Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e372e302f32342d3234203d3e203231383539.roa
File: 3135392e3235332e372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: liSyGCrvYK1UwN6XPxyMvHnVWLSyw7gEli8+Vn768Vk=
Subject key identifier: 3A:3B:44:A4:BB:D5:C9:97:FA:F3:3D:83:50:CB:16:66:0A:F6:0E:56
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 06D9192DFF9F36E6BB14E002DFBDA70D768BF8B1
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e372e302f32342d3234203d3e203231383539.roa
Signing time: Wed 03 Jul 2024 07:16:27 +0000
ROA not before: Wed 03 Jul 2024 07:11:27 +0000
ROA not after: Wed 02 Jul 2025 07:16:27 +0000
asID: 21859
IP address blocks: 159.253.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 00:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d9:19:2d:ff:9f:36:e6:bb:14:e0:02:df:bd:a7:0d:76:8b:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Jul 3 07:11:27 2024 GMT
Not After : Jul 2 07:16:27 2025 GMT
Subject: CN=3A3B44A4BBD5C997FAF33D8350CB16660AF60E56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:a8:e6:49:55:68:db:48:ba:b0:e9:1b:14:
0e:89:7a:3d:7a:33:a3:08:35:bb:f4:8a:b3:de:82:
6b:d1:7d:a0:e8:2d:29:b9:33:af:80:2e:76:47:17:
f2:7c:51:45:46:11:87:f9:91:32:7c:13:6e:db:5a:
2b:8a:1d:80:9e:e7:ca:b1:30:ed:47:a7:7b:c6:0b:
b1:9c:17:0b:60:69:42:26:33:c1:a9:0d:6e:b8:42:
79:9d:d4:96:08:dc:55:1e:bd:6d:5b:c9:92:13:23:
1a:e1:6d:06:87:c1:78:a7:4c:8c:f6:bb:c8:08:8f:
df:51:d0:9f:9f:34:bd:f8:2c:12:6f:1d:14:ab:c6:
3a:c1:c2:dc:30:b7:c3:aa:ef:44:db:6b:3d:e6:4d:
c1:4c:a9:21:43:4e:58:f9:d6:db:1e:34:1b:72:c6:
e8:82:9c:1c:25:fa:7e:73:e6:3e:d5:59:a7:0c:02:
12:a0:06:7a:2c:e1:d1:93:be:58:43:e6:2e:e0:1c:
43:38:00:1b:fb:9c:23:7c:e9:63:91:c7:ec:16:35:
7c:aa:4c:26:97:80:96:ce:a7:fc:e2:a9:e4:63:cc:
76:5a:a8:cf:35:64:c9:7c:c2:1d:b8:9f:4f:92:03:
eb:53:8a:2c:c7:6b:94:81:dd:fb:2e:49:ec:1f:45:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3B:44:A4:BB:D5:C9:97:FA:F3:3D:83:50:CB:16:66:0A:F6:0E:56
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.7.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0b:b7:7a:60:07:c8:0b:90:6a:cb:1e:16:8b:14:68:a3:95:
a4:f0:0f:9f:5a:b6:bc:b8:4f:22:50:d7:d1:1d:07:b8:1d:6d:
91:eb:75:24:e5:4d:cc:46:7a:6f:87:70:de:02:9b:2c:50:c5:
55:18:b8:b2:d1:cd:b8:24:52:f8:06:12:b8:e4:36:48:5b:df:
ff:66:51:11:f2:42:68:57:e0:cf:14:ae:02:11:fc:5c:62:af:
f3:fd:e7:8b:15:55:14:58:45:1e:a9:7c:7e:56:e3:43:18:31:
ea:3d:5c:b6:6b:24:02:be:f0:26:07:eb:7c:14:0b:18:ed:6d:
16:2f:2c:85:7b:0f:b0:94:4d:01:fd:b9:ca:d1:b4:91:c3:86:
b0:34:c9:fe:ab:d1:35:a3:16:0b:52:64:07:b3:62:da:1e:ba:
85:c8:7a:cc:c8:65:7e:2f:2a:05:f8:59:e4:01:20:d9:b7:40:
1b:ed:ef:e7:b2:01:f4:10:be:a7:b4:29:57:b5:b8:1f:65:1c:
37:eb:cd:45:f1:dc:55:74:25:ea:87:9e:cf:4e:ed:c4:db:61:
33:b8:06:e8:92:34:ea:12:05:22:0e:5b:c6:87:38:db:49:b6:
33:e7:f1:a5:c1:17:40:80:d5:ae:51:4d:11:41:26:5f:97:31:
ae:da:1a:30
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 2 01:58:41 2024 by rpki-client on console-ams.rpki-client.org