Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e38362e302f32342d3234203d3e203631313335.roa
File: 3134362e31392e38362e302f32342d3234203d3e203631313335.roa (raw, json)
Hash identifier: 90fqOze9yS3OAu06LgDGEaVfCiJFiTCsRKZJPJ3SSVM=
Subject key identifier: DE:F6:42:C4:CB:60:6A:8D:19:28:10:40:EE:52:04:6B:F4:B9:13:5F
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 4E52E5F59649663620ADA8F0B44CA192CC673223
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e38362e302f32342d3234203d3e203631313335.roa
Signing time: Tue 23 Jan 2024 13:00:33 +0000
ROA not before: Tue 23 Jan 2024 12:55:33 +0000
ROA not after: Tue 21 Jan 2025 13:00:33 +0000
asID: 61135
IP address blocks: 146.19.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:52:e5:f5:96:49:66:36:20:ad:a8:f0:b4:4c:a1:92:cc:67:32:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jan 23 12:55:33 2024 GMT
Not After : Jan 21 13:00:33 2025 GMT
Subject: CN=DEF642C4CB606A8D19281040EE52046BF4B9135F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:21:f0:9f:d2:50:2d:59:b8:b2:14:3b:4c:
79:60:9f:df:9f:8b:d2:22:55:e5:38:c7:c3:fe:72:
65:51:9c:8f:d7:ff:38:57:50:87:cb:5f:05:4a:63:
cc:77:23:32:cf:1d:3a:b3:7b:07:80:e5:ac:ab:e1:
51:e0:b5:c3:75:8e:f8:d1:63:10:6b:5a:b7:12:3b:
24:4b:a4:26:0e:c3:3e:8b:06:c1:0c:a4:5e:3a:91:
84:34:97:1a:cc:76:2c:e2:23:72:77:bc:72:11:e4:
ca:00:b4:8c:08:35:16:a6:dd:d9:e0:9f:31:7c:28:
06:0f:9b:a2:ad:60:02:5b:65:5e:14:dd:eb:5d:70:
40:b0:e4:98:2c:76:37:42:b6:16:c2:80:21:35:67:
97:95:85:f6:a3:46:d1:0a:d6:50:e9:c4:c9:73:09:
99:27:1a:4c:81:83:ba:ec:91:e9:c6:3e:ca:cc:88:
27:13:25:d9:2a:eb:bf:92:4d:5c:54:3c:1e:d9:98:
44:66:f1:eb:94:78:b7:d1:be:db:f9:86:74:f1:9e:
96:11:fe:b6:e7:25:88:61:2f:2c:3f:27:de:b8:1b:
94:c5:f5:2a:e9:9e:86:cf:3f:cb:1b:ed:ea:52:13:
e8:03:5a:09:fb:09:8e:61:2b:96:39:cf:3f:43:c5:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F6:42:C4:CB:60:6A:8D:19:28:10:40:EE:52:04:6B:F4:B9:13:5F
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e38362e302f32342d3234203d3e203631313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.86.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:c8:7b:a1:b6:26:ac:10:40:36:5e:5b:28:05:2f:b9:af:89:
aa:a0:5b:72:a9:bd:58:44:4d:0e:10:a0:54:44:7f:a7:ad:15:
0c:d1:f6:85:0e:8a:6c:df:15:d8:86:ef:15:64:e0:0a:00:c9:
19:5d:f0:d8:d4:77:ce:48:61:8e:e4:76:4d:0a:ce:6b:e6:c0:
ff:3a:c2:6e:61:d6:91:80:47:e9:0c:4e:8a:eb:e3:4b:37:c0:
0c:e9:87:f6:7b:27:c2:99:22:76:e0:47:90:2a:b4:1b:a2:d2:
ce:a7:b3:2c:fb:ba:57:6d:92:4a:7e:1d:c6:7f:3e:ea:60:6a:
5a:86:52:0a:24:88:d9:92:bf:73:8e:dc:7b:22:4f:b1:57:f4:
18:54:e8:d3:36:82:db:bc:c0:7c:05:04:7c:cd:d2:66:45:8e:
fd:15:3f:6f:0a:51:fa:a6:bb:24:96:29:63:11:49:fe:a9:df:
a0:1b:e3:47:8b:01:89:b9:b0:b7:2c:82:d4:04:5f:20:00:bf:
73:c9:18:02:89:a8:fa:4c:93:be:73:34:10:a2:e6:f3:f5:ec:
a4:4d:cc:c9:a6:34:1c:6c:0b:c6:6b:fe:19:2b:84:ae:e2:5a:
39:80:3e:e7:bf:ce:50:56:77:98:fe:af:71:98:e7:58:6f:f4:
39:15:ee:09
-----BEGIN CERTIFICATE-----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Generated at Thu Feb 22 03:37:16 2024 by rpki-client on console-ams.rpki-client.org