Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33362e3138342e302f32332d3233203d3e203437353833.roa
File: 3139342e33362e3138342e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier: +nf2cZFqnCrqLrdl7J6X6N+CyIpV2qChEXiH6n34CIU=
Subject key identifier: 40:A4:A2:83:D8:B2:64:7F:B5:A3:9F:AC:7D:53:49:B5:01:A5:1B:F4
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 39A2A34B5829167CD255D929988EF67A26B6A032
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33362e3138342e302f32332d3233203d3e203437353833.roa
Signing time: Thu 06 Jun 2024 13:53:50 +0000
ROA not before: Thu 06 Jun 2024 13:48:50 +0000
ROA not after: Thu 05 Jun 2025 13:53:50 +0000
asID: 47583
IP address blocks: 194.36.184.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 04 Jul 2024 16:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a2:a3:4b:58:29:16:7c:d2:55:d9:29:98:8e:f6:7a:26:b6:a0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 6 13:48:50 2024 GMT
Not After : Jun 5 13:53:50 2025 GMT
Subject: CN=40A4A283D8B2647FB5A39FAC7D5349B501A51BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:79:27:c9:65:bb:8c:92:96:4d:e3:bf:94:
04:1c:1d:6e:7d:5f:1f:bb:a2:a9:cb:ff:e2:b2:50:
0b:05:0e:22:31:ee:98:fd:95:43:76:f1:c2:09:13:
66:ef:f2:9e:c8:95:92:b6:49:44:e0:e4:76:ab:e1:
4e:80:db:df:66:b2:17:1d:bc:28:1b:c0:37:eb:21:
32:bb:e1:4f:4d:d4:b3:e8:c3:0d:47:ff:bf:a2:2e:
33:32:c7:e0:b7:17:c2:e3:d6:28:30:fd:d0:21:f8:
d7:cb:e4:8a:95:c8:d3:bd:35:d2:dc:0b:a3:b8:00:
13:07:62:3c:59:1f:23:1e:15:72:d2:aa:46:33:02:
91:0b:eb:0d:f8:a9:3e:d6:8a:98:43:11:c7:34:33:
88:e1:43:79:be:c4:9a:ec:9b:2f:05:07:f1:9a:51:
cb:05:df:23:30:05:4b:27:ed:0f:50:f6:ac:cb:28:
dc:47:5d:f8:c3:cc:3f:05:10:8f:74:aa:5f:d5:7a:
e6:89:7e:a9:eb:a1:c1:6e:87:fa:b2:05:43:07:d9:
a4:88:34:7c:33:53:1b:ad:7d:e8:d9:d4:49:5f:57:
7b:d5:38:cf:46:60:9c:03:eb:2c:f0:5e:ab:25:a5:
0f:61:2e:26:cd:48:d9:e3:3e:96:d6:b8:8b:e1:bf:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:A2:83:D8:B2:64:7F:B5:A3:9F:AC:7D:53:49:B5:01:A5:1B:F4
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33362e3138342e302f32332d3233203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.184.0/23
Signature Algorithm: sha256WithRSAEncryption
89:29:9c:b6:d0:f2:91:6b:d4:bd:a6:97:7c:32:16:a8:f2:6b:
4d:e5:1e:cd:d9:bd:f3:36:85:9b:8f:e7:da:e1:9f:89:a7:0a:
70:33:c4:7d:82:8d:47:51:5f:5a:74:7d:71:80:50:91:3d:cc:
05:fa:6d:ad:1e:73:fe:3d:12:2b:2c:6a:e5:22:ef:48:98:27:
26:04:1a:10:5a:4d:40:90:45:45:d0:db:1f:c1:99:1d:70:3a:
45:6c:f2:66:89:6a:34:66:d5:ba:7a:e8:22:15:e4:9d:d9:0f:
22:41:9f:bd:56:f2:eb:2e:da:6b:0b:3c:e1:cc:f9:60:88:b4:
7c:25:b9:96:6f:27:04:74:17:bf:76:c5:d6:c6:df:37:0e:ef:
b6:e7:d1:7e:6b:89:53:75:ff:b9:48:1d:19:b4:3e:d8:8c:e3:
6c:01:c1:de:f7:87:60:b3:6e:40:8a:88:3a:1a:78:b9:6e:f4:
3c:a7:76:4c:f3:ae:2c:6e:8e:84:6b:9c:c6:f4:40:69:4c:49:
c3:cb:dd:ef:bb:72:66:de:35:79:d5:f3:6f:a6:6b:54:35:20:
d5:d6:1e:77:86:6c:98:9a:38:b5:9a:8f:26:57:a2:90:8a:57:
93:b9:db:0d:93:31:da:38:43:75:90:6e:52:ad:cb:71:9f:ed:
58:f4:c1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 17:37:27 2024 by rpki-client on console-ams.rpki-client.org