Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203339363030.roa
File: 3135392e3235332e332e302f32342d3234203d3e203339363030.roa (raw, json)
Hash identifier: ZVlLefFrjrkm7UvGpi9cgMgmRsd1WwZbEvno5K/1p+g=
Subject key identifier: 01:5A:90:03:1E:99:79:0E:78:D8:34:0B:EF:4E:F9:36:A5:EA:68:DC
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 6A7F6D25B6F8C6E6504B5011542956EC904DCB74
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203339363030.roa
Signing time: Wed 18 Sep 2024 14:10:42 +0000
ROA not before: Wed 18 Sep 2024 14:05:42 +0000
ROA not after: Wed 17 Sep 2025 14:10:42 +0000
asID: 39600
IP address blocks: 159.253.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:7f:6d:25:b6:f8:c6:e6:50:4b:50:11:54:29:56:ec:90:4d:cb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Sep 18 14:05:42 2024 GMT
Not After : Sep 17 14:10:42 2025 GMT
Subject: CN=015A90031E99790E78D8340BEF4EF936A5EA68DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:63:41:1a:13:27:a9:3e:61:2f:2e:99:8f:
b4:35:6f:b1:b4:09:a1:90:d3:3c:7e:18:f5:20:93:
8f:99:16:a7:59:33:3f:af:50:4c:e2:84:0c:14:c8:
7d:1c:db:17:8e:6e:43:e7:5d:56:f6:d9:d4:17:68:
39:57:ad:54:d7:8a:50:82:5a:3b:e3:ee:5e:f8:ec:
89:22:34:d2:a0:ac:c6:77:cf:6f:7b:3b:c0:5c:b4:
16:0a:d7:f5:8e:a8:96:b3:94:7f:11:31:5c:d9:94:
42:51:c1:01:63:ba:25:24:d8:75:98:5c:ce:58:be:
c5:03:3f:2e:92:89:f6:18:6a:7e:e8:82:27:03:57:
d5:42:df:73:88:ef:98:82:02:50:44:6c:11:bf:d7:
b5:a6:78:4f:a4:7d:62:00:ce:1e:0b:75:ce:88:ce:
ca:eb:8e:67:2c:c3:60:ca:fd:66:c3:32:be:ea:80:
1b:c5:7e:7e:57:5f:8d:de:23:bd:bb:33:f5:18:3e:
bc:04:1b:67:98:0d:a7:10:97:5b:68:c8:d1:3a:35:
5e:f5:6c:8a:1e:23:95:db:9b:28:65:ef:84:a3:7d:
a4:73:6d:81:50:d6:0b:69:af:03:57:55:6a:07:c8:
b0:57:6e:97:aa:a8:8d:ba:00:16:1e:29:82:a9:31:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5A:90:03:1E:99:79:0E:78:D8:34:0B:EF:4E:F9:36:A5:EA:68:DC
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203339363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
74:af:18:ff:91:f6:66:30:e0:c6:1e:5f:bf:5e:6a:ca:ad:f0:
4d:b9:db:d2:37:7e:64:db:00:cd:01:c2:9a:ad:46:e7:c8:e8:
f1:fe:15:00:4f:3e:62:8c:04:dc:00:40:0f:a0:9e:c8:6e:d9:
06:1f:b8:53:c0:a4:84:4a:bf:69:00:49:5d:50:bf:f3:48:cc:
46:8c:7e:8b:9d:9e:d2:4f:b4:3a:bd:af:59:30:30:c3:d9:5d:
3f:a4:53:31:db:99:bf:7e:dd:b7:30:10:86:7b:df:0b:be:ea:
69:57:f4:a8:f7:59:5c:cf:97:fe:ea:3f:3d:29:96:b0:50:0f:
b6:d1:ff:b0:3b:e7:65:94:40:35:de:a4:a4:c5:86:06:57:d0:
db:66:11:c5:98:f9:29:ed:4f:1b:70:55:f3:18:1b:d0:1c:35:
66:57:d5:9c:0b:78:8b:df:aa:08:39:44:10:70:09:c2:f0:70:
08:ed:47:43:e0:45:1d:3a:42:74:7d:97:68:d8:e7:3e:ab:40:
ed:85:12:cf:31:8e:89:14:5b:8e:5a:78:82:3d:dd:dd:60:0e:
c4:84:0e:f2:42:06:1b:4b:02:3b:03:d7:73:e0:b2:11:cd:5e:
bf:f7:5f:7a:bc:ae:4a:fc:da:d4:57:12:cf:59:33:7e:6c:03:
a2:a7:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 02:00:29 2024 by rpki-client on console-ams.rpki-client.org