Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20323132323338.roa
File: 3139332e3234362e3130322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: V66TCB1aBEZLKhGkKC1n5ugvh6+JLw0vRrJggRzSMAk=
Subject key identifier: 11:F8:9A:0D:2C:74:F9:24:9B:69:A3:A7:8D:B0:AE:85:B5:2C:87:14
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 0C4EC402D5F444C17F8332652CB36C68F1865F93
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20323132323338.roa
Signing time: Sat 03 Aug 2024 06:15:07 +0000
ROA not before: Sat 03 Aug 2024 06:10:07 +0000
ROA not after: Sat 02 Aug 2025 06:15:07 +0000
asID: 212238
IP address blocks: 193.246.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:4e:c4:02:d5:f4:44:c1:7f:83:32:65:2c:b3:6c:68:f1:86:5f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Aug 3 06:10:07 2024 GMT
Not After : Aug 2 06:15:07 2025 GMT
Subject: CN=11F89A0D2C74F9249B69A3A78DB0AE85B52C8714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:00:35:16:1f:c0:a4:41:95:c4:94:93:cf:
53:4e:e2:cf:71:ec:a1:ea:5f:c2:cd:a5:a9:d6:d7:
d4:36:c6:35:40:8a:80:83:8b:7f:63:de:a9:5b:75:
3b:bf:86:3b:10:fa:13:5e:26:df:00:03:b7:4a:1b:
dd:80:42:c8:4a:3c:3e:f1:db:44:76:59:ab:a9:aa:
83:d6:9d:88:7d:a2:66:5b:d4:ee:0f:c2:12:71:19:
34:2c:29:7c:b2:10:33:64:32:e3:b9:83:ca:2e:79:
d8:3f:29:02:09:ce:76:1e:7e:3e:0c:10:47:4b:b4:
ad:e8:be:51:79:1f:71:b5:c0:c0:7a:ac:46:a1:ed:
50:81:9c:9e:48:6a:7d:32:16:cc:95:3b:04:5c:f3:
d2:12:81:c9:73:7c:58:82:66:09:4c:d9:82:f0:58:
ea:78:bd:c2:f2:d5:93:b9:33:62:be:ca:1a:2b:f0:
32:75:9a:15:82:6d:be:e3:01:42:37:5f:f4:2e:a0:
66:e1:2c:ae:e2:6b:c7:74:1e:0a:c1:19:fa:c1:02:
6c:8f:33:ab:3e:d6:ec:e9:01:3d:64:2a:05:20:6f:
d5:11:e2:98:ee:19:0f:ca:cc:a4:18:55:d0:77:68:
50:d5:73:a8:18:34:7c:b5:bd:8a:73:da:e8:e6:d7:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F8:9A:0D:2C:74:F9:24:9B:69:A3:A7:8D:B0:AE:85:B5:2C:87:14
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.102.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c1:4d:80:84:e9:e1:74:e8:29:5b:33:62:10:74:ba:84:e0:
c5:8e:af:8a:bc:fd:51:a2:78:c1:0b:4d:90:cd:e3:7e:82:c4:
30:ff:39:18:c6:f8:fb:a6:3d:ae:5d:a3:c1:f4:da:7d:07:5c:
24:37:4c:68:7f:94:79:cf:d6:7d:cd:65:40:e3:2f:da:e2:76:
3e:88:40:28:f5:58:6f:68:e7:94:e6:d5:c4:75:b4:bb:d7:8a:
c5:f8:a1:4b:f2:08:6f:b5:bc:2f:21:bf:43:a4:7d:3f:2c:90:
4f:29:0c:9f:b2:6b:9b:3c:f1:4f:8b:42:1f:9d:bb:38:6d:fa:
b1:ee:53:07:b0:fa:1a:e2:39:bc:ff:b2:da:c7:e7:71:7d:c2:
8f:16:a3:97:94:16:e0:c5:f4:aa:15:03:17:da:6f:80:bf:ea:
e2:65:19:f9:f1:43:67:53:74:f7:80:c8:09:d5:fc:bf:f3:38:
29:44:52:b6:c3:34:f9:69:06:48:51:20:51:5c:a3:ae:9b:9d:
e7:e7:bc:9e:e5:10:e5:83:8e:23:73:5d:ed:ce:f1:94:b6:b3:
67:41:d1:72:9f:6b:a9:45:59:5d:3f:85:06:8e:38:5f:b8:58:
0d:db:d4:e0:67:84:29:9a:c7:e5:5e:89:ed:bd:f1:60:8d:50:
c1:95:12:9e
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 3 01:42:40 2024 by rpki-client on console-ams.rpki-client.org