Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232372e302f32342d3234203d3e20313336373837.roa
File: 3139342e3135362e3232372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: aC2rF91Fz+AfhvGEbHRcM+hh43Xu93ZD8AqgEt1Zw4E=
Subject key identifier: 1A:9C:27:45:7C:BC:B4:89:18:87:61:1B:1B:A0:00:9B:91:25:81:30
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6B270B6FB1859480969215534701B1A101FC24F0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:17 +0000
ROA not before: Fri 27 Dec 2024 11:42:17 +0000
ROA not after: Fri 26 Dec 2025 11:47:17 +0000
asID: 136787
IP address blocks: 194.156.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 18:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:27:0b:6f:b1:85:94:80:96:92:15:53:47:01:b1:a1:01:fc:24:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:17 2024 GMT
Not After : Dec 26 11:47:17 2025 GMT
Subject: CN=1A9C27457CBCB4891887611B1BA0009B91258130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:ac:f8:a8:fe:ce:ce:ec:07:b8:fb:ff:4c:
21:d1:b2:18:19:8d:8b:9f:73:b3:f2:01:7d:5a:0f:
be:62:30:16:18:85:43:b0:33:bf:1a:84:bd:7b:40:
69:81:94:af:a3:32:c7:c5:7a:26:b2:79:6e:ab:26:
26:2e:0c:1b:c5:a1:3c:9a:e5:8b:a2:1d:bb:ab:16:
68:52:88:77:68:83:dc:51:70:a3:26:f0:e2:f0:3b:
4d:c1:51:1b:40:cf:6c:1a:b9:fb:50:7c:15:41:4d:
b3:61:89:3e:29:2d:90:39:99:98:1b:68:a9:7c:e0:
ed:e1:35:f4:b2:47:7e:3f:92:76:d9:2c:a9:52:48:
df:2d:d2:57:7e:d8:bf:0e:bb:7f:17:58:04:32:99:
07:fa:d2:fa:75:29:be:f9:81:5b:af:34:7a:02:d4:
c1:8d:71:69:d2:01:97:51:74:6d:87:92:80:23:93:
5d:a7:f5:b3:2d:a8:a7:c2:58:3d:04:50:1f:21:25:
16:d0:2b:64:e1:f8:50:fa:07:23:81:1e:17:0d:14:
a6:c0:c0:b6:4e:82:db:e5:3f:db:7b:f6:c5:15:1b:
15:24:cf:17:71:42:6a:38:8b:59:36:da:6e:ec:65:
5f:6a:4a:22:ae:86:3d:80:e5:d0:dd:3c:b8:7a:12:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:27:45:7C:BC:B4:89:18:87:61:1B:1B:A0:00:9B:91:25:81:30
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.227.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ef:b2:9c:bf:80:0b:9e:e3:a2:e1:3f:14:a2:4c:52:5a:0a:
ac:22:16:23:fe:ce:5e:2f:db:ef:1f:cb:13:f3:89:54:9b:c1:
5a:f5:ab:1d:13:d1:1d:a3:56:92:99:6e:12:e8:3b:12:54:79:
8f:7f:0e:8a:4f:e5:9a:3a:ef:26:26:40:4d:ab:ce:56:58:4c:
5b:93:fd:31:af:f8:af:26:23:ae:bc:9e:67:27:c2:52:c6:d0:
7d:7a:a6:10:bc:5f:e5:2b:38:1d:c7:96:89:e9:fe:c4:28:13:
05:5a:38:07:ed:be:29:94:b7:a3:af:da:ea:f0:71:f6:8f:45:
4f:88:ed:81:3d:52:0e:e4:52:3f:bd:8b:26:4d:f8:ad:4d:8c:
39:26:8c:34:a8:c4:72:06:db:74:01:cc:40:5f:67:e8:d9:9f:
cf:fa:e4:de:71:0d:8f:62:8d:7e:4c:fa:3a:fc:6b:11:d5:60:
fa:53:bd:b3:d6:27:2e:e7:21:aa:e3:0b:f6:1f:72:2a:23:92:
38:c6:e7:a3:a4:79:c9:a5:c9:01:22:db:51:74:88:23:5e:32:
c0:c2:41:51:94:62:cd:9e:ae:7e:ae:e9:44:4d:c1:70:3e:a9:
03:e9:08:01:80:4c:30:ac:5d:2a:da:ab:40:04:3f:48:38:f6:
d5:7d:77:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:10:38 2025 by rpki-client