Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e20383334.roa
File: 3139332e3234362e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GFk4D6+oT80jFYxxGu/JpZl95YQY431LxlWh/2IQfpk=
Subject key identifier: F6:50:B6:99:80:74:7B:25:71:DB:F8:4F:3C:C5:FE:BE:BC:6A:F5:A9
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 3DC39CB58C9D61C838F076CB046CCA0C3F0F4186
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e20383334.roa
Signing time: Wed 07 Aug 2024 10:10:27 +0000
ROA not before: Wed 07 Aug 2024 10:05:27 +0000
ROA not after: Wed 06 Aug 2025 10:10:27 +0000
asID: 834
IP address blocks: 193.246.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 11:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c3:9c:b5:8c:9d:61:c8:38:f0:76:cb:04:6c:ca:0c:3f:0f:41:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 7 10:05:27 2024 GMT
Not After : Aug 6 10:10:27 2025 GMT
Subject: CN=F650B69980747B2571DBF84F3CC5FEBEBC6AF5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:3e:c3:a2:04:90:e5:50:53:68:57:f9:71:
fd:d5:cb:61:2f:2c:ba:25:65:9c:92:59:88:df:42:
b7:db:9f:96:21:68:c2:41:ea:a5:31:1d:ea:29:f8:
c2:11:27:e9:5c:33:8c:f5:13:5d:34:34:35:d7:0d:
fe:2e:ec:8c:f4:cc:8f:de:cc:ed:78:ff:22:bf:5a:
86:c9:b5:ae:bf:a9:8a:c5:6f:84:92:c0:a9:6c:00:
5a:ca:ed:1e:af:aa:49:25:84:55:a7:ca:0b:8a:e3:
59:6f:61:b4:2f:c7:7a:c2:c6:b6:ac:9b:9d:93:3d:
e7:a9:e6:2f:ce:07:63:34:21:74:9e:61:2e:b1:d7:
d6:99:9e:f1:f6:15:c0:54:f3:9f:91:a4:44:5b:4b:
dc:d7:93:25:b9:b2:4d:5a:d2:af:b2:e2:37:c1:21:
25:7b:ed:1e:05:02:b0:dd:5c:10:89:fc:78:d6:c0:
3f:2e:26:74:66:44:b4:75:92:41:bf:16:24:58:7e:
bc:b9:39:4f:9d:30:d0:03:97:60:f7:90:27:c2:35:
0c:53:bb:79:4c:f2:a6:67:a4:5c:b5:3a:ff:c9:c2:
6e:c1:bc:56:b3:69:9c:80:ac:ba:df:0e:ff:c9:11:
26:39:6a:a6:1d:b2:9e:9d:d1:09:c8:53:dc:ce:6e:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:B6:99:80:74:7B:25:71:DB:F8:4F:3C:C5:FE:BE:BC:6A:F5:A9
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.164.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e4:54:fc:a3:f8:b6:80:26:24:ca:49:88:7a:06:ed:54:ff:
d3:40:13:a3:33:18:ce:94:7b:19:f5:39:5e:08:26:21:5c:d5:
9c:33:00:24:95:25:1b:6d:2b:89:b7:01:e8:2d:8f:0e:68:80:
71:32:c8:52:7a:bd:3f:b6:93:c8:e5:bd:4d:a4:1d:f5:d0:74:
90:49:2f:3f:1a:f4:56:29:64:bd:ca:24:bb:37:e5:11:93:49:
e2:7b:f3:1e:a5:ca:25:8c:b1:fe:68:ec:86:c7:11:d1:ac:bf:
42:c3:20:de:b0:5f:0a:f2:4c:03:0d:b7:82:49:dc:ba:4c:68:
e5:93:56:95:46:8b:1b:d8:99:fe:d6:2e:de:46:05:40:8b:51:
3d:f6:6c:d6:31:3b:23:0e:f6:5b:bf:f1:f6:52:30:78:0d:7c:
08:5b:42:13:0e:3b:1d:97:ce:51:84:95:7f:5a:ca:bd:94:9c:
52:f6:37:79:ca:b2:33:74:d0:94:9a:86:25:ee:ab:2d:ad:41:
5b:7c:56:2e:97:2b:1e:23:42:f5:61:41:14:47:00:bd:82:41:
9d:63:40:2b:11:7a:81:a8:1d:a3:40:6c:e6:cd:22:53:20:09:
33:be:74:0d:40:1c:f7:c4:71:72:84:3d:8a:a1:83:77:4d:41:
48:52:8b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:57 2025 by rpki-client