Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3137362e3132362e3130352e302f32342d3234203d3e203234383735.roa
File: 3137362e3132362e3130352e302f32342d3234203d3e203234383735.roa (raw, json)
Hash identifier: HLEpW3JxgehnCBIaLpXu4CVJ7Y6JT2tUG/w7+OEmfbA=
Subject key identifier: 19:1D:DB:D3:70:E0:6A:F4:EA:CB:09:34:A4:5B:50:EE:38:2C:C4:C5
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 648669F9091AD4EE43B92319B11A1C777D822EE3
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3137362e3132362e3130352e302f32342d3234203d3e203234383735.roa
Signing time: Wed 06 Dec 2023 07:19:45 +0000
ROA not before: Wed 06 Dec 2023 07:14:45 +0000
ROA not after: Wed 04 Dec 2024 07:19:45 +0000
asID: 24875
IP address blocks: 176.126.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:86:69:f9:09:1a:d4:ee:43:b9:23:19:b1:1a:1c:77:7d:82:2e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Dec 6 07:14:45 2023 GMT
Not After : Dec 4 07:19:45 2024 GMT
Subject: CN=191DDBD370E06AF4EACB0934A45B50EE382CC4C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:88:db:c2:94:38:07:da:6e:fa:3f:30:85:
b8:6c:f5:eb:83:6d:55:c7:13:0b:b6:76:87:e0:ee:
5a:49:2f:4d:bd:bb:e1:ea:75:43:d2:fd:ed:0f:67:
81:3f:f1:76:e6:da:66:ab:72:b7:a8:d0:07:ef:64:
d0:9a:98:9d:04:82:0a:a6:43:56:fc:a5:ec:f0:7b:
d7:a9:a9:d1:f6:d8:23:4d:bd:07:f4:6c:88:48:9b:
8b:68:76:b5:ad:bf:1b:61:f4:0b:17:c7:65:1e:c1:
0f:ac:af:4a:85:6a:61:51:06:84:08:82:45:09:6a:
a4:e6:40:31:b7:11:84:28:f9:96:a3:a1:6a:25:e4:
fa:8f:ec:8a:9f:d1:87:c1:68:09:a7:71:e0:5c:3e:
b6:52:12:b3:28:69:f8:9f:50:76:06:07:eb:89:a6:
85:4e:31:95:8e:4e:98:95:b4:f9:c0:f1:dc:21:58:
0c:f6:5d:bd:be:7f:c5:f4:e5:71:37:ad:e1:5e:2a:
dc:0e:2d:ca:2f:95:62:23:27:8b:01:09:30:f9:ce:
04:fc:fa:6a:08:06:7f:6b:25:0c:f7:1a:c1:70:98:
f7:10:e9:b6:d1:24:d0:37:fe:43:b2:bd:de:87:5b:
98:ac:77:24:8b:8a:ed:a3:06:f2:73:85:a4:5e:9f:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1D:DB:D3:70:E0:6A:F4:EA:CB:09:34:A4:5B:50:EE:38:2C:C4:C5
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3137362e3132362e3130352e302f32342d3234203d3e203234383735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.105.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:47:c4:50:79:b9:6f:fc:08:f6:32:35:7f:e6:e5:c7:30:f4:
bd:ef:5a:47:7f:17:19:76:fa:fa:86:02:c8:cd:a9:15:e0:c2:
de:0c:06:dd:39:9a:a8:80:6d:39:48:7f:98:9f:e2:ef:01:2f:
05:0c:32:06:84:bb:98:3b:95:c3:00:d2:87:6e:14:3c:a1:a7:
f7:50:76:92:2f:b8:2c:7d:72:0c:7d:97:3a:af:5a:26:2d:5f:
85:ad:06:90:b0:09:28:38:e5:85:cd:1a:e7:3a:85:59:df:18:
d9:41:f4:86:5e:d9:f6:38:a6:80:2b:69:1a:92:e0:e4:57:9f:
e5:4a:ad:16:70:b7:d1:e5:0a:4a:c9:8d:f9:32:52:2b:11:0e:
c9:bb:9c:52:82:2d:46:81:3c:84:e4:8c:ea:87:47:9d:56:89:
c8:e0:24:30:06:c1:b7:9c:db:9d:2d:b1:01:90:e1:af:fe:b9:
cd:cd:54:8d:39:b4:2d:44:b3:19:fc:16:d6:a7:50:5b:60:81:
9f:43:14:5b:7e:6d:a6:76:36:89:8c:7f:2e:5f:c9:f0:6b:03:
69:df:ed:9f:15:5d:53:92:e4:31:18:49:2d:cd:27:44:f4:3f:
18:44:dc:24:73:b2:95:e6:a5:09:18:2a:45:59:8b:c3:2d:91:
6a:e6:96:aa
-----BEGIN CERTIFICATE-----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Generated at Tue Jan 30 17:11:08 2024 by rpki-client on console-ams.rpki-client.org