Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20383334.roa
File: 3134362e31392e3231362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: tGZFVgUu7uMInYn+tnpM635M95L5UcPpdgxhb2AQd2I=
Subject key identifier: 19:6D:F7:06:E4:BE:9F:80:42:79:ED:31:F6:7C:3D:FB:48:3B:3F:AC
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 4E10260D68E87B8CDE5A2047847D32C89A5DA164
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20383334.roa
Signing time: Wed 25 Sep 2024 00:04:28 +0000
ROA not before: Tue 24 Sep 2024 23:59:28 +0000
ROA not after: Wed 24 Sep 2025 00:04:28 +0000
asID: 834
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 07:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:10:26:0d:68:e8:7b:8c:de:5a:20:47:84:7d:32:c8:9a:5d:a1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 24 23:59:28 2024 GMT
Not After : Sep 24 00:04:28 2025 GMT
Subject: CN=196DF706E4BE9F804279ED31F67C3DFB483B3FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:56:7f:ed:f2:5f:05:65:0c:1c:fb:7d:8b:
84:a7:d6:8b:ef:49:e4:d9:91:5f:76:d3:0f:f3:f3:
c0:1c:bc:25:de:7f:a3:14:89:a6:8a:a9:21:15:6b:
51:4e:5f:c4:cd:29:44:ef:a4:1e:e2:82:50:2f:bf:
88:4a:eb:cf:c7:cc:b5:9f:03:a5:e0:62:2e:c3:4a:
0a:a9:29:d8:9f:c3:30:5c:2b:31:2c:36:8e:a7:5b:
d7:36:92:9f:19:b9:c0:0f:73:ce:61:8b:a4:f3:36:
a1:bc:57:47:f3:c8:cb:4f:ea:f3:23:8d:83:af:d2:
97:77:44:b8:6e:8c:10:ee:83:3e:37:33:66:42:9b:
51:11:29:70:8c:ca:f0:29:63:bb:84:a6:b5:b3:a8:
38:76:b2:51:e9:0a:5f:bb:25:5d:d2:d4:a7:3d:6a:
e4:ad:97:2b:27:d0:7f:80:aa:c3:e0:88:23:18:e1:
cd:e9:cd:c5:bd:64:77:0e:65:e3:12:ad:78:b8:f2:
39:3f:ec:19:ed:ec:26:1f:e3:2e:5a:42:fc:74:44:
3e:01:e3:f5:6e:d5:8b:5e:d6:3d:66:f5:d4:db:96:
c5:7d:24:3f:41:2c:27:02:be:51:bc:58:89:a9:d7:
56:7e:65:9f:07:99:c4:9f:6e:c6:ec:cf:55:5d:13:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6D:F7:06:E4:BE:9F:80:42:79:ED:31:F6:7C:3D:FB:48:3B:3F:AC
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:5c:e7:1a:78:78:dc:1a:c1:c4:d2:ad:ce:4c:d0:10:24:da:
f3:f7:de:cd:06:e1:e5:22:d6:b4:6d:ef:a8:3a:9f:62:9b:0d:
89:34:21:14:12:6a:f1:88:90:00:f1:a4:96:ea:19:3f:a4:41:
cb:be:cd:96:85:ee:6a:ef:37:81:57:1e:4b:89:ee:ef:d4:da:
a0:18:c0:88:70:a2:f6:4d:10:1f:59:f6:40:22:fa:e3:0d:02:
3e:83:d9:33:dc:00:9c:25:d1:d0:38:47:a6:1d:35:2f:25:cc:
87:66:15:c2:af:23:30:f0:9f:38:3b:c0:ff:fc:87:80:1d:64:
a2:84:f9:5d:36:05:4d:d7:89:85:f2:59:fb:0b:55:c4:cc:d2:
02:f2:c0:ff:91:e0:65:28:b0:2e:4a:2f:78:64:9e:85:fb:c3:
73:b1:60:61:7d:e0:dc:c4:fc:6e:31:c5:fa:4b:9c:3c:c2:cc:
9d:d9:12:5f:22:2c:62:71:68:87:77:55:18:0c:60:8f:64:77:
4d:21:29:63:a3:95:dd:cb:2b:10:66:ea:fc:20:c0:cf:52:3d:
f0:16:6a:8d:59:29:cc:96:f2:f9:47:02:55:59:8a:d4:5b:0d:
9b:a6:23:78:0e:cb:41:ba:2c:64:32:e4:d2:e2:ad:19:63:93:
21:e9:19:ef
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 1 10:03:07 2024 by rpki-client on console-fra.rpki-client.org