Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203130313033.roa
File: 3135392e3235332e332e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier: wFiMxrpyw2xJTg9fhlfV6FF/5vbvn2XHdc+T6xS2WmE=
Subject key identifier: E8:47:9D:3C:EB:68:AF:53:64:1B:52:BE:9D:0B:DF:3D:A4:0E:E9:3A
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 7DCE9E1CEF824CB07A1BC4B507CDAE5994C53EBA
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203130313033.roa
Signing time: Tue 03 Sep 2024 05:44:59 +0000
ROA not before: Tue 03 Sep 2024 05:39:59 +0000
ROA not after: Tue 02 Sep 2025 05:44:59 +0000
asID: 10103
IP address blocks: 159.253.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 14:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ce:9e:1c:ef:82:4c:b0:7a:1b:c4:b5:07:cd:ae:59:94:c5:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Sep 3 05:39:59 2024 GMT
Not After : Sep 2 05:44:59 2025 GMT
Subject: CN=E8479D3CEB68AF53641B52BE9D0BDF3DA40EE93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:34:b7:34:2f:d6:10:2d:1e:fc:06:85:d3:
a4:a9:5f:f8:49:d5:e8:92:18:7b:b7:6c:d5:4d:5a:
e6:b8:d6:90:96:fa:8e:f3:22:3b:81:00:45:3f:10:
09:85:80:4a:76:a6:8e:c4:f5:82:57:38:60:f9:dc:
45:47:5b:f5:b9:e6:dd:a6:ec:97:1d:c1:ef:5d:00:
0f:ff:80:76:67:5f:ee:2a:73:30:73:e9:61:9d:d5:
dd:79:9b:f5:6d:50:0b:c2:8e:c1:59:ea:5b:6c:b9:
05:bb:a5:59:b8:69:ef:b7:c1:56:39:44:23:9f:6f:
cc:4f:eb:28:71:49:63:f7:19:a8:ba:54:05:1d:8b:
a2:c1:7d:16:c8:76:02:d9:0f:3d:9d:a0:f7:9e:57:
27:c1:7b:4f:0d:7a:c8:c4:3c:2f:da:41:52:d4:eb:
af:91:8f:d9:69:26:c0:36:63:89:35:8e:3c:6c:b3:
42:b1:1a:86:ed:93:12:93:a8:b1:08:99:66:b6:37:
22:a3:aa:56:80:de:ce:3b:d0:fb:20:07:63:12:2e:
ca:e9:30:65:a1:2c:8b:0c:fe:ab:57:8f:12:14:e1:
df:dc:60:a7:f9:27:83:6c:6d:e2:cf:72:41:2e:e9:
32:ae:c7:f7:3e:60:74:7f:86:d7:52:11:28:3c:38:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:47:9D:3C:EB:68:AF:53:64:1B:52:BE:9D:0B:DF:3D:A4:0E:E9:3A
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:42:5f:00:5c:be:98:77:d2:14:0d:f7:c5:14:65:16:09:b1:
cf:48:c1:fe:a5:90:a8:2a:82:62:90:bd:33:b9:9a:e1:bf:80:
4f:bd:90:14:3e:e9:fa:29:2c:d0:60:0b:b8:d4:b0:b3:3d:e5:
5c:e4:ea:2a:fd:62:7f:20:93:59:2e:c3:d0:9d:af:35:4c:02:
ee:6d:86:72:54:a9:21:b4:53:c3:e3:25:b5:e6:e4:33:fc:8e:
70:04:96:41:b8:af:8b:80:ca:8e:1e:06:d8:19:35:fc:f8:dd:
e0:5b:cb:c2:d5:c9:8b:01:1e:66:00:99:68:34:8e:72:ed:9d:
5b:23:bf:07:c9:1a:83:51:a6:7c:26:99:f6:50:b8:dd:ca:f8:
9b:7e:e4:07:18:82:1f:a8:84:6c:c7:dd:88:48:a3:fc:90:44:
29:e4:f8:ea:36:a7:2b:e7:f8:03:da:eb:4b:c6:7f:a1:13:ef:
7a:44:b6:06:ad:d0:a5:49:f9:91:8f:2d:2b:14:5b:c7:86:d7:
c9:85:38:5e:6b:b2:a5:86:88:c3:3b:79:9d:66:90:0b:e5:a3:
00:53:a4:39:15:c5:99:ee:a1:fb:8e:d3:45:9d:cf:55:e3:d9:
60:dd:ac:12:c7:1a:b2:c0:07:4f:70:d5:64:27:58:8d:bf:5e:
28:76:62:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:07:31 2024 by rpki-client on console-ams.rpki-client.org