Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/3139342e3135362e37362e302f32342d3234203d3e20383334.roa
File: 3139342e3135362e37362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KYIfvjlkXIBpQdkV3qCeWZxpvjMF5c90pSiN0UgOC/8=
Subject key identifier: EF:7F:DD:78:92:F6:18:1F:2E:FA:E5:D4:6F:B7:FB:B1:4B:2E:BF:27
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 4717D10E5AC1EE89474F87CC0930D1A32203DC2E
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/3139342e3135362e37362e302f32342d3234203d3e20383334.roa
Signing time: Sun 08 Sep 2024 00:03:28 +0000
ROA not before: Sat 07 Sep 2024 23:58:28 +0000
ROA not after: Sun 07 Sep 2025 00:03:28 +0000
asID: 834
IP address blocks: 194.156.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 19:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:17:d1:0e:5a:c1:ee:89:47:4f:87:cc:09:30:d1:a3:22:03:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Sep 7 23:58:28 2024 GMT
Not After : Sep 7 00:03:28 2025 GMT
Subject: CN=EF7FDD7892F6181F2EFAE5D46FB7FBB14B2EBF27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:17:31:0b:ce:7b:1f:6d:71:f9:e5:83:50:
8d:ed:33:08:86:b1:44:2d:cd:b4:61:98:53:be:f5:
f5:3a:42:d0:c2:95:ca:f4:85:f3:61:9d:ca:60:a6:
e3:a6:37:39:be:42:39:7d:f5:c8:92:1e:4e:d5:e3:
7b:79:33:05:92:ae:cf:0e:26:ae:2b:01:3e:6a:49:
b9:9b:c1:d2:f7:12:d4:46:0e:b4:cd:a7:8b:6e:4d:
3f:c7:61:ff:6c:12:74:20:64:37:f1:ae:95:ea:a7:
09:99:c3:ad:c6:fe:9b:ed:5d:d3:41:4a:05:53:52:
fd:c0:3e:fb:4d:1d:ce:e9:2c:cf:eb:33:3d:76:9f:
a1:1b:b8:2c:b1:63:c2:98:21:ee:f7:ed:66:53:92:
9a:4b:2c:9a:b4:e5:7a:17:d4:63:24:f3:dd:e0:65:
6e:e7:a3:e1:ea:95:b4:9d:3f:c0:fd:0b:da:39:18:
eb:42:bb:a6:b2:46:04:7b:55:bc:c2:90:96:04:6d:
8a:a3:77:d7:8a:82:74:4f:8a:4f:d7:ae:22:b4:9c:
dc:37:e8:3b:aa:ed:38:07:63:95:dc:21:2c:62:24:
95:d5:c3:66:38:71:8a:b1:ad:1d:87:48:40:f3:08:
0e:61:18:70:4d:ee:e4:c8:82:f6:9c:7a:9d:43:a9:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7F:DD:78:92:F6:18:1F:2E:FA:E5:D4:6F:B7:FB:B1:4B:2E:BF:27
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/3139342e3135362e37362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ec:db:30:cc:14:c0:4c:f4:63:a7:18:2e:c3:bc:5b:db:a7:
49:6f:5a:17:a2:22:9b:e4:1f:8b:75:94:94:e8:8a:b4:1a:2e:
b3:21:af:ee:04:b4:b5:e0:db:76:df:d5:1f:ad:a5:60:09:2d:
53:05:ee:39:de:ab:2d:0e:8d:23:7f:05:97:c0:0b:dd:40:e6:
a6:9a:93:19:cc:b0:9e:0a:44:de:53:ee:c6:3b:5d:9d:f3:a2:
3d:52:bb:1f:00:cc:bf:dd:57:af:5a:74:e2:36:90:4f:c6:46:
a0:50:96:32:9c:e4:08:49:fb:65:53:9c:ba:a5:5c:50:b1:48:
c3:aa:2b:bc:c8:45:5e:d4:66:0e:9d:66:e7:c2:17:28:c1:b5:
76:ca:e7:2d:3c:d0:af:84:ec:d1:80:6c:b5:98:4b:cd:0b:c0:
a8:5e:fb:e7:08:04:fe:82:16:e7:5b:f5:e3:f4:9d:3c:20:41:
bc:a5:d7:f4:4a:62:67:55:38:64:68:81:66:e7:02:77:3c:44:
93:95:87:fc:20:b9:70:c1:01:b8:f3:8e:47:4f:13:c7:57:89:
d8:9b:4c:57:32:5c:f4:b3:1f:ab:62:5e:ad:4c:39:ed:c4:ad:
27:d5:cd:9a:a4:81:3b:f9:89:81:95:d2:50:76:80:35:c3:af:
e2:02:ee:db
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 12 20:32:24 2024 by rpki-client on console-fra.rpki-client.org