:15 2024 by rpki-client on console-ams.rpki-client.org