Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37372e302f32342d3234203d3e20313331313939.roa
File: 352e3130342e37372e302f32342d3234203d3e20313331313939.roa (raw, json)
Hash identifier: 8Ao9PYUILZhttvONAqPNiqYLjqsSo8RcMiRJTb3sTF0=
Subject key identifier: 29:52:0D:24:F4:CF:17:E3:F1:91:A8:F4:03:48:0E:88:F9:76:C6:EC
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 61E24DEB79A0E82A599722C231C0970C1E70FA
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37372e302f32342d3234203d3e20313331313939.roa
Signing time: Wed 07 Feb 2024 12:34:15 +0000
ROA not before: Wed 07 Feb 2024 12:29:15 +0000
ROA not after: Wed 05 Feb 2025 12:34:15 +0000
asID: 131199
IP address blocks: 5.104.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 19:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e2:4d:eb:79:a0:e8:2a:59:97:22:c2:31:c0:97:0c:1e:70:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 7 12:29:15 2024 GMT
Not After : Feb 5 12:34:15 2025 GMT
Subject: CN=29520D24F4CF17E3F191A8F403480E88F976C6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:01:8b:8e:25:ca:5c:6a:b5:23:2f:fd:91:
55:51:84:1b:10:cc:8d:c7:5f:55:9b:a1:52:48:5a:
de:0e:4d:7b:5c:41:13:14:18:37:74:16:b8:28:3b:
9d:7c:e1:90:99:1f:dd:d8:88:d5:0e:53:41:eb:a2:
79:37:29:e9:ec:b1:5a:09:90:35:8a:f9:98:bd:14:
a9:ac:9c:e9:d8:9f:53:3d:1c:84:56:b1:1e:1d:be:
2c:ae:c3:73:db:0a:30:c4:d2:c2:42:90:c7:95:30:
70:b3:c2:80:ff:58:ef:22:a1:a2:67:bc:cf:1d:ff:
fe:16:bd:55:04:0b:c6:df:4f:12:62:47:7c:16:c8:
c2:c9:43:8a:eb:ce:c1:7e:de:ce:d5:a6:ed:a7:1e:
f9:a6:22:80:92:19:45:a7:24:05:51:c9:1c:97:03:
33:18:be:e6:1e:fc:0b:cd:12:4c:47:c9:59:98:39:
01:84:52:ff:fd:26:99:0b:8f:a8:5a:85:06:80:35:
28:15:d1:fc:c4:7a:c2:9e:fc:45:d6:dd:e5:62:bd:
b8:1c:e6:32:81:db:8c:ef:5e:74:cc:9b:6d:1d:ae:
c0:9f:30:d3:37:94:62:65:26:a4:56:f5:94:2b:e4:
66:04:b8:9d:d0:56:ed:ed:92:99:d5:75:61:0d:be:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:52:0D:24:F4:CF:17:E3:F1:91:A8:F4:03:48:0E:88:F9:76:C6:EC
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37372e302f32342d3234203d3e20313331313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.77.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4a:74:b8:26:bc:f6:62:4c:25:9b:53:d2:8e:2c:05:22:ba:
a5:97:98:8b:73:4d:2b:c8:e3:48:81:62:71:78:4a:ac:a3:6a:
7b:f2:33:44:f6:c3:7e:4f:a5:9b:87:82:75:32:38:cd:bb:c9:
7f:11:be:c9:ff:7f:44:79:33:7f:85:58:a6:fd:e4:13:28:bc:
86:b4:b3:46:11:29:d3:1f:83:c8:56:d0:eb:fa:42:db:db:da:
21:05:1f:4e:10:21:52:06:a5:47:63:12:7e:06:ee:b3:5a:83:
9a:3e:5d:ff:45:a9:a8:07:38:42:9b:f0:be:c7:8c:10:45:b2:
8b:e2:aa:b0:66:01:e3:be:15:cb:3c:27:1d:18:3f:ba:a0:fd:
52:51:60:fb:a6:01:13:c2:ef:e1:e2:79:5e:85:13:92:88:e4:
8d:9c:3e:54:f1:ac:ec:b9:8c:01:06:6a:3e:87:fc:4b:20:d4:
45:4e:de:ce:b2:d3:f6:ed:74:34:9e:76:73:9d:dc:f0:08:b7:
40:93:bb:64:25:cb:2e:81:77:cd:76:b0:1e:da:22:7e:c0:cf:
93:f4:c3:48:28:a3:d3:dd:c2:dd:1f:9c:13:31:e4:cd:75:bc:
ac:0f:dd:22:10:7c:2f:a9:c2:d4:87:0c:78:e0:1b:34:3e:a0:
2c:a6:de:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 20:51:08 2024 by rpki-client on console-fra.rpki-client.org