Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e203539383935.roa
File: 3139332e3234362e352e302f32342d3234203d3e203539383935.roa (raw, json)
Hash identifier: WUAkW1vWA+x+r9LrmKA9ViJHiul+qG8L0985Q4Iwzio=
Subject key identifier: 60:10:69:DA:23:C1:9E:39:7A:26:65:9A:06:CA:B4:87:DD:E0:1B:F9
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 08BBC5709AFFE1E0174EDFD910BEC760431F5D6B
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e203539383935.roa
Signing time: Sat 06 Apr 2024 09:18:45 +0000
ROA not before: Sat 06 Apr 2024 09:13:45 +0000
ROA not after: Sat 05 Apr 2025 09:18:45 +0000
asID: 59895
IP address blocks: 193.246.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 12:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:bb:c5:70:9a:ff:e1:e0:17:4e:df:d9:10:be:c7:60:43:1f:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Apr 6 09:13:45 2024 GMT
Not After : Apr 5 09:18:45 2025 GMT
Subject: CN=601069DA23C19E397A26659A06CAB487DDE01BF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:7e:51:61:f8:e2:6d:8e:5a:e3:b0:da:91:
b9:e6:ef:c3:2a:25:a9:31:fa:e8:f8:7a:bc:66:36:
7c:80:af:5f:9e:79:d7:44:ed:b2:c4:0a:d7:0d:c7:
a2:c2:a8:a5:38:a9:b9:2d:c4:71:21:27:c1:ea:b0:
4a:fa:b4:f3:db:94:47:a6:7e:ce:2f:f9:08:e1:ce:
0b:c9:55:3c:b1:0e:3e:d8:6d:76:db:b2:47:a6:5f:
41:45:52:c7:34:bd:8b:9d:de:ca:7a:4e:97:70:f7:
70:12:c0:65:1b:f1:7f:7c:dd:7f:aa:fb:fa:8b:00:
4b:f4:78:c3:5f:20:91:b4:48:4e:a1:97:09:05:bb:
40:2d:cf:1b:1a:f1:b5:50:f2:9c:e7:65:ac:ac:95:
df:73:ce:e9:43:57:76:f8:db:a0:21:ef:f5:52:94:
1b:3e:68:9a:3e:25:e4:34:b6:d0:c6:96:f7:1d:14:
c1:09:23:47:ca:82:6f:12:15:1a:22:39:08:b2:67:
a4:54:76:5a:4e:95:9c:e6:92:8b:06:75:71:fa:76:
05:08:06:72:35:b9:de:54:24:42:45:2c:77:f0:41:
eb:ca:18:8d:63:1c:9b:f7:c0:6b:3d:bf:d6:1e:a4:
6d:e5:12:68:a0:b4:7d:96:73:18:a8:95:0e:13:07:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:69:DA:23:C1:9E:39:7A:26:65:9A:06:CA:B4:87:DD:E0:1B:F9
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e203539383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:32:2c:f0:e2:84:14:cd:fa:27:41:31:78:f6:ef:99:f5:9e:
c8:8e:14:b4:32:51:52:99:f7:9e:2a:4e:35:67:83:46:56:e6:
09:c8:71:93:06:41:b5:d9:cf:4c:37:32:ba:c6:f8:1f:eb:e1:
5a:9c:42:02:45:1b:74:fe:ac:98:02:2e:94:8c:b2:8a:25:ba:
8e:a6:d4:94:d8:fd:eb:38:d9:ee:30:f1:3a:54:22:9e:f2:0e:
db:05:c8:03:6f:2a:78:9f:8b:b7:33:1e:01:e1:d6:ac:84:58:
2a:10:92:8d:4a:68:ea:06:b0:2b:05:a9:c6:a0:a8:c5:66:d0:
b6:65:f9:8a:50:51:7a:9c:92:7f:a3:17:e0:24:8a:21:00:c1:
bb:f4:15:2b:47:e2:88:80:59:a3:34:2e:d7:a7:82:6b:6a:db:
5f:0b:2e:0a:37:4d:01:93:63:aa:8a:3e:85:dc:2b:d6:ea:1b:
2d:40:55:b6:34:19:16:27:c4:9e:24:8d:9b:19:4c:cf:35:4c:
02:a5:df:dd:c3:9e:16:6f:96:20:b9:3e:7e:39:ea:fe:ec:c1:
af:bc:ba:8e:e6:41:eb:94:4a:67:8b:8f:37:5f:43:53:2a:76:
02:f3:6c:fa:53:58:54:b6:ca:93:28:e2:1d:c4:50:61:05:cf:
cb:4a:5f:3c
-----BEGIN CERTIFICATE-----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Generated at Sat May 4 12:53:28 2024 by rpki-client on console-ams.rpki-client.org