Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20323132353137.roa
File: 3139332e3230302e3130322e302f32342d3234203d3e20323132353137.roa (raw, json)
Hash identifier: oAN4+7Y88EDCmRZqz2lcRYZ6W2tdYyZ8vw4XfAJYCLw=
Subject key identifier: 34:D6:3C:1B:11:00:4F:9C:8D:EA:4D:92:E9:A9:0D:43:CB:DD:E2:07
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 0C40E725EC011A47575DB6A58C9FAC931158541B
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20323132353137.roa
Signing time: Tue 12 Mar 2024 06:15:39 +0000
ROA not before: Tue 12 Mar 2024 06:10:39 +0000
ROA not after: Tue 11 Mar 2025 06:15:39 +0000
asID: 212517
IP address blocks: 193.200.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:40:e7:25:ec:01:1a:47:57:5d:b6:a5:8c:9f:ac:93:11:58:54:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Mar 12 06:10:39 2024 GMT
Not After : Mar 11 06:15:39 2025 GMT
Subject: CN=34D63C1B11004F9C8DEA4D92E9A90D43CBDDE207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:15:55:48:9a:99:9f:67:b4:16:21:a0:75:
cb:93:90:ec:bd:d4:7f:c4:79:df:4a:f3:ef:98:0c:
1d:ce:b8:e7:58:22:05:71:86:26:a2:46:9d:23:9f:
0b:95:a0:99:c7:0b:6a:ef:1d:c5:8b:cc:4f:54:c3:
e9:87:73:b3:f2:25:85:94:34:2a:cf:25:90:f5:03:
f6:93:a4:fa:07:55:71:cb:b9:25:f5:c6:9c:4e:b5:
ec:ac:2c:8c:d7:79:60:66:36:9e:e9:1e:a0:e5:a4:
13:21:d6:1a:d1:09:fd:00:d8:54:db:0c:e2:92:fd:
58:fe:a1:35:df:6c:ac:08:ec:d9:49:3a:17:d8:20:
15:dc:7c:9e:95:5f:14:23:57:1a:04:2c:c4:82:f1:
cb:9c:58:78:a9:3e:85:b9:e3:3c:01:08:7d:39:45:
a9:b5:f3:d7:ec:d2:e7:e1:0c:64:51:23:f9:09:94:
10:08:fb:07:6a:49:7c:d0:ee:30:44:e5:37:de:5c:
7f:de:91:a3:85:3c:1a:29:5e:62:4e:bf:b7:d8:8d:
68:d3:7c:fe:5d:ba:b7:c7:46:21:82:99:53:aa:50:
2e:05:b6:38:a0:6d:87:2c:6e:c6:bf:b3:02:c5:41:
8b:8f:85:09:b3:23:c9:ad:ce:b3:fc:a9:f4:40:dc:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:3C:1B:11:00:4F:9C:8D:EA:4D:92:E9:A9:0D:43:CB:DD:E2:07
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20323132353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7a:67:a8:4c:84:ad:da:7d:35:f9:60:de:33:57:6e:b1:d2:
b3:00:60:13:0e:d9:5a:3e:59:03:57:cf:65:ff:df:74:e9:2b:
52:4e:21:b3:a5:b6:fc:90:14:a7:92:cc:fd:cc:d1:69:60:0b:
16:77:51:d1:5d:66:5d:db:1e:7a:5b:62:c1:ea:50:c9:9a:5f:
4f:ff:8b:d4:e7:ba:e0:8c:1c:ee:87:d1:5c:68:0a:ab:77:3a:
f3:34:d7:f3:a1:dc:bf:ac:00:f4:65:d1:18:ee:c8:4b:db:94:
55:2e:64:a8:4f:ad:fc:64:31:df:38:93:93:7d:38:b5:e6:a2:
9b:5d:13:b7:d9:44:4d:0c:ab:29:bf:39:8f:2e:0e:7f:73:c8:
44:f5:c1:32:0f:4a:f0:70:c7:b1:3b:a9:df:07:03:59:96:90:
d8:14:00:e1:37:85:1d:cd:33:2d:0c:1e:06:7f:6d:6e:4a:b9:
f2:35:94:84:57:32:b4:be:fb:0f:cd:18:a7:75:95:0a:3b:80:
49:f2:4e:ff:9d:f7:8c:1e:0e:ea:e7:b1:d6:30:c8:50:96:6a:
fd:2a:aa:96:9f:31:dd:ba:8e:2d:65:1f:d5:89:f3:f1:da:17:
82:fe:93:24:18:a6:e3:c0:65:3e:af:fd:24:9d:46:db:83:69:
18:80:8c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:20 2025 by rpki-client