Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31342e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e31342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: rK6sg6D8LoRVftr27Plktlk8W6mS6TQFllwDRG7v0fM=
Subject key identifier: 4F:EA:0E:1E:F1:B4:1B:A6:68:2E:C9:90:83:06:14:1A:73:FB:24:33
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B58E61792CDF133565272DE53F91151839077D2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:23 +0000
ROA not before: Mon 26 Feb 2024 08:48:23 +0000
ROA not after: Mon 24 Feb 2025 08:53:23 +0000
asID: 136787
IP address blocks: 155.133.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 12:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:58:e6:17:92:cd:f1:33:56:52:72:de:53:f9:11:51:83:90:77:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:23 2024 GMT
Not After : Feb 24 08:53:23 2025 GMT
Subject: CN=4FEA0E1EF1B41BA6682EC9908306141A73FB2433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:c2:f0:b1:82:43:be:f9:b3:9c:ce:19:69:
b1:6f:f4:43:99:5f:ee:ba:02:90:e4:10:0d:44:21:
72:3a:ed:af:62:ba:e8:67:b1:b6:f0:15:6d:c4:56:
e1:6a:74:e4:bc:2a:28:5f:be:95:7c:ee:11:d9:c1:
a3:ec:84:de:95:aa:97:63:e8:89:78:a4:83:c6:2e:
9e:5f:e9:45:ef:55:4b:64:cb:87:96:8f:ea:2e:b7:
eb:54:12:e1:6a:97:b5:73:de:ce:7a:9e:4e:b2:7a:
67:b6:34:fd:ce:e5:93:5a:a9:4f:6a:c6:71:ec:ef:
92:73:0d:a6:28:69:a6:6f:b3:bf:11:11:00:60:ff:
93:77:75:c2:9d:eb:ce:6f:a2:f2:6a:b1:45:ae:27:
f6:d7:46:6f:49:aa:19:cd:87:96:b6:7b:c0:65:0a:
32:ab:7b:a3:78:06:c0:e4:a5:92:66:e3:7f:c1:f9:
9a:44:a5:ba:98:33:61:ec:b9:b2:fc:c4:ea:dc:ce:
6a:11:53:d1:77:3c:64:e2:bd:65:5f:03:be:02:56:
ea:de:e4:f6:21:db:5f:b5:cb:2d:c0:3e:d8:ba:54:
48:86:31:e7:1f:48:e9:5a:93:97:24:6c:db:d2:17:
f3:d5:f6:73:56:f7:24:a6:38:80:4d:a1:43:d1:fd:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EA:0E:1E:F1:B4:1B:A6:68:2E:C9:90:83:06:14:1A:73:FB:24:33
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.14.0/24
Signature Algorithm: sha256WithRSAEncryption
94:6b:5c:b5:2e:17:06:a2:94:36:6b:8c:bc:8d:a8:64:a9:ea:
b9:84:00:ad:60:2a:5d:af:bf:44:44:8a:a5:10:50:ce:63:9c:
07:47:9f:42:cb:1e:34:8f:64:c6:70:88:3b:12:ce:75:67:5f:
8e:ab:7d:d0:f5:05:25:f5:95:94:92:5e:f6:d3:d5:05:e0:39:
cf:3c:71:4a:3f:52:bf:ad:24:20:2a:ea:2e:7c:ba:66:b1:76:
b7:4e:bf:12:94:d9:34:4a:55:2b:04:b0:40:18:9d:00:3d:93:
0d:d7:5d:26:20:89:02:3b:fe:5a:86:e3:4b:67:54:0f:b4:2e:
18:53:6c:f7:91:24:24:e8:6e:ec:3a:30:a4:2d:91:5d:e5:31:
f9:c4:3d:87:ea:df:04:e4:f6:a7:4c:0d:81:9b:76:9c:0d:06:
cb:8d:72:88:8b:2c:61:63:cf:c0:ff:02:43:ee:78:bc:8a:b1:
76:b3:88:41:d7:67:49:3f:4c:58:86:92:92:d2:1a:9a:00:a0:
39:92:b4:2b:7b:83:44:ec:73:4d:66:f3:b7:28:d1:b6:fc:ef:
8d:3c:95:0c:b8:c9:f6:6f:b9:39:65:65:df:f1:05:0b:d0:c3:
33:a1:c1:a0:23:70:92:b2:e6:2f:49:08:46:cd:79:30:00:23:
e8:8d:ed:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 17:22:44 2024 by rpki-client on console-ams.rpki-client.org