Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20323135323837.roa
File: 3134362e31392e3231362e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: ONU8GPVJMJ+BVGVIg8dNMLfuOmZKnCwV3uumXa2VdZo=
Subject key identifier: C7:AC:7A:0C:31:0C:99:91:8B:F8:3D:DE:C3:54:94:AC:98:72:84:CF
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 617E8F51223BAC894FD05DC6F46EBA306E1D6D7A
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20323135323837.roa
Signing time: Sun 25 Aug 2024 12:44:25 +0000
ROA not before: Sun 25 Aug 2024 12:39:25 +0000
ROA not after: Sun 24 Aug 2025 12:44:25 +0000
asID: 215287
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:7e:8f:51:22:3b:ac:89:4f:d0:5d:c6:f4:6e:ba:30:6e:1d:6d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 25 12:39:25 2024 GMT
Not After : Aug 24 12:44:25 2025 GMT
Subject: CN=C7AC7A0C310C99918BF83DDEC35494AC987284CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:d3:05:e7:f5:af:ee:62:af:1e:dd:d0:9a:
bd:f3:17:52:39:2f:ae:84:58:7e:d3:ce:22:94:d9:
c9:c4:b1:6e:b7:26:6b:c6:ad:ca:cc:37:1f:f7:9f:
c8:c7:92:da:18:82:a6:45:36:8d:e8:92:fc:59:b0:
34:9d:bd:0b:48:01:0c:7c:3d:c7:83:1e:75:3d:4a:
82:ea:57:d5:57:93:1b:00:da:dd:7e:03:33:fa:b5:
b7:9e:38:44:5b:ae:56:c8:66:92:70:69:45:a5:f8:
e3:11:ec:ef:0f:8a:d9:ba:7e:0b:3c:81:56:fa:b0:
0e:63:4b:8a:8a:d5:53:94:d9:dd:57:4e:c2:76:75:
0b:80:1b:01:ae:cb:65:77:68:86:f3:00:2c:ce:9f:
79:c1:db:59:c1:4a:a4:8a:49:04:e7:ef:ef:32:78:
66:4a:52:bc:b1:06:58:07:95:f9:8d:e0:7f:54:11:
2f:ed:e9:83:ba:c1:ac:04:70:3a:c9:2a:4e:55:4e:
31:6e:a4:07:ff:c6:0c:b5:8d:21:76:0c:1c:79:63:
17:1b:6a:74:ca:46:c7:26:64:d3:ed:ea:4b:4d:4e:
11:04:d9:60:a4:8c:d1:7d:90:91:f4:67:4c:74:6f:
11:b1:4c:16:36:66:30:a1:a9:71:7c:3b:23:ea:0b:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AC:7A:0C:31:0C:99:91:8B:F8:3D:DE:C3:54:94:AC:98:72:84:CF
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ae:bb:25:0b:8b:00:39:36:43:09:65:92:19:9b:8f:0e:10:
f0:06:5d:17:d7:cc:11:f7:71:86:af:1b:aa:1e:0b:c0:f9:88:
bc:0c:14:7c:0b:87:86:55:f2:78:89:29:a3:55:1d:2c:d7:85:
24:1b:03:1b:2a:7c:eb:f6:ad:11:f1:79:e5:37:be:cc:0b:03:
12:19:26:07:e8:c2:ff:b5:54:2a:9b:f5:9d:85:3a:ab:a7:38:
5d:50:81:66:cf:a8:c5:1c:8f:f8:83:04:7c:9d:63:d7:a4:bb:
b6:81:ab:10:2e:ab:4a:ba:63:35:6a:88:80:e5:38:b4:6c:21:
04:d0:c5:74:63:02:d8:0e:71:f2:52:9e:0d:9c:68:41:cc:2a:
f8:f4:76:ad:26:66:c4:c4:3a:ed:3f:4d:dc:45:20:3c:2f:19:
dc:64:46:bf:33:06:cf:2a:8b:12:81:68:c7:cd:45:4e:54:9e:
18:bd:8e:92:8a:51:f1:ae:68:1b:33:e5:88:26:01:34:3a:0a:
69:40:c0:54:db:d9:d8:82:aa:12:aa:ba:48:c2:fb:2a:47:51:
ef:8c:eb:c8:31:75:e3:33:d7:35:82:36:f2:41:ad:45:99:fc:
78:92:df:73:4c:e5:ca:25:d9:19:52:8c:75:ef:f9:b6:7b:d6:
dd:64:f3:4e
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 25 02:30:07 2024 by rpki-client on console-fra.rpki-client.org