Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e203134343435.roa
File: 3139332e39332e3135332e302f32342d3234203d3e203134343435.roa (raw, json)
Hash identifier: 7yCc2L0/IwvJvHoXZjbFoxfuA2koizzGmplbxobK5d8=
Subject key identifier: F4:F3:40:64:AE:E7:31:5D:2E:E0:6F:E7:B9:2B:49:D4:79:14:7C:49
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 39A00B56602F549796395C7A5C93B70C0083E5AB
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e203134343435.roa
Signing time: Fri 04 Aug 2023 13:07:45 +0000
ROA not before: Fri 04 Aug 2023 13:02:45 +0000
ROA not after: Fri 02 Aug 2024 13:07:45 +0000
asID: 14445
IP address blocks: 193.93.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a0:0b:56:60:2f:54:97:96:39:5c:7a:5c:93:b7:0c:00:83:e5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Aug 4 13:02:45 2023 GMT
Not After : Aug 2 13:07:45 2024 GMT
Subject: CN=F4F34064AEE7315D2EE06FE7B92B49D479147C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:f2:0d:f5:ed:f3:6c:f0:e5:ff:09:4e:89:
bd:db:56:e6:58:c7:89:2f:3d:29:b1:c8:38:01:17:
44:a2:87:f8:9a:3b:11:33:00:34:fc:a9:6a:4e:0f:
49:76:87:f3:9f:52:bb:77:b5:fb:44:9a:b5:36:d6:
dd:48:9b:26:87:20:59:7f:05:0a:3f:fe:01:90:58:
d6:cd:af:58:ee:72:ce:b8:44:37:8c:7d:17:fb:02:
da:0c:46:db:56:51:f0:a2:15:69:4b:67:bd:4b:56:
8a:7e:02:b1:d6:b0:ca:33:f3:a4:2a:35:d3:0e:a1:
43:65:ca:a6:0b:3a:7c:d3:70:76:6c:57:ea:03:02:
38:7f:34:43:d3:a5:5a:12:8f:5b:9d:fd:8f:cf:ea:
14:b8:bb:ba:49:97:52:9d:10:15:9a:28:03:96:eb:
4f:48:b7:4f:54:69:ed:ff:45:82:78:1f:ab:43:3a:
27:12:10:95:96:73:db:a0:f8:0b:a4:aa:e9:47:f9:
79:7c:c3:f4:34:c7:9f:96:9f:22:0d:2f:fb:1a:5d:
ad:2d:bf:4d:ea:a7:14:c5:6c:2f:8c:1f:8d:56:d4:
d5:dd:d9:18:fa:39:98:bd:a1:a1:d9:bb:e1:86:8b:
6c:7a:f9:72:e4:51:1f:fb:d5:93:a7:31:be:70:6c:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F3:40:64:AE:E7:31:5D:2E:E0:6F:E7:B9:2B:49:D4:79:14:7C:49
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e203134343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.153.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d5:3d:4f:08:12:37:ff:f7:ac:34:3b:58:70:4f:b5:e9:f8:
7a:59:bf:96:58:6a:8d:cb:60:34:8f:77:b7:53:e2:13:e9:19:
99:ba:a7:4c:19:19:c6:ad:93:89:f7:b7:f6:7f:76:c0:21:fc:
00:b8:28:8f:c6:76:75:b4:33:fe:46:00:e7:4b:7e:4c:97:c8:
5d:35:43:a8:b8:58:18:ba:13:29:7e:ad:36:dc:b2:62:55:2f:
0b:0f:a3:4e:73:f8:dc:7f:d5:23:11:97:fe:97:a7:b1:5d:4f:
cf:42:33:e4:b4:4b:6c:8b:d8:9e:d8:73:52:96:03:8f:b3:b4:
c4:8f:c2:aa:f9:1f:38:e6:0f:09:71:21:26:c0:6c:e7:f9:64:
e4:9c:da:10:7c:09:2d:0f:da:08:74:bb:c5:1b:14:19:b8:0d:
cc:45:e2:6a:b2:2b:90:05:67:ff:8f:f6:42:d5:cf:97:ed:5b:
dd:09:98:df:58:b5:5e:af:3e:56:ce:d5:87:f3:ce:81:64:9d:
8a:a4:02:0d:d2:63:6b:cd:9c:e6:e4:84:28:e9:ba:cd:57:fd:
28:e3:c2:50:3a:69:8e:0e:3e:cb:85:e2:15:c0:9f:7f:80:f6:
1e:da:a2:f4:79:96:bf:41:1c:3c:f2:0f:a9:87:3e:7e:57:66:
31:8d:3d:d1
-----BEGIN CERTIFICATE-----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Generated at Sun Feb 4 02:30:42 2024 by rpki-client on console-ams.rpki-client.org