Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e32322e32342e302f32342d3234203d3e20313331313939.roa
File: 3139332e32322e32342e302f32342d3234203d3e20313331313939.roa (raw, json)
Hash identifier: PzOei2yuXaugfnNIUf6cc6Znxf2tg+OuG0WaL7d6k4A=
Subject key identifier: 87:4C:AC:76:9A:E8:8C:45:4D:83:EA:87:52:64:33:FF:51:3D:30:5B
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 6BE3DB9EBFD7CB2682CD62F7F68C9E63FFA42951
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e32322e32342e302f32342d3234203d3e20313331313939.roa
Signing time: Wed 07 Feb 2024 12:34:19 +0000
ROA not before: Wed 07 Feb 2024 12:29:19 +0000
ROA not after: Wed 05 Feb 2025 12:34:19 +0000
asID: 131199
IP address blocks: 193.22.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 19:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e3:db:9e:bf:d7:cb:26:82:cd:62:f7:f6:8c:9e:63:ff:a4:29:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 7 12:29:19 2024 GMT
Not After : Feb 5 12:34:19 2025 GMT
Subject: CN=874CAC769AE88C454D83EA87526433FF513D305B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:ec:99:4e:3a:93:db:01:70:9e:c7:5f:a5:
91:49:f7:9d:aa:b1:de:a7:79:f8:df:ff:50:23:fd:
e8:fe:e0:fe:96:d1:96:32:0d:1d:67:db:07:91:f1:
9e:a3:09:dc:f1:e8:dc:01:92:cc:cd:23:2e:22:3d:
c1:57:5f:5e:33:98:9c:a3:40:ff:82:9b:4f:71:f4:
69:3c:1a:b3:74:fa:cc:3a:14:66:a6:60:00:aa:d8:
f6:3d:f7:31:ff:af:af:0b:1b:85:3b:b6:5f:4e:08:
66:4c:47:1f:4a:6f:13:38:38:c1:ab:44:57:31:c5:
61:a7:78:8c:fb:8a:80:a8:d7:bb:2b:39:24:a1:01:
d1:fb:19:5d:13:77:48:85:f0:3d:16:9b:97:79:e1:
b3:cb:21:e2:0b:6f:bc:8c:bd:06:10:8c:fe:e8:ef:
d7:7d:de:e7:cf:0f:40:aa:e0:1c:b4:46:56:73:e0:
b0:b4:ad:77:91:9e:1c:af:5a:d4:27:47:a9:fd:c4:
a3:9a:be:d7:c7:be:40:70:71:f1:a3:e9:fe:ec:22:
99:14:10:d1:be:3f:b8:9e:26:46:60:06:a0:e2:79:
7d:1c:eb:a4:6d:aa:1f:4f:92:3b:55:c4:39:f2:21:
66:6e:16:2d:31:38:41:94:f4:e7:40:8b:4d:8d:1d:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4C:AC:76:9A:E8:8C:45:4D:83:EA:87:52:64:33:FF:51:3D:30:5B
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e32322e32342e302f32342d3234203d3e20313331313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.24.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d0:e1:77:bc:87:7f:01:a0:6d:e2:6c:1d:70:34:82:ac:22:
54:54:c1:ff:a7:8b:8b:e0:7c:7d:a5:64:b1:77:8c:c1:bc:6e:
d4:45:17:8c:67:2f:7a:ae:df:ad:40:b8:e2:f7:76:1f:ac:46:
7d:b3:b2:25:03:30:a9:60:2f:4a:4f:e0:54:2b:3d:70:55:91:
8f:87:2c:5d:ab:79:d6:c1:94:5d:ac:36:b5:4c:a8:a7:e9:be:
d2:3b:7d:f4:87:9c:63:74:6b:c3:c4:44:52:01:29:97:6f:b2:
e3:5f:24:5a:32:36:d5:6b:cc:c0:e9:32:7b:eb:7c:c1:e7:ed:
38:fe:73:66:80:19:4a:e0:96:f4:60:1f:28:57:1a:0a:49:d6:
48:a0:9f:5f:a7:a5:03:3b:f6:2a:ac:1f:97:45:f9:3a:ac:0a:
3e:49:c2:57:4d:f8:dc:ff:8f:3c:76:3c:00:35:7d:bc:f3:58:
13:ef:cd:d9:f8:3d:f7:2e:49:2c:fe:85:d4:f6:14:e4:df:62:
47:7b:70:ec:a9:9e:ff:8e:72:5b:83:70:82:5b:07:cd:99:7a:
0f:59:78:67:90:18:c4:05:7b:81:d2:00:8f:8f:8f:77:16:3c:
09:90:d0:cc:1e:01:57:c7:87:62:5e:88:28:e5:9f:6a:89:c8:
95:1a:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 20:51:08 2024 by rpki-client on console-fra.rpki-client.org