Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20383334.roa
File: 3133302e3139332e37352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Z5hjF8KqFnCl+himOhQgzaW6Rtg4lUDhhEDAruy2YRM=
Subject key identifier: FA:3B:2B:72:A2:3D:C7:E1:AA:39:09:17:3E:E8:44:73:38:92:59:65
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 6433ACCCCE240AD63C7D89CFA9AC2BACDDE7D303
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 15:47:18 +0000
ROA not before: Thu 22 Feb 2024 15:42:18 +0000
ROA not after: Thu 20 Feb 2025 15:47:18 +0000
asID: 834
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:33:ac:cc:ce:24:0a:d6:3c:7d:89:cf:a9:ac:2b:ac:dd:e7:d3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Feb 22 15:42:18 2024 GMT
Not After : Feb 20 15:47:18 2025 GMT
Subject: CN=FA3B2B72A23DC7E1AA3909173EE8447338925965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:4b:e2:f6:4a:8b:dc:da:f2:56:89:cb:a3:
b1:03:c4:b4:3a:e9:16:74:62:6a:28:16:16:2c:2d:
ce:87:30:b7:33:4f:a1:75:dc:36:99:5f:35:81:55:
91:a4:aa:f0:69:1f:2c:eb:b9:f4:e8:8a:87:8c:de:
a4:9d:23:32:12:5b:11:e1:89:49:d5:e4:cf:59:bf:
ab:61:c0:0d:c8:79:1d:42:00:e3:ed:15:3a:bc:46:
ab:4f:7c:44:f0:c2:e3:a2:65:85:3f:d9:48:be:b4:
90:04:d7:e2:36:36:53:b4:b1:b6:e6:d7:20:b7:1c:
be:91:89:8a:7c:69:d9:73:6d:30:80:04:03:e9:e7:
28:d6:79:e6:0e:78:d8:a7:da:8d:be:01:1d:4b:75:
ef:dc:51:96:f2:7c:fa:96:4e:b1:f1:63:56:15:fe:
fc:ce:60:1a:58:e4:62:d7:79:0d:01:58:11:b3:43:
89:38:6d:d3:ab:58:74:c6:fa:6f:8d:96:e8:10:f4:
34:19:1a:82:a5:b0:2b:47:f8:ef:46:ca:f4:a2:6c:
19:d2:7a:b8:c6:f2:dc:aa:54:bd:47:8e:87:71:16:
d5:11:16:62:b3:8e:42:16:0a:aa:86:45:6b:47:0c:
e3:cf:b0:43:65:b1:ee:62:4a:05:5f:96:7b:dc:4f:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3B:2B:72:A2:3D:C7:E1:AA:39:09:17:3E:E8:44:73:38:92:59:65
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:59:4d:ae:8a:79:ca:94:f0:8c:94:af:19:c5:63:7d:3c:c9:
fb:9d:f4:7a:26:5f:5d:c8:b1:8f:4d:f7:2d:73:ce:7d:f8:6b:
18:08:02:33:04:d3:04:ab:1e:c1:5b:3c:4e:ea:64:cf:e3:69:
01:ef:72:78:a4:19:5d:84:94:73:26:31:49:0b:0e:54:48:72:
ea:ba:49:ef:18:b2:50:6c:f7:91:eb:17:a1:17:18:b4:dd:37:
af:53:8b:04:f4:31:f0:b4:10:8d:ed:7a:0a:cf:77:3e:b6:9d:
89:e5:51:8c:ad:48:96:d4:20:8f:7a:23:75:43:29:65:44:5e:
d6:d4:56:aa:7f:27:d3:40:fa:1e:76:53:78:40:4d:b5:39:49:
46:12:95:f6:b9:75:53:cf:e1:67:63:f8:c5:be:11:7e:ff:c2:
05:a7:73:5a:a1:43:7a:7b:22:fb:76:de:be:3b:13:3c:a7:69:
16:66:29:81:04:d9:cc:24:4d:f9:38:da:b6:c6:8f:15:66:c0:
fe:a8:99:59:cb:18:bc:7e:8e:82:45:5b:f1:77:fa:40:12:f8:
79:2a:95:fa:d2:6c:8d:f7:5e:c6:e1:89:45:7d:5d:0c:64:d1:
ee:88:62:9c:c5:97:da:cd:61:4d:ca:3b:78:b1:d8:8f:f4:3f:
8e:e9:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:15:35 2024 by rpki-client on console-ams.rpki-client.org