Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e203136323736.roa
File: 3135392e3235332e362e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: V7xPi6knZKARQlLvAnhE6qDn3KJ2gAFgn9uxGs0cx7I=
Subject key identifier: D2:0A:0C:29:CF:E3:72:AF:66:D5:D7:0D:43:E5:D1:7D:7C:8A:AB:69
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 4B824336218EFF7AE5D21BC4293C732A7262F0AC
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e203136323736.roa
Signing time: Thu 03 Oct 2024 09:23:03 +0000
ROA not before: Thu 03 Oct 2024 09:18:03 +0000
ROA not after: Thu 02 Oct 2025 09:23:03 +0000
asID: 16276
IP address blocks: 159.253.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 09:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:82:43:36:21:8e:ff:7a:e5:d2:1b:c4:29:3c:73:2a:72:62:f0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Oct 3 09:18:03 2024 GMT
Not After : Oct 2 09:23:03 2025 GMT
Subject: CN=D20A0C29CFE372AF66D5D70D43E5D17D7C8AAB69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:60:5e:cb:97:62:e4:da:e4:3b:91:a4:c5:
bb:ae:ce:ba:42:27:f7:a7:d8:7e:93:44:7e:5c:bd:
75:0f:1c:27:f3:76:c3:7b:13:67:ad:17:83:2a:80:
44:cb:fe:2f:f6:c2:0e:e2:0c:07:5d:0b:2e:df:a9:
20:d5:ff:5c:eb:5f:17:ef:7a:bc:dc:2a:08:21:db:
fb:39:c7:b0:f9:7a:dd:44:3e:8a:06:2f:a8:ab:78:
c7:17:4d:f9:15:08:ca:f7:0a:ed:1e:9f:e6:5f:2b:
08:3a:9f:f0:7a:c3:37:9b:7b:77:5c:a6:e2:fb:51:
b5:05:32:d7:03:cc:aa:ae:35:df:8e:b0:f0:ca:b5:
87:a6:db:cc:27:93:df:ad:5c:c3:40:f7:4b:ec:00:
16:70:e2:0b:7c:24:56:51:ee:80:c2:c4:7f:d4:e8:
d1:c1:dd:fb:36:90:13:6b:24:ec:7c:85:1b:f3:49:
81:fa:a4:bc:f0:f4:2d:24:2f:a8:84:bc:31:c9:78:
a2:ed:90:c2:2b:b1:40:fe:61:8f:1b:15:e1:2b:09:
6d:8b:15:59:06:17:37:92:a3:97:4b:c9:c7:80:82:
42:9d:ee:d8:b2:59:a2:5b:51:ce:c5:5c:6b:9d:47:
b1:59:d2:91:14:37:12:32:b6:b2:68:15:a2:4e:21:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:0C:29:CF:E3:72:AF:66:D5:D7:0D:43:E5:D1:7D:7C:8A:AB:69
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.6.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9c:b4:8c:25:e0:55:11:55:8a:2c:a1:87:4c:cd:4c:9b:a8:
81:b6:7d:c6:cf:74:81:15:76:69:5e:ec:68:f9:9d:a2:14:9d:
3e:0f:16:9d:4e:6a:d3:8e:a8:31:c1:3f:5a:5c:7c:12:ca:12:
a6:63:5f:ea:aa:8b:d5:0b:de:bd:ce:c7:a0:12:09:dc:5b:d5:
23:7f:36:f6:c7:99:ae:9f:3b:81:df:01:84:a5:8f:d4:86:32:
1e:36:f6:58:78:85:cf:1f:f3:fe:f9:58:e5:2b:01:b8:25:1d:
57:d9:68:e5:c2:5c:b5:8e:d0:bb:88:29:00:4e:2f:37:e0:1e:
25:f5:1a:03:10:e2:a8:ba:2b:bf:66:22:cd:f5:e2:35:87:14:
88:c9:25:0a:df:95:74:3b:fb:42:c7:8f:b7:d5:09:86:03:80:
5a:41:f9:a0:1b:fb:14:2e:d5:0f:d9:70:c9:c6:98:68:19:eb:
c2:b2:e9:dd:50:c0:65:10:cd:b3:90:f4:78:f1:db:ac:a5:0e:
02:cf:a6:64:f7:74:5a:9e:5e:b2:5f:55:aa:c3:d9:59:87:e9:
59:45:4d:77:11:b0:07:47:03:cb:17:28:22:c5:f9:ff:2b:e8:
91:7b:e9:75:76:2c:04:07:ee:2e:ac:7d:2c:0a:77:72:59:6e:
03:55:e5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 12:16:05 2024 by rpki-client on console-fra.rpki-client.org