Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e20383334.roa
File: 3134362e31392e3231362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: O1oxj+SgxwUdTUKeWH0BATSxmUSPoRzq50OI+WtiA3g=
Subject key identifier: F4:CF:FD:AE:4E:29:D7:ED:9E:16:02:15:69:A6:8A:7E:F9:2C:F4:C4
Certificate issuer: /CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
Certificate serial: 41D7E175619D3377283B155C1C121608D9032678
Authority key identifier: 8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e20383334.roa
Signing time: Tue 24 Oct 2023 13:00:03 +0000
ROA not before: Tue 24 Oct 2023 12:55:03 +0000
ROA not after: Tue 22 Oct 2024 13:00:03 +0000
asID: 834
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d7:e1:75:61:9d:33:77:28:3b:15:5c:1c:12:16:08:d9:03:26:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
Validity
Not Before: Oct 24 12:55:03 2023 GMT
Not After : Oct 22 13:00:03 2024 GMT
Subject: CN=F4CFFDAE4E29D7ED9E16021569A68A7EF92CF4C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:78:30:80:d7:98:ee:26:de:c4:a2:79:e5:
73:83:11:b4:77:e9:cb:24:ee:c9:29:29:dc:8c:98:
f8:0a:58:09:7e:f9:cb:65:9e:bf:80:e6:97:f1:fb:
a7:cd:3e:8d:08:9a:99:58:bc:57:d9:ad:ad:a7:45:
78:3b:ae:72:3d:9e:e3:94:ef:70:79:28:2c:50:91:
43:1b:24:ad:8a:ee:8b:6e:73:7a:7f:3f:7b:54:e9:
64:4a:40:06:55:97:a5:d6:c3:3e:4c:23:34:9d:4f:
f7:5e:a4:6c:00:0b:3d:9c:ea:bb:52:ae:a9:fc:de:
98:02:bb:0c:2a:8e:ca:99:c9:d8:5a:b3:b3:be:5a:
a9:4c:80:83:f6:4a:58:22:24:9c:19:ff:25:f8:d8:
6f:d5:49:f0:f0:bc:dc:0e:6c:32:f0:18:69:81:dc:
e5:e9:6f:33:bb:ee:6f:9d:c9:2d:d8:85:71:78:d2:
ac:0a:b9:4b:34:e4:a8:7f:f7:e0:ef:91:d9:3a:0a:
9f:31:d6:35:28:3a:2b:f3:e9:48:0f:5e:d0:e0:30:
61:2c:5f:34:d6:86:45:7c:26:31:46:4b:ee:dd:a5:
6c:58:6a:a8:cd:33:aa:c4:71:27:08:95:d0:47:5f:
32:96:8f:19:32:d8:52:95:e7:10:45:6a:a7:ca:ad:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:FD:AE:4E:29:D7:ED:9E:16:02:15:69:A6:8A:7E:F9:2C:F4:C4
X509v3 Authority Key Identifier:
keyid:8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:eb:57:82:fd:88:64:71:7d:33:1f:0e:d8:71:b1:34:9c:65:
89:6a:47:2d:3c:0d:76:0f:06:c0:dc:43:22:88:98:26:f4:1c:
82:d6:b9:44:ed:e2:13:e0:64:57:45:f1:ef:8d:d1:ae:1a:6b:
9c:84:07:01:6a:a3:12:f7:b7:61:0b:48:4f:97:cf:c8:39:f0:
7d:e4:09:4c:5d:a2:b8:b5:2e:51:04:5f:e1:24:6d:90:30:94:
34:97:f8:8e:42:15:f4:7a:35:d1:37:20:ed:c7:f9:f8:3c:22:
3a:a5:9f:99:fe:8c:24:c3:85:02:9d:43:6e:af:4b:2d:91:fb:
1a:24:4f:93:d9:e8:64:f9:0f:2d:a5:27:9c:64:40:d3:52:9f:
85:c1:ab:41:be:c7:0f:77:b1:bd:f5:17:5f:a2:c2:3b:b6:f8:
9d:d7:c5:8e:48:f1:e7:27:fb:7e:4e:79:ad:ca:25:6e:82:a2:
82:ae:9b:90:ca:ed:8e:3c:dc:85:72:e6:20:9c:9b:35:e3:cc:
85:21:38:6f:8f:90:73:92:8e:27:5c:a9:d1:7e:8e:7c:c8:5c:
f7:44:7a:61:7d:48:67:3d:c0:d3:6b:9b:e7:14:ee:e0:3f:7e:
9b:41:a9:e9:0e:db:5e:d2:2c:76:4c:30:23:7a:bc:45:4b:43:
7a:7a:54:f5
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 24 17:00:57 2023 by rpki-client on console-ams.rpki-client.org