Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e20383334.roa
File: 3134362e31392e32332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lYqgpUWOSa8KMqHkP5gwnMnus+9M8BBKUkSTx4XI0y8=
Subject key identifier: 0A:E3:84:22:4B:AD:A9:43:F0:66:50:09:0D:4E:65:16:5B:C7:E5:C2
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 41DEDEAB2A8B7059DFC4F17AAADE7201A3D6F0A7
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e20383334.roa
Signing time: Thu 19 Sep 2024 00:00:58 +0000
ROA not before: Wed 18 Sep 2024 23:55:58 +0000
ROA not after: Thu 18 Sep 2025 00:00:58 +0000
asID: 834
IP address blocks: 146.19.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 21:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:de:de:ab:2a:8b:70:59:df:c4:f1:7a:aa:de:72:01:a3:d6:f0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 18 23:55:58 2024 GMT
Not After : Sep 18 00:00:58 2025 GMT
Subject: CN=0AE384224BADA943F06650090D4E65165BC7E5C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:6e:d1:d3:bd:dd:a0:c8:1b:76:30:23:38:
21:50:66:51:1a:c7:6a:36:99:ab:32:36:f2:2f:23:
9e:38:59:26:07:d4:2b:8e:ae:28:85:1e:17:e7:20:
13:c7:d7:64:56:0f:e6:43:65:5d:08:50:b8:10:a3:
48:58:90:13:1b:3f:5f:8d:11:9c:ee:f9:6a:75:35:
3e:4b:bc:c8:72:bb:3f:d2:d2:47:36:5c:58:a5:f0:
1c:5f:93:3b:6d:23:b8:54:73:f5:79:23:42:88:3b:
47:20:b7:0b:75:ed:a4:16:e9:57:05:5b:a6:10:34:
de:b4:77:eb:92:54:29:8f:02:9f:43:a9:a7:1e:d7:
de:4f:b4:2c:30:82:72:55:ef:ab:08:c7:96:ba:a9:
aa:9f:96:0a:48:57:f1:93:8c:d6:0a:fe:81:5b:96:
ae:d7:4f:c0:c8:e5:70:43:d5:e0:e5:04:bb:4b:44:
67:f7:88:05:18:b7:08:31:a9:c9:24:01:26:ec:e9:
7e:c0:c8:d5:13:3a:4f:72:11:c5:01:f5:61:5e:3f:
26:cb:26:c2:8e:e9:42:e4:54:14:af:3a:0b:19:71:
38:6b:3a:3c:62:db:76:93:49:17:6d:75:14:7a:7f:
6d:9e:b9:38:ff:c3:c6:10:8c:dd:3c:0c:7b:25:30:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E3:84:22:4B:AD:A9:43:F0:66:50:09:0D:4E:65:16:5B:C7:E5:C2
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:22:ea:35:da:c9:ac:6d:fc:ca:bd:a9:89:ce:d6:c9:d5:0a:
dd:c1:92:d8:85:9b:8c:ea:13:d2:60:55:4f:d1:e8:60:eb:84:
5b:64:0e:14:0b:0e:5c:ec:b9:32:71:fc:13:4a:b1:17:f7:48:
a2:0f:92:6e:54:47:6a:34:52:92:37:f3:0a:c6:75:5c:e6:24:
d4:b0:1b:37:07:b9:fe:87:fc:08:99:2f:22:04:0d:f6:aa:c0:
8f:58:28:a8:a8:62:0b:64:0d:33:b4:13:d6:61:96:8f:88:16:
a9:13:99:b8:7a:28:c7:46:3d:6a:2c:ae:b5:06:ad:9f:e4:2a:
b2:59:a2:aa:1a:d6:09:ac:64:c1:8a:03:60:02:5f:da:d5:51:
fb:a4:12:a4:1f:af:51:e0:52:ce:71:1c:54:4d:93:e8:90:82:
5a:d1:0d:c6:81:22:b5:fb:11:08:85:14:ab:c7:7f:b8:44:dc:
a4:e5:0b:c2:e0:0e:76:90:50:ab:84:98:e7:d9:2f:8b:b7:e4:
2f:67:30:e9:08:c6:41:c0:69:90:86:fc:d4:0d:76:5f:cb:fa:
be:80:41:14:f2:c7:ce:9c:52:14:22:21:30:9e:14:27:e1:af:
b9:db:c2:0f:6c:47:da:c5:9e:52:1e:a3:0e:80:b5:02:1b:9a:
3e:64:2d:37
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 21 00:30:14 2024 by rpki-client on console-fra.rpki-client.org