Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e20383334.roa
File: 3139332e3234362e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mvQRP3pcGgn6FYSyIrpGRyZyHvYZtrf2hWO4uWMMolY=
Subject key identifier: 98:0B:F5:3E:30:AD:32:58:80:95:86:1F:4D:C3:9C:9B:CF:EE:FB:2F
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 08EFB0439DEAA6290E450E0EE0F39F188F41E0BF
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e20383334.roa
Signing time: Fri 05 Apr 2024 10:05:33 +0000
ROA not before: Fri 05 Apr 2024 10:00:33 +0000
ROA not after: Fri 04 Apr 2025 10:05:33 +0000
asID: 834
IP address blocks: 193.246.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 02:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ef:b0:43:9d:ea:a6:29:0e:45:0e:0e:e0:f3:9f:18:8f:41:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 5 10:00:33 2024 GMT
Not After : Apr 4 10:05:33 2025 GMT
Subject: CN=980BF53E30AD32588095861F4DC39C9BCFEEFB2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:e3:fa:4d:23:b7:ea:8c:f9:94:44:d7:98:
c9:2b:5e:39:14:2a:bb:a5:dc:59:cd:8d:2c:0f:91:
2e:bd:cb:22:d1:e6:f8:81:d3:25:14:52:22:60:1c:
a4:85:9c:d9:4a:33:6c:13:d0:92:39:94:44:65:2b:
26:fd:02:5e:49:22:30:9e:0e:64:cb:14:98:e2:08:
b3:7a:dc:8e:ba:05:7a:13:a7:01:d6:5f:45:9b:cd:
67:f4:ce:4e:85:1a:ad:1f:d0:ed:e9:2a:de:b0:50:
df:58:1d:28:58:98:8b:83:df:12:49:33:9b:8c:aa:
97:dc:05:72:11:7a:b7:87:0f:1c:85:38:8c:3b:e3:
05:2d:0d:5c:20:2c:a1:f7:67:dc:be:23:38:0b:87:
b0:ae:2b:aa:0b:c3:e1:9c:6c:b9:9d:62:41:d7:54:
c0:a5:07:08:f4:ff:90:ac:c2:e4:9d:6c:29:e6:db:
28:2a:c9:f4:04:0f:22:f4:4a:e2:6e:a8:30:d0:e2:
b9:3c:2f:42:5b:8f:08:5e:17:19:57:f5:d1:bd:91:
16:67:0e:d6:56:a8:6f:93:f0:4e:00:a6:5b:12:d1:
c8:ef:c8:95:ed:78:35:d9:f5:52:05:f5:e8:1f:99:
5f:5b:4e:8d:94:9b:c6:14:c2:73:f4:10:93:4f:5c:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0B:F5:3E:30:AD:32:58:80:95:86:1F:4D:C3:9C:9B:CF:EE:FB:2F
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:53:c1:79:c8:5c:14:10:b4:9c:e5:ab:57:2f:db:c7:4c:2d:
4e:ab:23:94:c4:e1:55:69:a6:5c:72:e3:b4:ad:0e:ee:a9:c4:
8f:1d:ca:36:fa:91:56:e5:3a:31:53:69:f6:99:75:84:6c:68:
0e:42:aa:73:3f:29:1f:a3:83:12:b4:4d:c4:e9:d9:b5:21:64:
79:df:d7:bf:92:63:80:31:ea:1b:d5:bf:f9:ec:58:bf:07:f3:
7a:cb:c4:02:0a:e6:31:f3:38:45:ea:59:28:57:50:d4:72:60:
ff:59:cc:9d:b1:ab:c3:41:c4:f2:14:ec:22:c3:50:65:31:71:
d6:46:b2:7c:ec:d5:df:81:c6:27:b7:4b:b0:22:f8:e9:4a:4d:
be:a8:56:5e:87:04:15:00:38:04:d1:6e:60:dd:e4:5a:6a:e0:
8e:72:9b:2a:16:fc:03:60:58:0c:25:e9:18:b4:a8:fb:4c:3d:
76:d7:34:ab:2d:48:0b:a7:21:49:03:38:21:94:cc:2b:4f:6c:
9e:e0:bd:ee:a1:e2:17:f4:22:7f:54:e9:74:a8:0a:84:fb:05:
09:3a:c8:92:a7:4d:e1:44:71:eb:97:09:b9:75:18:a0:27:d1:
30:32:1c:1c:29:79:88:b4:7e:89:0d:67:02:3f:ec:39:ac:ef:
b5:a6:22:b2
-----BEGIN CERTIFICATE-----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Generated at Sat Apr 6 03:55:46 2024 by rpki-client on console-fra.rpki-client.org