Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e2037303138.roa
File: 3135392e3235332e362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: uBXJVFDDeAWg7tzUvMXk62RK7I4etH3T+aVL3L31uTY=
Subject key identifier: BD:CB:74:2A:B0:F2:33:64:E6:DA:2E:75:78:B3:4B:DE:EA:DD:0E:D9
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 0B3839507A30AC0E4B294CFB2827CA16C368C462
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e2037303138.roa
Signing time: Tue 13 Aug 2024 19:06:30 +0000
ROA not before: Tue 13 Aug 2024 19:01:30 +0000
ROA not after: Tue 12 Aug 2025 19:06:30 +0000
asID: 7018
IP address blocks: 159.253.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 10:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:38:39:50:7a:30:ac:0e:4b:29:4c:fb:28:27:ca:16:c3:68:c4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Aug 13 19:01:30 2024 GMT
Not After : Aug 12 19:06:30 2025 GMT
Subject: CN=BDCB742AB0F23364E6DA2E7578B34BDEEADD0ED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:ca:a2:3a:fe:55:88:5a:12:5b:62:e2:21:
9b:7b:57:4e:97:f1:92:a9:3b:92:fe:22:21:4e:2b:
85:b6:31:0f:23:1f:c3:15:eb:0b:d4:42:36:d7:f4:
3f:fa:06:17:7b:d9:7e:27:3b:5b:8c:4d:d5:2d:dd:
bb:4d:db:ee:93:b4:87:2e:fa:f7:f7:8d:08:3e:41:
c8:35:dc:df:f0:ff:63:14:38:fc:44:54:96:78:b3:
29:7f:b1:b3:c3:13:cc:e6:7c:3d:99:28:56:65:f6:
64:a0:f2:2c:67:2e:44:39:e0:02:14:c0:fb:8b:09:
a0:25:28:65:cb:1e:06:de:9f:d5:f8:99:9a:62:df:
8f:b7:8a:4d:4f:d4:7c:a1:54:91:80:a9:8b:1b:69:
d1:b0:55:70:fd:96:a5:57:8f:64:a0:4e:11:33:48:
03:b4:ca:23:e7:b5:13:1c:23:15:2c:9d:f3:9a:0c:
6b:70:af:3c:9d:3a:1e:6d:d9:84:c2:74:ed:53:69:
e3:69:4a:90:5e:34:31:cd:06:7c:29:43:ca:79:c3:
f5:96:25:89:03:74:dd:42:62:f1:74:3d:8b:80:07:
f7:32:79:8a:53:23:e2:36:1a:db:ce:1c:1e:44:81:
72:d7:2f:c0:30:91:c5:86:92:e7:49:00:cd:30:12:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CB:74:2A:B0:F2:33:64:E6:DA:2E:75:78:B3:4B:DE:EA:DD:0E:D9
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ce:af:a5:90:86:f3:d6:38:cd:1a:b4:a1:ca:9a:b0:0b:5e:
a4:a2:fc:8e:67:86:85:87:39:47:cf:0f:3d:84:2c:3a:40:dd:
76:f6:ad:30:24:c4:f5:26:ac:95:e0:a7:d6:84:48:3b:88:aa:
26:fb:a4:df:70:5c:a3:d7:7b:56:bd:bc:4e:64:f7:5e:01:98:
ca:9c:54:f6:b7:53:09:c1:78:bf:1c:51:09:f8:6c:b2:b5:6f:
64:a7:ef:c6:88:7d:5b:2c:d7:4d:6c:1c:49:b8:02:c6:f8:73:
7f:58:41:b3:2c:93:bd:43:4b:f5:d7:58:c5:dc:04:07:d2:d4:
de:08:96:f8:c3:59:1b:98:10:c4:88:62:af:f8:e2:6c:46:74:
0e:0b:00:2b:81:6c:99:d4:d5:58:76:fb:76:9b:b0:35:75:39:
e1:a9:0f:79:a7:45:49:ab:bc:10:5e:fc:1b:1e:ae:9a:71:f5:
0b:15:56:a2:29:ef:b8:52:ba:43:cb:e7:22:fa:2a:2f:d5:13:
79:ff:bb:a7:1e:ca:0b:53:1d:d9:0d:75:43:42:5e:46:26:be:
b2:3b:fb:1d:e2:4d:a8:fa:d0:60:d8:36:ec:f6:55:b2:16:17:
05:9e:53:83:fa:d1:e4:44:6d:db:99:31:97:f3:56:bd:2e:4f:
f7:27:df:fb
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 12 14:04:24 2024 by rpki-client on console-ams.rpki-client.org