Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20383334.roa
File: 3139332e33372e3233392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: de7mpQGW0yjheeuDELfsTgoKC8k6xVtRUGXLnPmbdpw=
Subject key identifier: C5:06:9C:53:C8:97:58:7C:8F:BB:2A:4F:8E:72:BF:1D:98:01:7A:8B
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 09886A05E49C66A70874B14027DB1B6F1BDEBF2D
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20383334.roa
Signing time: Tue 24 Sep 2024 08:20:28 +0000
ROA not before: Tue 24 Sep 2024 08:15:28 +0000
ROA not after: Tue 23 Sep 2025 08:20:28 +0000
asID: 834
IP address blocks: 193.37.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 07:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:88:6a:05:e4:9c:66:a7:08:74:b1:40:27:db:1b:6f:1b:de:bf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 24 08:15:28 2024 GMT
Not After : Sep 23 08:20:28 2025 GMT
Subject: CN=C5069C53C897587C8FBB2A4F8E72BF1D98017A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:09:fa:c6:05:c6:4e:3b:ec:da:e9:71:68:10:
52:cb:c9:12:43:3b:2d:1d:e3:b0:c4:ea:ac:6d:49:
c9:79:41:5c:c3:1d:7c:fc:98:71:f7:b5:55:bb:98:
87:f1:29:4b:55:55:34:cd:7f:86:5f:8f:2e:da:30:
46:f0:bb:1c:75:ee:a0:8d:3d:c0:43:0d:fb:68:dd:
c8:af:de:8e:71:d3:3c:4b:b1:1d:72:b0:4b:36:58:
08:1f:48:23:79:8c:bd:24:0a:d7:d1:a2:57:02:70:
e4:b0:86:09:ed:40:4d:3e:f7:eb:bc:28:3d:4a:31:
45:ae:3d:ca:3f:50:77:73:70:f9:2b:2e:f9:fb:53:
5d:18:d0:60:38:62:d3:30:4a:0f:c0:2f:b8:22:24:
82:80:59:84:56:e8:42:0d:24:09:86:6c:95:78:2f:
ce:b4:e8:57:05:c2:e4:05:dc:f8:22:af:e8:e1:7a:
74:8d:19:f9:0b:58:8e:97:6c:8b:6d:af:2a:da:91:
d2:70:d1:85:89:7b:eb:db:16:03:26:35:fc:b3:24:
c6:d0:ae:1a:dd:c2:4e:46:c7:35:54:cf:90:82:02:
4a:54:71:e2:37:c8:0f:ec:23:a8:76:2a:ea:fe:46:
3d:c5:a0:38:a9:02:1a:96:36:55:91:9e:28:63:6e:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:06:9C:53:C8:97:58:7C:8F:BB:2A:4F:8E:72:BF:1D:98:01:7A:8B
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.239.0/24
Signature Algorithm: sha256WithRSAEncryption
18:fd:23:3a:b9:82:89:52:f3:cb:a6:9e:a9:68:c3:35:d9:33:
a2:37:cd:f2:86:d5:8d:c5:b4:bc:1f:af:93:8c:cb:27:d4:62:
71:7a:95:5f:e4:45:d4:bb:d9:04:65:fe:c0:01:b8:c9:51:22:
e3:d9:15:d4:91:2f:b1:da:3c:ca:38:4d:78:0d:22:03:0f:03:
7b:6b:9d:fb:b8:d3:2d:59:cf:e9:10:56:da:3d:70:4c:bf:d8:
c2:36:30:80:fb:f5:dc:d9:c1:32:01:56:92:8e:86:ec:c2:87:
58:0a:10:06:2c:6d:a2:c8:b8:a9:f8:75:b5:ca:73:60:a2:8f:
19:86:29:d4:de:1e:5e:61:1e:13:50:50:67:6d:d7:be:e8:d9:
b1:b0:54:7a:eb:d3:58:26:3c:99:3f:5e:0c:3c:27:e5:37:b9:
49:b1:a9:48:70:b9:09:13:d4:83:e8:86:5b:e0:22:1d:6e:18:
3a:8a:55:d2:c5:42:e1:da:8d:16:1d:05:3b:41:bf:96:68:b7:
15:98:64:b5:f3:9a:5d:3d:ff:91:ed:b0:4a:f4:4b:ce:be:9d:
f9:6c:a4:a9:2b:1e:2a:1e:5a:fc:99:60:c2:71:0d:3e:50:d7:
00:6f:a6:5e:b0:c5:a5:4e:e0:0c:e0:50:1d:12:e5:c7:db:32:
85:90:a1:a6
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 27 09:13:59 2024 by rpki-client on console-ams.rpki-client.org