Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e322e302f32342d3234203d3e2037303138.roa
File: 3135392e3235332e322e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: EPpZq8k+KmKMMYHb89cLNo5PhdwQNzfxTOirGGnrZQQ=
Subject key identifier: B4:25:0A:A4:B8:31:EB:86:6E:65:44:A0:28:29:3C:AC:95:50:18:15
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 3146605265F49771CD4BF0B08C853BB9D8001871
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e322e302f32342d3234203d3e2037303138.roa
Signing time: Tue 13 Aug 2024 19:06:31 +0000
ROA not before: Tue 13 Aug 2024 19:01:31 +0000
ROA not after: Tue 12 Aug 2025 19:06:31 +0000
asID: 7018
IP address blocks: 159.253.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 10:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:46:60:52:65:f4:97:71:cd:4b:f0:b0:8c:85:3b:b9:d8:00:18:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Aug 13 19:01:31 2024 GMT
Not After : Aug 12 19:06:31 2025 GMT
Subject: CN=B4250AA4B831EB866E6544A028293CAC95501815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:43:fc:18:86:66:67:e9:84:86:ae:8f:f0:
b8:0e:c3:15:68:c7:46:8a:11:c9:99:e0:78:df:f0:
fd:a8:78:43:0f:a8:91:ad:df:74:c0:82:27:eb:d2:
75:ef:aa:83:d1:ea:73:ad:ac:f5:8f:80:69:71:0b:
d4:8e:f7:b1:31:7a:16:15:ea:37:69:21:20:58:56:
d2:73:b6:2d:76:57:57:f1:c6:9e:a6:16:57:47:2c:
d1:2a:5f:4d:46:9b:a4:6f:18:29:90:7f:4c:80:9e:
a3:6d:12:2f:2b:41:83:fa:b8:e9:b3:2d:3d:2a:85:
d2:b1:4c:a0:48:94:ac:68:28:32:71:45:57:04:f6:
a4:06:b9:e0:47:df:c0:7c:d1:2c:7a:3c:06:f2:4a:
25:54:63:e9:fe:87:2f:e2:0a:99:dd:38:2e:fc:ec:
37:df:3a:27:fc:9e:59:40:80:e9:da:53:24:07:dc:
72:a5:01:1d:e3:fc:9f:2f:41:90:97:7d:d8:34:bf:
74:4c:3a:ca:2b:ab:29:23:b7:d8:31:fa:66:db:03:
26:79:15:5d:4c:c0:73:16:5c:51:09:fb:b5:2c:0f:
a5:20:b0:d6:3a:db:93:9b:d2:f9:c5:f0:a3:5f:03:
72:ce:f3:98:16:ee:24:26:da:69:81:0f:2d:0e:c7:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:0A:A4:B8:31:EB:86:6E:65:44:A0:28:29:3C:AC:95:50:18:15
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e322e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.2.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8e:07:cb:f6:bc:ea:85:f5:5c:93:bf:f5:bb:c1:5a:76:a4:
9c:1c:f6:ee:05:cf:5a:af:69:8e:e7:aa:80:43:4d:cc:68:c1:
b4:5f:d1:88:e7:42:dc:2a:0d:26:9d:fb:01:bd:c9:21:08:1d:
9a:7d:de:8f:62:29:18:7d:cd:12:63:75:ce:e5:78:d1:06:d4:
93:74:ab:89:89:80:87:d4:4c:f1:a7:3a:a1:ac:7e:fa:7a:2c:
b9:a4:d4:c5:f2:fe:62:77:86:7b:72:dd:dc:6d:ae:b5:16:84:
de:35:09:4b:58:25:68:16:50:3a:2e:53:41:8c:06:90:e8:a9:
9b:00:c8:24:3a:12:bf:2b:35:e4:98:fc:85:50:86:ba:8a:94:
f8:1c:4c:89:2c:62:3c:bb:c0:11:a0:05:84:7f:65:14:40:4b:
af:34:2c:73:91:37:52:62:ff:d0:ca:2d:a2:32:88:64:6b:8a:
1c:1c:10:85:b7:eb:0b:dd:d7:63:85:36:49:ef:17:1e:53:76:
8f:c7:f1:2a:21:fd:84:7d:5b:46:ff:ce:6c:87:94:86:9c:63:
ad:c2:3a:f6:07:84:48:03:a8:60:52:5a:48:35:b7:5f:9c:a6:
b1:b4:02:d3:b2:1d:a9:ff:0b:9c:9e:ea:a2:40:93:ec:9a:a0:
0e:19:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 12:52:46 2024 by rpki-client on console-fra.rpki-client.org