Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20333939303435.roa
File: 3139332e3230302e3130322e302f32342d3234203d3e20333939303435.roa (raw, json)
Hash identifier: 85IVNUETpVcJ1ttmrSN0VjaHYZye9P5aHAxAk2lwSiE=
Subject key identifier: 3F:2B:DA:21:DF:3A:B9:BB:A4:29:C5:77:B0:60:3D:11:87:87:97:D6
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 1A3FAD6430609B14C4C8F2E56BECE3484E1EECCB
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20333939303435.roa
Signing time: Tue 14 Nov 2023 09:14:35 +0000
ROA not before: Tue 14 Nov 2023 09:09:35 +0000
ROA not after: Tue 12 Nov 2024 09:14:35 +0000
asID: 399045
IP address blocks: 193.200.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 07:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3f:ad:64:30:60:9b:14:c4:c8:f2:e5:6b:ec:e3:48:4e:1e:ec:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Nov 14 09:09:35 2023 GMT
Not After : Nov 12 09:14:35 2024 GMT
Subject: CN=3F2BDA21DF3AB9BBA429C577B0603D11878797D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:16:a6:51:dd:ef:3a:bb:48:d0:d5:c5:51:
e8:14:a0:c3:c2:3d:d2:9f:86:90:c9:8e:1b:4a:e2:
ab:f6:fb:a2:92:c1:a8:5a:8a:f9:67:6d:ce:25:3e:
92:e5:e9:5a:74:30:e8:d4:22:e5:ab:da:cf:66:bd:
0b:1d:1d:85:73:0a:19:a6:f7:9b:91:8a:05:94:d9:
96:35:5c:ba:eb:44:ea:c0:dc:90:7a:7f:e1:bf:82:
92:af:74:d6:70:83:12:d5:dd:11:62:91:b0:71:a8:
cc:e7:71:b5:75:60:bb:8c:a9:bb:2b:1a:00:b9:54:
50:14:16:73:c9:ac:5b:6e:61:d9:0d:22:04:f1:13:
f9:18:fa:df:f5:f7:a5:59:43:5c:31:0e:a0:f4:da:
54:7e:30:23:e3:96:a0:4b:14:05:30:06:3b:68:fc:
a7:be:df:2f:4c:2c:a1:79:59:64:41:97:90:ae:ed:
92:0e:7b:09:77:5f:47:84:8c:8f:8a:07:84:ab:40:
11:5f:8e:7f:cc:bb:e5:27:28:bf:15:45:13:9a:d4:
f9:e7:f8:c7:a3:b7:2b:3c:09:d9:68:38:c3:14:fa:
1a:53:57:c6:60:a4:13:9a:e2:a2:11:bb:ae:06:fe:
f3:cd:c6:53:6c:c6:d7:f6:c3:97:91:93:71:dd:bf:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:DA:21:DF:3A:B9:BB:A4:29:C5:77:B0:60:3D:11:87:87:97:D6
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130322e302f32342d3234203d3e20333939303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:b6:a1:3f:9d:24:80:5d:fc:3f:91:4a:5c:12:dc:e4:b1:c1:
11:0d:75:5b:53:41:03:63:b3:f1:d0:1b:75:4a:55:f5:8a:b0:
ca:e3:0d:d7:01:a1:96:3b:c0:c9:3c:b2:13:e0:d4:d3:88:d2:
7c:d3:6d:29:d8:7f:bf:9c:e0:88:df:b6:81:01:2e:5d:af:e8:
13:f4:91:f6:0e:b2:68:d3:60:b9:bb:63:ad:06:cf:2e:b3:73:
e2:c8:96:7a:37:79:e5:2f:ba:6c:9f:17:95:eb:dc:74:ef:a0:
41:f9:81:5a:32:c3:12:7e:42:33:b6:4a:28:b6:6a:51:35:b6:
5c:f6:0d:98:99:d3:8d:f6:20:8b:b1:0b:f0:33:b1:c3:15:80:
79:7a:d5:ba:55:e5:7e:11:c4:66:65:db:ae:36:56:97:fd:47:
0b:b3:a2:58:76:89:37:d7:6e:6a:12:d6:1f:69:86:cc:aa:97:
b3:d4:c7:c5:d3:b6:14:43:88:6f:19:5e:d1:56:b3:03:9f:71:
57:89:30:5f:91:dc:5c:0b:1e:af:27:8e:c9:f6:d6:d0:eb:38:
4c:20:ed:c9:4a:ae:2b:40:7c:41:41:3b:9c:02:1c:56:00:a7:
c3:d4:6d:09:15:f4:2f:25:19:0a:c1:da:cf:fa:29:19:ff:49:
c6:16:24:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org