Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e2037303239.roa
File: 3135392e3235332e362e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: TX5yow5mEribW/mi+Zf3WAtuLpU604tnjFikq4p9dkE=
Subject key identifier: D7:3C:B1:0C:9A:57:A0:17:43:DD:1D:B8:62:54:D9:DD:B1:47:BB:BB
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 23CE10F63903BA78EA82662F667B583F14075C51
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e2037303239.roa
Signing time: Tue 13 Aug 2024 13:37:45 +0000
ROA not before: Tue 13 Aug 2024 13:32:45 +0000
ROA not after: Tue 12 Aug 2025 13:37:45 +0000
asID: 7029
IP address blocks: 159.253.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 19:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ce:10:f6:39:03:ba:78:ea:82:66:2f:66:7b:58:3f:14:07:5c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Aug 13 13:32:45 2024 GMT
Not After : Aug 12 13:37:45 2025 GMT
Subject: CN=D73CB10C9A57A01743DD1DB86254D9DDB147BBBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:a8:8d:ef:76:ea:67:d2:34:70:bc:06:b4:
81:8d:39:5c:5f:49:f9:5e:95:8b:10:91:24:21:f1:
46:65:f8:25:24:58:e4:76:d8:76:b1:22:68:1c:f0:
64:9d:5a:fe:fb:9a:bd:1f:a5:91:9b:43:bb:0e:72:
48:4d:44:ab:66:40:72:ea:6a:bc:61:52:d0:eb:f5:
58:43:dc:26:d5:47:b7:a1:21:a3:d9:95:79:8b:d0:
fb:4c:d5:fc:ff:d7:22:6d:75:4f:7e:08:8b:fc:5d:
40:fb:36:0c:d5:32:63:39:64:ef:a4:ab:4d:3c:f5:
45:d6:ab:6e:b6:68:dc:75:86:5b:25:74:c9:8c:48:
f3:5c:7e:70:97:05:9e:40:91:ac:57:86:7b:ef:89:
e9:47:f7:5e:d7:88:0b:c6:de:aa:27:74:03:a4:a9:
ae:25:33:96:20:8e:50:a0:dc:6a:02:77:c0:f4:6f:
58:91:f7:09:4d:3d:64:4a:f7:ff:8d:e7:17:07:18:
f0:00:9d:e2:b5:0e:1b:0c:c7:f4:b1:9f:b5:5f:8e:
b6:82:ab:cc:d9:82:17:be:2d:1e:25:f1:01:6d:b7:
88:49:da:38:c6:71:ea:97:90:85:ab:23:37:2f:4a:
37:a1:f4:d4:eb:d3:59:c6:10:51:57:5f:e1:e1:19:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3C:B1:0C:9A:57:A0:17:43:DD:1D:B8:62:54:D9:DD:B1:47:BB:BB
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.6.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bd:4f:80:25:ea:6a:b3:de:7a:a9:c0:21:31:4e:7a:cb:df:
ea:26:5a:29:7f:8b:bb:da:f9:38:48:89:be:1a:9b:34:ee:6e:
bd:e2:1d:5d:4f:c8:4b:e1:a7:f1:29:fc:60:a7:84:91:8a:59:
77:36:1c:11:68:23:36:1e:1d:97:94:62:03:3d:10:0a:0c:4a:
26:0b:5d:1b:ec:3a:fc:b8:45:38:52:6c:35:d6:d6:10:ae:de:
fc:d7:eb:d7:d9:8a:0c:86:0e:b6:54:f4:e3:f1:67:62:d6:ca:
df:80:c3:18:cc:32:55:68:87:84:11:ab:b2:d1:2b:c1:3b:a6:
b0:16:2d:78:b0:b2:d9:c7:e1:a0:84:05:68:5f:cb:ce:0c:7e:
be:bc:b9:93:3d:25:fb:27:86:c2:51:5a:a2:c0:5f:88:ee:52:
e9:bc:14:d2:61:9c:82:62:f9:82:8e:99:a2:e7:21:82:7e:20:
ce:da:49:b4:6a:a1:6d:fb:91:41:62:48:f8:61:56:7d:b5:79:
00:7d:e4:47:c9:f5:91:8e:16:65:ac:08:d2:9b:54:01:32:bd:
21:79:92:6c:2d:41:68:73:27:f5:e0:63:39:d7:7d:22:21:34:
c3:2a:b8:e9:9f:c3:d3:fa:f9:de:35:02:ac:28:d2:b0:5b:4b:
a7:f9:3e:23
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 13 22:07:14 2024 by rpki-client on console-ams.rpki-client.org