Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20333936303733.roa
File: 3139332e3234362e3130322e302f32342d3234203d3e20333936303733.roa (raw, json)
Hash identifier: tFCVjU50hg3JqdamCeLseXMYCmV5avWmtpjJ0hBTAIE=
Subject key identifier: 97:26:0C:E6:4F:10:A5:4A:D2:08:8A:13:49:1C:B9:9E:4A:23:D9:20
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 4D4218FDBBC4716A3E838FC065819897C39A4F94
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20333936303733.roa
Signing time: Mon 23 Oct 2023 20:22:00 +0000
ROA not before: Mon 23 Oct 2023 20:17:00 +0000
ROA not after: Mon 21 Oct 2024 20:22:00 +0000
asID: 396073
IP address blocks: 193.246.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 20:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:42:18:fd:bb:c4:71:6a:3e:83:8f:c0:65:81:98:97:c3:9a:4f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Oct 23 20:17:00 2023 GMT
Not After : Oct 21 20:22:00 2024 GMT
Subject: CN=97260CE64F10A54AD2088A13491CB99E4A23D920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:8a:b6:33:20:e6:19:7a:1e:48:0f:4f:66:
af:f2:60:e3:7d:86:76:ea:20:49:85:83:c4:1d:97:
cb:27:c1:da:9c:15:81:df:b3:d2:f8:dc:75:d1:d1:
7f:06:29:73:20:3b:78:c3:b9:a8:cc:4d:10:cc:ae:
0d:e3:c4:83:9a:bb:a1:35:c2:8a:ce:24:8b:76:9b:
3f:a5:45:81:0d:61:5e:fc:fc:1c:01:78:2b:dd:e7:
af:b5:a9:dd:38:bc:90:bd:a1:86:4a:82:26:e4:fa:
76:be:25:32:b7:ba:fa:e9:6b:1e:84:23:d1:ae:b5:
96:70:c9:26:77:5d:0f:1d:84:b4:da:83:aa:92:0f:
5c:cd:75:b9:85:55:ac:85:61:80:48:b5:70:a6:fe:
16:16:96:1c:a9:c9:a9:eb:ee:2e:95:93:63:0c:4f:
70:2c:48:96:62:f2:16:08:61:5e:f5:61:2c:94:04:
14:75:cc:f5:30:94:59:8e:43:5d:3a:59:a2:ab:93:
be:f2:1e:f5:61:29:02:c5:96:0c:21:53:62:00:92:
61:3d:3d:2b:8e:c2:18:1f:f8:19:5c:6f:4c:d7:28:
eb:20:27:ba:6a:20:86:b8:62:96:fc:29:e9:ee:f2:
42:bf:75:5a:ea:7e:1a:6b:39:53:1e:47:fe:47:04:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:26:0C:E6:4F:10:A5:4A:D2:08:8A:13:49:1C:B9:9E:4A:23:D9:20
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20333936303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:92:a9:b2:2a:66:19:0b:70:c2:ab:aa:f0:0e:27:5c:5c:23:
12:d9:06:18:b0:c7:2c:dd:18:30:99:7d:1b:e3:49:a2:e3:0f:
0a:16:84:22:e7:70:47:f7:db:34:c9:cd:37:4b:b0:79:7e:25:
f4:68:d6:f0:e2:0f:05:de:75:e0:08:86:7e:27:8f:c3:f5:3a:
ed:14:36:4e:fe:38:93:fb:35:01:c0:0a:76:0d:00:f9:92:dd:
1a:f8:db:5b:98:96:ab:23:d6:2c:71:ac:2a:e4:1e:99:79:bd:
33:fa:67:5c:56:92:3b:85:ca:6f:93:cb:7f:f4:91:81:58:5d:
e5:5f:91:4d:67:fb:10:6f:ea:91:55:e4:6f:31:10:33:ac:50:
2e:af:82:b0:9d:49:0c:72:63:6a:10:b0:24:90:a1:58:84:71:
a5:67:59:0f:55:14:4c:2a:8c:84:52:88:5d:1f:35:9b:16:ae:
c3:af:c4:e6:35:77:b5:de:74:18:3f:a9:06:05:74:da:61:e8:
ab:e2:c1:13:5a:95:ad:db:1f:18:2b:07:e2:50:e5:eb:d2:2e:
0f:2b:be:64:9c:75:28:49:71:33:61:5a:44:11:b3:56:96:fd:
1e:4d:9b:69:22:76:39:ba:e6:a3:24:51:f1:52:e3:7a:53:48:
3c:34:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org