Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20323135323837.roa
File: 3134312e39382e37322e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: 1WmNvasmemn3Ph6Ajdb3+Pd92X99YPHqrYqWkat7GfU=
Subject key identifier: 86:12:A1:E0:E6:17:07:12:C3:49:C8:43:F5:60:62:A6:F4:9B:E7:E8
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 61D2F2A8BD82A06E314619AAE534C72645697777
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20323135323837.roa
Signing time: Wed 04 Sep 2024 18:44:45 +0000
ROA not before: Wed 04 Sep 2024 18:39:45 +0000
ROA not after: Wed 03 Sep 2025 18:44:45 +0000
asID: 215287
IP address blocks: 141.98.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d2:f2:a8:bd:82:a0:6e:31:46:19:aa:e5:34:c7:26:45:69:77:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Sep 4 18:39:45 2024 GMT
Not After : Sep 3 18:44:45 2025 GMT
Subject: CN=8612A1E0E6170712C349C843F56062A6F49BE7E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:15:6e:f9:a5:bc:a9:53:31:65:06:41:81:
b6:31:05:e2:67:dc:14:1b:cc:67:e7:c6:50:dc:ea:
57:3a:9e:bf:4a:cf:0a:68:a6:50:e8:9c:41:de:cc:
64:a5:a6:b9:c6:38:7a:11:a2:33:41:4d:68:7d:8b:
9c:b8:40:52:1f:7f:61:82:d6:04:04:e5:e8:ad:e1:
91:8c:2e:94:70:89:4a:f6:45:11:d0:c5:3b:c0:ed:
70:b8:f2:48:a7:fd:93:62:d7:ac:d4:f8:57:0f:6d:
97:21:05:ec:7a:65:7d:05:f8:f7:fd:99:6f:f0:7c:
6f:6f:36:ad:61:7e:48:2a:f5:4b:e0:b9:00:92:a7:
50:42:c0:32:81:1c:07:ca:d9:28:fa:d0:49:47:2d:
2d:17:36:07:a8:00:8c:00:c3:66:db:a5:a1:27:fa:
0e:8c:0d:ad:b8:dd:9a:83:d4:85:14:60:50:93:32:
30:50:c5:35:6f:a9:00:00:c6:15:0e:8f:9a:f4:17:
b0:9d:95:d3:76:9e:a8:85:76:ce:05:88:35:fb:80:
87:cb:83:dd:bd:a2:dc:d1:60:5f:d7:bb:3c:95:25:
8b:f2:a9:a3:eb:21:f9:b5:92:33:db:a8:a9:f8:c1:
74:4b:be:8d:49:07:75:52:1e:30:78:d0:5f:55:ef:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:12:A1:E0:E6:17:07:12:C3:49:C8:43:F5:60:62:A6:F4:9B:E7:E8
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ec:45:9e:ce:f7:60:8a:4e:13:c1:d7:18:d8:6f:4a:7a:22:
0f:39:51:95:b3:45:82:25:ce:07:65:2f:6e:34:d8:7f:c0:c8:
4e:3f:7c:d2:62:a6:bf:23:aa:c9:6f:22:fb:5f:8f:88:f0:7e:
ff:e8:d2:2a:7f:2d:16:fb:69:e8:39:49:3c:12:58:4c:b2:68:
05:13:c6:80:c5:d2:96:a0:e8:cc:0f:d8:09:e4:27:a0:8d:81:
16:b6:56:ff:56:49:9a:cc:f2:76:c3:d8:e1:1d:04:81:ea:aa:
78:36:a1:2f:35:95:0d:3a:80:32:5b:46:2c:99:79:08:49:07:
a8:0f:3b:1f:58:52:d6:08:7d:6c:66:46:de:3d:9b:38:b2:8b:
c1:2b:30:3e:f6:31:b0:42:80:93:5c:19:c6:48:27:60:8c:57:
ba:37:c7:31:8a:52:01:03:78:c0:b0:b9:bb:b4:20:b9:10:f1:
68:c9:6e:a9:26:da:7f:d7:0a:bc:00:31:b2:c7:e6:b4:8e:e9:
02:b8:34:53:19:71:5d:ae:82:ce:e6:6f:c0:94:6b:33:2d:61:
1e:5f:bc:5a:15:1d:65:6f:31:c7:0e:ec:46:b5:30:d0:08:0b:
7d:c6:96:d2:fa:0b:1f:15:83:67:5b:5a:da:f7:39:10:e6:a0:
f3:ac:6e:28
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 4 01:29:29 2024 by rpki-client on console-fra.rpki-client.org