Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232372e302f32342d3234203d3e20323039383534.roa
File: 3139342e3135362e3232372e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: Qg6u4HGmuAjKyEBKjCAk8/525vy+/xvqfdj+LpRL9yk=
Subject key identifier: 6D:2F:C4:89:55:31:6A:0F:B4:38:A3:B9:83:FE:E1:9A:52:1D:4C:79
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 458302FC96B5184221508694CCAEFD38773AFB68
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232372e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 27 Dec 2024 11:47:36 +0000
ROA not before: Fri 27 Dec 2024 11:42:36 +0000
ROA not after: Fri 26 Dec 2025 11:47:36 +0000
asID: 209854
IP address blocks: 194.156.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 18:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:83:02:fc:96:b5:18:42:21:50:86:94:cc:ae:fd:38:77:3a:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:36 2024 GMT
Not After : Dec 26 11:47:36 2025 GMT
Subject: CN=6D2FC48955316A0FB438A3B983FEE19A521D4C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:02:b0:97:9c:b0:2d:f6:0e:ca:3d:f5:9a:
74:86:f0:ba:4c:65:b4:86:93:21:71:08:50:62:66:
dc:26:75:55:5e:a0:2f:74:43:36:18:71:b6:b1:04:
40:89:06:97:59:70:6c:83:c1:9a:d9:d2:e6:8f:2c:
a2:ce:8b:15:b5:bb:22:9b:72:1d:e4:3c:76:92:ef:
14:3a:39:75:1f:6a:5d:c6:99:94:31:7a:76:37:db:
af:eb:37:71:da:ec:fa:7b:d1:a2:49:ff:e3:0b:25:
c3:a0:be:33:50:22:3a:4a:51:ae:ad:ad:90:71:a1:
6c:7a:3c:f5:69:c6:bf:08:ae:d0:38:a6:d9:3f:c2:
ff:27:0c:4a:c2:a6:10:2a:9e:49:83:97:15:4e:8d:
5b:15:b8:a0:dd:8d:d3:d0:a2:e2:03:dd:59:82:4f:
5d:70:a7:6f:2a:a6:c7:ac:c8:20:25:4b:a3:9e:81:
04:cf:56:bf:55:11:7a:54:5c:b0:b8:e0:c8:46:75:
b8:02:09:2c:e7:b4:cf:1e:95:dd:37:9a:16:14:86:
4d:d2:47:01:01:71:ae:5c:c1:56:e4:66:9e:e2:ba:
34:76:d6:94:d8:31:bc:15:a5:02:eb:ca:93:8a:ef:
ab:48:3a:5f:01:af:93:ef:b9:bf:f3:b6:e1:1f:9a:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:C4:89:55:31:6A:0F:B4:38:A3:B9:83:FE:E1:9A:52:1D:4C:79
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232372e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f1:08:00:70:3b:d5:0e:e4:21:18:d6:b9:3e:02:2c:54:1c:
fd:2d:17:39:48:6c:26:dd:86:2b:91:6a:bc:73:98:f8:5f:71:
f2:80:ce:da:23:87:5f:ca:54:cb:42:0a:eb:58:d3:77:d0:08:
b3:a3:6d:62:10:53:d4:54:2a:ef:a0:98:5f:15:1c:ed:4e:d7:
61:f5:96:7e:00:31:44:a7:81:1a:28:78:70:35:0f:91:62:ed:
45:aa:06:d9:40:2d:83:0a:af:05:1d:6b:1c:0b:c1:89:91:98:
18:47:4d:45:81:cb:33:d0:3f:7a:11:7a:20:27:5d:76:20:07:
24:af:fa:79:ae:62:2a:42:1c:73:97:99:77:dd:fd:f2:58:22:
11:86:96:8d:e3:18:cb:3a:74:9e:21:f5:6c:89:39:62:b8:0a:
58:83:6d:05:db:f4:97:dc:51:20:97:9f:08:56:82:31:68:85:
3b:b2:7a:26:9e:32:57:c7:fd:c0:71:b3:03:f3:26:6f:af:39:
a0:1b:49:b4:04:13:c6:fd:c9:d1:32:7c:97:de:8e:56:6a:c2:
8e:4b:55:cf:d6:bc:66:c3:e0:bc:e6:41:71:30:1c:a3:aa:74:
4b:1d:2c:d1:53:08:eb:20:fc:22:4b:a8:b6:1e:85:0d:c7:11:
f8:66:37:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:03:19 2025 by rpki-client