Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20383334.roa
File: 3139332e39332e3135332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Dmy5cgCzh1SoWRlhFifdd5mlNprpzOfZFfM9Zn8sPMs=
Subject key identifier: 5C:A1:4D:21:E9:E8:61:11:4D:CA:29:D3:AC:1C:0A:C5:F7:CF:47:9B
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 3444129C927DCD75619F520677340B7FDD86A6B2
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Jul 2024 09:27:11 +0000
ROA not before: Thu 11 Jul 2024 09:22:11 +0000
ROA not after: Thu 10 Jul 2025 09:27:11 +0000
asID: 834
IP address blocks: 193.93.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 09:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:44:12:9c:92:7d:cd:75:61:9f:52:06:77:34:0b:7f:dd:86:a6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Jul 11 09:22:11 2024 GMT
Not After : Jul 10 09:27:11 2025 GMT
Subject: CN=5CA14D21E9E861114DCA29D3AC1C0AC5F7CF479B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:32:82:28:0b:b3:83:e8:41:36:a3:0b:3c:
39:64:2c:01:9c:fd:3c:b8:3a:28:8b:be:0c:c8:72:
46:a8:88:38:b2:45:9a:63:b4:61:22:49:9e:4e:8d:
c2:9c:42:01:b6:d9:cc:d1:8b:cb:22:7d:a4:8e:36:
d7:14:6d:d9:f0:80:9c:20:eb:0d:92:75:f8:e4:70:
8e:ac:05:fd:c7:9c:ba:fb:36:54:28:f4:04:ab:27:
59:c1:bc:c3:b1:6c:b5:90:19:3a:91:5c:c1:49:ab:
8b:83:99:38:bf:ae:c7:1e:12:08:ae:1a:26:17:79:
e1:6b:b3:b0:42:1a:54:ad:79:75:03:25:67:12:6c:
1f:71:49:70:fd:d3:99:ae:ca:a6:1d:b2:ab:26:69:
56:0e:62:29:5d:2b:8d:15:ec:f5:83:46:6d:2b:d5:
75:ed:5c:52:04:23:86:92:bb:28:b3:44:5b:55:41:
73:f1:79:0f:20:9c:24:4b:2c:c1:78:23:02:83:b2:
3b:8b:b5:51:75:ac:66:53:63:67:de:83:ca:a5:5d:
99:81:23:f0:ed:0c:85:f6:ac:2e:fc:ff:7a:65:c3:
82:1b:1b:9c:bf:f5:b4:20:25:58:62:2c:24:65:9f:
57:b6:35:fe:2a:4c:a6:79:58:87:ec:41:51:f5:63:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A1:4D:21:E9:E8:61:11:4D:CA:29:D3:AC:1C:0A:C5:F7:CF:47:9B
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.153.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2c:7b:b4:6c:e6:7d:89:f0:ef:38:16:de:3f:aa:43:21:6c:
fe:3c:cf:00:b4:f5:34:83:c0:65:55:f0:6f:ec:bf:70:5f:9a:
bf:14:4b:67:7c:99:6d:f7:01:b6:7d:94:b0:c2:ac:dc:4d:d8:
d8:8d:1e:2b:88:ee:1b:4d:d2:b1:47:93:a2:56:d7:0b:5b:54:
f0:ed:0f:e5:93:7a:aa:42:01:b0:0a:91:c0:c6:c8:2e:68:ce:
92:25:2a:c2:cf:14:ea:1e:d7:33:9c:db:47:a2:3a:83:9b:50:
22:ed:8a:6f:27:16:62:73:ab:12:be:b4:d3:20:8d:aa:7c:50:
ac:78:60:38:73:f5:34:65:45:26:61:fa:f3:f7:5c:b2:a5:b9:
2b:28:2d:2a:a2:6e:63:06:d1:9e:01:8f:bf:1c:6c:86:45:f7:
ae:a0:a3:3b:83:eb:0d:eb:b1:ce:1a:8f:81:85:a5:08:9c:ac:
68:d4:7f:37:23:ba:ed:d6:35:49:93:b8:29:09:ff:dd:63:fa:
bb:1c:40:d0:fe:d0:c3:c6:96:37:b3:4f:61:1b:36:aa:58:39:
74:76:2c:2d:75:b9:80:ff:c5:90:0d:63:d8:4f:12:9f:95:85:
d5:a0:70:8b:af:89:2a:9f:28:7c:20:34:44:3b:d7:f6:5e:d1:
90:68:56:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 11:45:42 2024 by rpki-client on console-fra.rpki-client.org