Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/3139342e3135362e37362e302f32342d3234203d3e203538303631.roa
File: 3139342e3135362e37362e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: JW95HbVvQVazKA/KV3L1fkVUkSYmig0VkBI/C+ND+dk=
Subject key identifier: 28:9C:8B:B7:50:CB:57:64:08:03:26:EA:73:0C:CA:DE:A0:56:F4:81
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 7466E4279F0C11335DD364D207747EB31EF5F8FA
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/3139342e3135362e37362e302f32342d3234203d3e203538303631.roa
Signing time: Mon 13 May 2024 10:38:29 +0000
ROA not before: Mon 13 May 2024 10:33:29 +0000
ROA not after: Mon 12 May 2025 10:38:29 +0000
asID: 58061
IP address blocks: 194.156.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 00:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:66:e4:27:9f:0c:11:33:5d:d3:64:d2:07:74:7e:b3:1e:f5:f8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: May 13 10:33:29 2024 GMT
Not After : May 12 10:38:29 2025 GMT
Subject: CN=289C8BB750CB5764080326EA730CCADEA056F481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:7a:ed:d1:43:87:d6:f0:1a:cd:cc:ce:45:
a5:fa:b0:12:ab:ac:90:ce:38:be:cd:22:49:3f:15:
d1:fc:9f:da:23:fc:cd:47:bf:f4:81:9a:4f:ff:63:
7a:30:a6:40:f7:ad:4e:ab:06:0f:7a:c2:86:f5:77:
89:e5:81:c4:4f:15:c0:b0:7c:52:46:77:d6:2b:77:
00:e1:4b:84:92:e8:0d:32:3b:f4:c0:03:57:b3:13:
28:c8:10:dc:a3:39:9b:9f:41:17:cd:30:a2:83:08:
5c:cf:8a:10:06:3d:32:84:8c:9e:ab:44:f6:db:7d:
eb:ae:b7:28:66:d7:4e:96:58:f2:8e:f6:49:84:4e:
b5:7b:85:9b:da:80:4c:35:46:7e:1e:09:0a:62:59:
32:ac:7c:bc:12:d2:8b:9a:95:05:da:ac:e2:0e:a8:
9f:f0:f8:7e:5a:93:7b:a0:0b:f7:77:a9:75:61:7e:
7d:c5:a0:ff:f2:fe:0a:86:4d:9a:56:fa:b4:23:18:
af:8b:42:90:55:2c:6e:6c:7a:bc:e3:a4:2f:7b:95:
56:a3:b5:c5:30:ec:4f:c8:49:50:ec:37:a7:34:d2:
ca:e5:9b:18:d8:e8:5f:9d:92:02:12:3f:97:e7:b8:
cd:3f:b1:84:c5:71:9d:51:09:a6:9c:96:8c:07:f2:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9C:8B:B7:50:CB:57:64:08:03:26:EA:73:0C:CA:DE:A0:56:F4:81
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/3139342e3135362e37362e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cc:68:08:dc:e4:c1:84:b3:32:78:5e:c7:fd:a2:17:89:12:
70:6a:a3:18:ad:63:90:ae:d3:25:cf:ee:54:9d:ae:21:7b:cf:
28:c4:a7:31:38:e4:29:47:9a:af:4f:6e:bc:b9:4f:ef:b7:c3:
e6:c7:b4:ff:43:33:0f:7a:e2:6b:d1:65:62:af:93:1a:34:2f:
96:3c:3f:c3:f5:db:6b:5f:f1:9a:5f:0d:ca:99:1b:31:ea:56:
60:08:c8:90:67:bc:0c:09:3c:a3:0a:21:23:da:fd:28:97:71:
ed:36:d4:ed:5d:69:f4:eb:8b:b1:ed:5b:08:7a:3c:4e:dd:38:
50:97:01:09:a7:71:36:81:42:e5:53:5b:56:05:e3:9d:3b:b5:
5a:93:23:c3:42:cd:d5:13:a1:10:51:c5:b6:b8:f2:44:24:c5:
ae:40:d8:36:6f:33:b4:17:f2:bd:3f:0f:bb:b3:59:1d:4a:ac:
1c:ed:52:d8:79:73:43:3c:9b:ee:15:1c:8f:dc:ca:ef:a3:d5:
76:7b:91:b8:13:5f:47:d1:9b:a6:9f:4a:39:81:51:36:d1:ee:
bd:5a:db:72:ab:ae:02:13:56:f2:aa:d6:ef:8c:2c:e7:d6:3a:
5b:1f:88:5d:3b:0a:b5:6b:0d:d1:d0:76:b1:98:97:87:c5:f5:
93:96:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:24:51 2025 by rpki-client