Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33362e3138362e302f32332d3233203d3e203437353833.roa
File: 3139342e33362e3138362e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier: wXhvG0n4tbCuvQfqJPg0rB20EK+O5JMS8N2LzJWAjhs=
Subject key identifier: 87:D1:F8:94:92:8D:A4:23:40:6E:C4:75:1C:F4:EC:B7:B7:66:03:06
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 29AF8C43F31922E6F277904410DCD3B338DFB46B
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33362e3138362e302f32332d3233203d3e203437353833.roa
Signing time: Thu 06 Jun 2024 13:53:59 +0000
ROA not before: Thu 06 Jun 2024 13:48:59 +0000
ROA not after: Thu 05 Jun 2025 13:53:59 +0000
asID: 47583
IP address blocks: 194.36.186.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 04 Jul 2024 16:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:af:8c:43:f3:19:22:e6:f2:77:90:44:10:dc:d3:b3:38:df:b4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 6 13:48:59 2024 GMT
Not After : Jun 5 13:53:59 2025 GMT
Subject: CN=87D1F894928DA423406EC4751CF4ECB7B7660306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:04:68:a5:96:5e:fd:08:01:4c:10:7a:72:
58:97:65:de:c6:c9:3c:95:c9:1c:78:67:f0:49:48:
ec:a6:a9:ab:29:84:76:0a:7f:a1:52:a1:b4:2f:93:
0b:12:37:15:dd:2c:7e:ec:26:16:c9:a5:64:ba:7c:
14:10:36:c9:16:dc:61:36:2b:c5:18:7a:11:97:39:
7b:2e:ca:e2:63:91:4f:9e:06:dc:d7:d0:ad:4e:93:
98:d8:38:07:a9:cd:40:9c:d8:01:d0:33:0a:a0:fc:
db:9d:87:eb:08:b0:52:58:80:53:c1:70:39:ae:dc:
fb:e1:4a:76:6a:80:a4:c9:7a:93:e5:08:2f:96:3d:
c6:d3:4a:2f:0d:27:2b:66:2d:43:e6:0f:58:9a:af:
4a:77:9d:8a:92:79:ee:13:a2:5c:ee:29:42:bc:00:
6a:f3:e2:98:c9:18:8e:fb:0f:a1:2d:77:b0:bb:95:
5c:cb:0b:0c:e5:33:20:6b:b8:f0:40:69:6f:c8:e4:
c9:74:7f:85:61:b9:45:d2:a1:09:6a:ec:0f:1a:c9:
09:4e:d8:07:ca:c0:4b:e9:1e:82:ac:cd:1a:f1:4f:
fd:cd:60:26:20:78:4b:d4:88:31:9d:13:99:45:9f:
b9:90:67:4b:4f:90:6f:f2:a1:1a:1e:c3:3d:91:11:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:F8:94:92:8D:A4:23:40:6E:C4:75:1C:F4:EC:B7:B7:66:03:06
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33362e3138362e302f32332d3233203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.186.0/23
Signature Algorithm: sha256WithRSAEncryption
98:98:1c:c6:d1:73:5d:91:02:51:60:6b:41:de:f7:25:5d:fa:
24:82:b7:f8:a9:6b:e7:51:e6:38:a1:0e:96:f8:f5:b0:39:f3:
58:e1:d4:ad:15:e7:ef:e3:db:6a:d7:cd:49:12:e2:51:83:cc:
a4:6b:23:a9:e3:13:99:00:7f:c3:ff:32:05:cb:a8:0d:b2:70:
16:57:c2:cf:d6:f1:d3:d5:88:ff:d7:3f:26:d8:39:03:9b:e6:
4c:68:2a:29:49:fa:58:79:52:8d:e2:5b:4f:3d:81:3e:3c:a1:
ea:bf:d4:62:9e:be:25:5f:2f:b7:78:88:89:06:c8:60:11:c0:
96:1e:8a:40:bc:b3:75:25:b7:8a:45:60:a7:83:81:7c:e4:8d:
45:7d:c1:db:cd:ce:41:f8:8d:a5:a5:39:8a:b5:f2:69:ac:32:
56:10:2f:49:3c:cd:45:f9:ca:ca:07:3d:3b:28:05:26:99:15:
bf:dd:64:72:ca:ae:3e:c7:dc:c5:66:9e:fb:11:d7:7a:08:fc:
38:30:ff:e1:32:69:01:39:a8:2b:78:23:18:17:66:e3:57:01:
e2:4a:27:c7:24:ac:b2:f2:da:5b:a3:bc:a6:98:e4:da:d1:f6:
a9:b7:c7:de:16:b8:6c:01:82:aa:db:0f:8e:37:b8:cf:ac:62:
a0:08:4b:a7
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 4 17:49:27 2024 by rpki-client on console-fra.rpki-client.org