Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20313431373539.roa
File: 3139332e3230302e3130322e302f32342d3234203d3e20313431373539.roa (raw, json)
Hash identifier: tIMMUOG+ejnezhNNit4/wOWiKKgmenve49hODYiUl3c=
Subject key identifier: 75:35:02:DC:6E:16:9E:DD:63:68:87:C7:4E:EB:3A:47:A2:54:1C:56
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 34F243F1A4C3B67C9C46D3F2033912C7B3322897
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20313431373539.roa
Signing time: Wed 13 Mar 2024 01:32:57 +0000
ROA not before: Wed 13 Mar 2024 01:27:57 +0000
ROA not after: Wed 12 Mar 2025 01:32:57 +0000
asID: 141759
IP address blocks: 193.200.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 02:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f2:43:f1:a4:c3:b6:7c:9c:46:d3:f2:03:39:12:c7:b3:32:28:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Mar 13 01:27:57 2024 GMT
Not After : Mar 12 01:32:57 2025 GMT
Subject: CN=753502DC6E169EDD636887C74EEB3A47A2541C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:95:45:c5:29:40:b9:37:6f:86:71:8f:7f:
26:ad:5c:64:ed:ae:7b:91:f2:f8:95:6f:28:4a:78:
e6:63:49:47:b1:2c:51:3f:b4:27:63:ce:b1:08:ab:
7c:d4:98:66:30:d0:9e:87:c9:fd:b0:8c:07:67:c5:
ba:b4:ba:22:90:30:dc:e2:5d:21:dc:de:1e:3e:f1:
18:a2:cf:54:74:2f:ab:e4:a5:5e:01:9b:fa:1d:34:
5c:e6:a1:4a:87:ba:c1:92:3b:bd:06:b0:e2:be:66:
9a:e6:0b:8b:93:b8:09:5b:46:24:45:f3:d9:c6:14:
5a:5b:14:6b:f7:80:0b:f1:d8:66:c1:ab:8c:6b:2e:
e0:a5:98:3a:45:25:20:0b:ef:e4:2b:ac:28:13:f5:
24:34:4f:12:3d:6f:ea:f8:72:3b:65:59:ab:26:98:
c0:b6:c0:75:96:96:60:46:7b:96:d1:eb:3b:90:25:
c8:80:ef:1c:ab:d3:b4:21:a1:4b:a7:12:af:01:e5:
8b:4d:8b:28:5f:81:cd:bc:65:b3:41:38:1e:60:4a:
52:03:bb:38:44:d9:35:f7:32:46:f8:f3:cf:04:d2:
16:cb:43:c5:be:aa:a6:8b:f3:c0:65:51:ef:ef:f7:
80:52:2e:78:e2:08:0c:17:45:2a:66:b6:36:42:5e:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:35:02:DC:6E:16:9E:DD:63:68:87:C7:4E:EB:3A:47:A2:54:1C:56
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20313431373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.102.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f1:55:a8:4f:93:cd:7e:84:c2:5a:6b:fc:1b:eb:2d:e0:3d:
ac:d6:9e:cb:42:34:94:1f:2c:91:c2:34:6f:f6:2b:76:c6:1a:
c9:a2:ac:f7:51:b1:e6:8a:2f:08:c8:ae:5b:f7:e1:36:bb:44:
78:b9:e3:a8:8b:b6:58:ff:f0:2f:98:46:01:d2:04:c9:11:39:
8d:83:44:ec:6b:17:e7:79:0d:41:bc:30:4e:ed:a0:4b:91:bd:
2c:0b:5e:72:23:e3:03:08:aa:12:41:6e:46:4b:9d:62:cf:28:
fd:74:d2:2b:55:e1:27:19:44:2b:41:0b:f3:eb:5a:d7:19:4a:
b5:c5:9a:c9:66:d3:b2:d2:ac:a0:5b:dd:96:03:8e:a1:55:47:
80:51:79:75:0d:92:8a:03:90:57:56:1a:b5:a0:34:cd:13:12:
b2:dd:84:f6:41:76:ea:7a:e4:58:68:6f:d3:d0:78:9b:a2:41:
6c:06:2c:23:3b:21:00:16:be:44:fc:5f:62:2d:8f:2b:af:4a:
1d:68:5c:61:98:f7:c2:dc:f7:1e:b2:35:e2:f7:01:f9:24:89:
8c:37:5f:b7:86:ad:56:8c:a1:53:82:2f:b9:55:46:7d:21:11:
62:db:69:1a:03:c8:fc:3a:c3:84:5d:47:a4:c1:72:e2:b2:23:
fb:ca:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 04:28:30 2024 by rpki-client on console-fra.rpki-client.org