Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e203130313033.roa
File: 3135392e3235332e352e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier: 6/FsEReYij5z5+eV3m/hf7gIcTPtjhdyJG49REqEk5c=
Subject key identifier: E4:88:38:AD:49:83:05:A3:CA:14:12:BC:40:1D:90:54:BD:43:5D:A5
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 263D40AF366929632A57B5BD9B6260CA826B01A8
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e203130313033.roa
Signing time: Tue 03 Sep 2024 05:44:54 +0000
ROA not before: Tue 03 Sep 2024 05:39:54 +0000
ROA not after: Tue 02 Sep 2025 05:44:54 +0000
asID: 10103
IP address blocks: 159.253.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 13:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:3d:40:af:36:69:29:63:2a:57:b5:bd:9b:62:60:ca:82:6b:01:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Sep 3 05:39:54 2024 GMT
Not After : Sep 2 05:44:54 2025 GMT
Subject: CN=E48838AD498305A3CA1412BC401D9054BD435DA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:88:a4:42:a7:63:eb:86:f9:dc:a3:b2:f3:
9f:2a:d9:28:de:6d:3f:d2:65:7d:cf:17:00:26:93:
3a:28:5c:a4:3d:c0:a2:8e:ab:61:cf:51:4a:f8:1a:
8f:e6:84:4f:86:8e:f3:68:1c:ce:fc:60:82:56:c2:
78:83:5b:39:8b:41:43:9e:ff:2d:5c:10:62:20:d6:
03:3e:e1:ef:0c:4b:51:c2:e1:d9:c6:00:58:df:23:
d2:d7:b7:34:9d:5c:79:7b:8e:68:e1:20:7a:20:b5:
b0:42:d2:26:50:71:7d:cb:51:13:8b:51:4a:73:9e:
32:1c:87:7a:fc:ed:11:98:00:3b:0b:19:b6:66:66:
20:9e:cd:fd:b6:bc:8a:60:3c:91:49:47:50:96:29:
03:86:06:9b:ab:e2:53:b9:6f:40:bd:5e:dc:8f:4c:
e1:29:9b:53:d6:31:a3:13:a0:e5:2e:90:d9:96:71:
ed:31:f5:ed:57:81:69:64:93:43:c0:51:08:b2:e2:
b6:2f:f4:54:01:ce:81:52:91:14:ba:27:b5:8e:94:
51:e5:53:39:0e:27:4b:a7:65:e1:61:70:4c:4c:48:
06:21:bb:d6:5d:9b:a3:a2:09:b1:24:f7:90:00:09:
bf:cb:5c:f5:69:cb:96:0f:fe:f1:f0:69:3a:2e:e7:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:38:AD:49:83:05:A3:CA:14:12:BC:40:1D:90:54:BD:43:5D:A5
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:81:c5:30:1d:1c:24:07:92:05:5b:33:fb:f0:e3:2b:fc:47:
9f:91:57:57:a5:30:26:80:00:5b:2d:8d:ef:ff:8e:20:18:fe:
3f:cd:db:06:23:57:50:c8:be:d5:76:2f:c1:35:22:e7:9d:d7:
bb:6e:25:f6:ae:96:9a:ae:22:6a:c0:f9:8c:ed:fe:b4:18:c6:
a0:d3:ed:e9:fe:89:de:2e:20:b6:eb:52:e8:1f:54:66:46:46:
15:05:c1:3f:ef:5f:63:2c:85:2b:1d:dd:6d:2b:a5:5e:f6:3e:
f6:04:9a:8d:c4:a8:4f:86:21:44:f6:4b:44:6b:b2:6e:2f:6c:
04:6a:76:c9:4c:61:a8:6b:71:a6:d2:2a:06:f7:cf:b9:e4:30:
e2:0e:f7:49:bd:2e:85:3d:ca:0c:3d:cb:b7:e4:43:a1:f1:e3:
5a:0f:1d:20:dd:1c:d9:fb:6c:de:e0:5b:b8:09:ba:2c:fe:50:
88:8a:5e:b0:8f:02:20:a4:44:14:91:12:35:f5:3f:f8:2e:a7:
06:f9:3d:e7:91:d0:35:97:e5:16:c7:fa:f4:b0:d1:0d:0f:26:
67:ae:06:02:35:e5:90:92:0a:06:c2:51:40:38:26:a0:fc:c7:
0d:ae:ae:97:b4:0c:24:5d:81:08:fb:95:f9:53:9d:84:d5:c2:
7b:e9:d8:1c
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 18 19:07:31 2024 by rpki-client on console-ams.rpki-client.org