Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20383334.roa
File: 3139332e39332e3135332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: agpHY7nRnRX9XfrksWDm/Kppa+o2cWhOmwZKP9gu2CU=
Subject key identifier: BC:80:19:D8:17:BF:5B:CA:CA:CB:BA:96:57:F2:1F:42:3C:E9:C0:63
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 614AB1F0D6FB20FE948F27B45E09DC434C872F49
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20383334.roa
Signing time: Sun 04 Feb 2024 00:00:05 +0000
ROA not before: Sat 03 Feb 2024 23:55:05 +0000
ROA not after: Sun 02 Feb 2025 00:00:05 +0000
asID: 834
IP address blocks: 193.93.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 11:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4a:b1:f0:d6:fb:20:fe:94:8f:27:b4:5e:09:dc:43:4c:87:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Feb 3 23:55:05 2024 GMT
Not After : Feb 2 00:00:05 2025 GMT
Subject: CN=BC8019D817BF5BCACACBBA9657F21F423CE9C063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:59:d6:96:96:cf:bf:f9:55:0e:be:70:fe:
c0:3f:f2:72:3c:1b:38:36:45:cb:df:8e:81:e7:74:
74:af:15:00:1d:e8:c0:69:0a:81:5a:a2:01:cf:04:
dd:bd:e2:c3:1b:af:8b:cb:13:c6:36:be:e3:80:44:
60:7f:fe:5b:bf:e0:41:36:1e:a7:c7:3e:3e:27:89:
49:64:28:17:e8:27:f4:4a:3e:a0:ad:8f:f5:3a:ba:
3f:b4:41:99:1f:39:32:ff:5d:90:a1:28:84:6e:a3:
30:4c:de:36:a6:f8:96:35:1b:10:cb:14:13:83:f4:
c1:4f:c3:d8:b3:a3:ed:79:9b:4d:84:50:22:67:02:
34:0e:bb:7b:79:bc:3b:d2:f2:5e:80:34:b2:c0:57:
7a:6c:3b:62:0d:da:aa:db:aa:89:b7:03:e6:1b:90:
1a:20:d7:33:56:28:7e:94:ff:74:4e:79:52:8d:5b:
03:92:3c:a8:55:10:48:78:17:9b:40:fd:f8:29:84:
44:59:cb:34:c7:ca:aa:f7:61:89:38:f7:4b:e7:9d:
37:f5:53:be:83:34:a7:08:ff:2b:b8:cc:20:6b:9e:
68:b1:95:6d:8d:df:89:89:c9:34:c9:4c:3c:ec:d0:
88:61:0b:1b:10:55:9f:51:23:66:e7:fc:64:16:f8:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:80:19:D8:17:BF:5B:CA:CA:CB:BA:96:57:F2:1F:42:3C:E9:C0:63
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.153.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:89:f1:45:46:95:0b:83:e7:71:61:f3:3c:9a:b7:d0:82:45:
d9:9a:76:c0:f4:3d:e7:b4:e3:96:ed:31:64:0f:df:9e:89:aa:
b2:d8:57:f3:53:d8:d4:19:e2:57:77:3b:58:5b:b1:62:60:60:
2c:15:a4:7a:51:02:0c:f8:a0:d5:51:46:b6:ce:33:3f:db:21:
1c:a7:d2:90:9b:b4:18:b8:d9:31:c4:7d:ec:53:b1:13:24:8a:
66:98:4f:96:94:2b:5f:51:b1:dc:bb:63:3d:e9:15:6a:d3:ae:
28:51:cf:b8:1d:4d:fa:90:c4:ed:32:e9:67:31:66:ba:41:3f:
30:eb:f0:16:6b:b5:74:d2:38:da:5b:b6:a0:0c:3a:5b:fc:54:
c1:d2:78:b7:5b:65:dd:59:0f:b5:bc:98:61:ce:bb:54:7e:36:
2c:34:54:56:09:5a:89:05:4d:d9:f0:af:09:07:0b:05:89:f8:
c3:57:cc:e6:e3:a5:4d:e8:b1:2a:85:d3:26:c2:bf:6a:5b:f7:
fe:a5:9a:50:e3:53:3e:94:0c:2c:54:ac:14:a6:91:e6:7e:1d:
78:a2:0f:d1:40:2b:48:9c:64:d5:14:67:a4:e9:40:cd:5e:b7:
a2:df:9e:38:40:b7:f5:e7:e6:2f:24:d2:09:e9:2d:dd:3a:c1:
8b:09:fb:c4
-----BEGIN CERTIFICATE-----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Generated at Tue Feb 6 15:18:32 2024 by rpki-client on console-fra.rpki-client.org