Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136352e302f32342d3234203d3e20383334.roa
File: 3139332e3234362e3136352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: XV1Pe8JSEOqHQtKQDIeQCrTA7Aw0OFZaRucdVOFfsxc=
Subject key identifier: A7:2A:1C:64:9E:6B:CE:33:2D:B6:17:C6:FB:85:14:59:57:96:2B:F5
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 0DA7C3AE5210AB23ADA5DA10F75F07F7DDDCA93F
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136352e302f32342d3234203d3e20383334.roa
Signing time: Tue 20 Feb 2024 14:17:58 +0000
ROA not before: Tue 20 Feb 2024 14:12:58 +0000
ROA not after: Tue 18 Feb 2025 14:17:58 +0000
asID: 834
IP address blocks: 193.246.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a7:c3:ae:52:10:ab:23:ad:a5:da:10:f7:5f:07:f7:dd:dc:a9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 20 14:12:58 2024 GMT
Not After : Feb 18 14:17:58 2025 GMT
Subject: CN=A72A1C649E6BCE332DB617C6FB85145957962BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:47:27:03:86:20:5d:43:f6:0a:2d:f5:a3:
ee:db:4e:6b:18:53:33:c7:42:cb:76:dd:92:24:b6:
80:bc:59:ba:cc:da:b1:2c:64:87:5a:57:15:ab:69:
38:07:2e:56:28:9b:94:52:3a:cf:96:ff:d9:de:67:
5f:1c:72:4b:e5:0a:b1:59:a0:b1:c8:b6:41:3f:5f:
5d:5e:ed:30:10:66:c9:ff:47:1c:55:9b:90:46:70:
8e:5e:66:99:6d:b3:cc:12:d6:4e:e0:f6:6f:54:aa:
14:2d:13:fa:9a:0a:b3:71:1a:34:a5:9f:7c:14:f7:
7b:cb:d3:b4:c2:a0:03:a5:9f:76:71:ce:47:1b:99:
fe:37:67:23:1a:4e:cd:06:86:33:13:21:cd:28:58:
65:26:97:a9:0e:69:5d:4d:6d:f6:9b:e9:9a:5b:b5:
20:47:7f:7e:05:74:a7:2d:ab:8c:e8:e7:32:59:6f:
a6:2e:1b:8b:80:1a:c9:3a:6c:4a:c2:ae:dc:da:e5:
9c:85:72:a9:ae:ea:cd:e3:5e:9d:69:e1:6c:81:82:
a8:e5:cf:7c:de:c5:c3:4b:4e:43:84:57:c1:30:a7:
ce:55:e5:c9:e8:46:ac:10:91:62:35:b1:8c:3b:49:
1b:0d:c2:b4:c4:f0:2d:3d:a6:f5:e1:0f:97:f5:37:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:1C:64:9E:6B:CE:33:2D:B6:17:C6:FB:85:14:59:57:96:2B:F5
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0e:18:89:3a:ac:6c:22:1e:b6:dc:76:11:e9:62:6e:af:d7:
08:6b:03:66:a0:d5:c9:93:47:f1:56:df:d8:a5:96:eb:a3:8d:
af:d8:7c:f5:24:ff:bc:73:3e:2f:1b:29:89:b4:a9:c3:0f:09:
7c:c1:91:5e:26:90:f7:dd:52:95:73:8b:e0:b4:5e:e1:2d:13:
e0:ca:9f:e4:c9:cc:ee:04:0d:96:f8:1b:29:82:2a:30:95:9e:
5a:ea:91:70:f5:a7:27:ab:ca:9c:01:57:ca:e4:61:63:05:63:
6f:2b:35:25:24:1e:db:cd:5b:72:81:c3:5b:47:54:c5:b6:1e:
ee:e3:82:06:f6:59:4c:e7:62:01:72:c9:d1:57:dc:90:8e:28:
61:20:4c:28:60:df:85:07:81:97:b0:27:9c:c3:a0:45:79:68:
73:32:0e:e8:82:b0:78:34:89:86:2f:5f:0b:19:6a:60:8a:b2:
6e:8e:6b:34:34:e5:72:a3:3e:01:48:a7:83:48:d3:a5:e3:af:
52:55:fc:71:af:86:9f:03:ba:bf:81:76:06:d9:a2:77:9d:2c:
dc:41:29:09:c9:91:8e:f3:f3:2b:73:80:78:d2:50:fe:35:6e:
a2:d0:93:0f:1b:c2:d4:cd:18:45:a8:ee:e9:5a:9c:e9:5b:fd:
aa:11:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:27 2024 by rpki-client on console-fra.rpki-client.org