Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e35392e3235322e302f32322d3234203d3e203432333636.roa
File: 3139342e35392e3235322e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: vRBXa9/Yt8TdtdXR/zDliIH4pcm5MEh44zSvrlfXi6w=
Subject key identifier: 6B:30:2D:CC:3F:02:1F:77:6D:C3:F8:1E:A5:0C:B2:B7:02:DA:E0:6E
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 3B3A50F3E5C744AB96332F89037E814840647150
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e35392e3235322e302f32322d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:22:48 +0000
ROA not before: Mon 17 Apr 2023 11:17:48 +0000
ROA not after: Mon 15 Apr 2024 11:22:48 +0000
asID: 42366
IP address blocks: 194.59.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:3a:50:f3:e5:c7:44:ab:96:33:2f:89:03:7e:81:48:40:64:71:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:17:48 2023 GMT
Not After : Apr 15 11:22:48 2024 GMT
Subject: CN=6B302DCC3F021F776DC3F81EA50CB2B702DAE06E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:af:57:fb:f3:9c:d6:ab:3a:34:be:8d:f7:
46:9f:d1:03:bf:bf:10:db:50:c1:3e:8b:2b:f6:5c:
78:52:98:93:9f:db:ed:93:f2:3d:bb:f8:aa:c2:2f:
ba:21:b5:fb:a5:2b:1a:66:51:3a:bc:29:9b:c7:82:
00:64:c1:1d:05:23:37:f3:fb:51:cc:78:8e:79:d2:
e3:9c:9d:14:54:f6:5a:8b:00:57:e1:88:fe:23:b5:
a1:9a:6f:2b:6b:5b:15:81:e9:0e:06:08:65:83:37:
19:f5:ff:5c:29:ed:9b:ad:78:8f:a8:c3:32:db:a6:
9f:65:24:06:0b:f7:75:37:d3:dc:8a:3c:28:4e:9a:
df:c7:d3:13:d3:33:b2:cd:fa:4e:45:5d:25:e6:7e:
35:f0:d5:0b:4e:f4:68:58:e4:e4:fb:3f:80:fa:d8:
38:a1:e4:7e:7c:3f:81:f2:0e:2a:45:7d:94:c8:96:
b2:bf:9d:37:8e:b7:a9:73:b2:f1:0c:b7:9a:5d:b6:
11:2b:e4:92:7a:eb:6a:8b:6a:c2:46:f8:f5:8b:5b:
09:0b:da:95:9b:60:04:a3:34:c0:e9:db:6a:e2:f6:
e8:e0:5b:2c:fd:11:a6:3b:08:e4:e9:65:2a:68:d6:
fb:20:f8:7a:e0:2a:f3:2a:05:49:f2:a6:d2:93:87:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:30:2D:CC:3F:02:1F:77:6D:C3:F8:1E:A5:0C:B2:B7:02:DA:E0:6E
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e35392e3235322e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.252.0/22
Signature Algorithm: sha256WithRSAEncryption
95:bd:cd:74:ac:b3:80:3e:72:c2:23:de:4a:62:02:b7:09:17:
bc:c8:ad:cf:ce:83:6a:2a:79:95:b6:e1:95:f1:11:c2:67:18:
3f:71:7e:f1:8c:43:dc:18:25:d2:f9:51:6f:30:f5:03:b1:01:
eb:55:11:e7:79:77:59:15:ec:9c:9a:b2:8e:28:ff:40:dd:43:
82:30:96:e2:56:8e:f6:1a:ef:59:42:99:cc:46:d8:73:44:6e:
3b:ed:cb:3c:f6:1a:c3:76:2f:e0:c5:ab:8d:bf:1c:5d:4c:a5:
68:83:a8:dc:d7:40:dc:65:df:26:b1:2a:d2:cb:40:91:52:3f:
e6:7b:6c:d6:6d:84:e0:7c:78:57:2b:04:46:ce:e9:f4:1f:41:
5c:10:92:15:1a:0b:16:45:35:8c:90:6e:48:d3:6d:0b:17:11:
74:16:7d:65:df:0c:d0:dc:99:21:01:f0:b2:9a:d5:77:00:51:
c4:6a:96:56:f9:04:3a:55:ef:65:b1:d1:db:d8:fb:30:0d:5d:
8f:28:ed:a3:98:65:93:09:8b:fd:bf:e4:b5:f6:74:7d:46:3c:
c3:3a:09:05:37:7d:4f:fa:76:80:3a:82:d4:a4:b9:bf:91:e7:
6e:62:62:8e:de:27:a1:ec:3c:0b:77:82:07:c6:97:be:2d:1c:
5c:7a:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 17:55:36 2024 by rpki-client on console-ams.rpki-client.org