Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36342e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e36342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eAODTxbYfA8J/lQEeXyuSOuD6IOgDui1f4RUxMMalo4=
Subject key identifier: CF:5C:E1:36:B7:EF:D5:8C:E0:D1:47:BA:DC:D4:9C:C5:78:15:03:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 27DDCD23010A3EC9A92F545EA1E277FA8A857665
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:31 +0000
ROA not before: Mon 26 Feb 2024 08:48:31 +0000
ROA not after: Mon 24 Feb 2025 08:53:31 +0000
asID: 136787
IP address blocks: 155.133.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:dd:cd:23:01:0a:3e:c9:a9:2f:54:5e:a1:e2:77:fa:8a:85:76:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:31 2024 GMT
Not After : Feb 24 08:53:31 2025 GMT
Subject: CN=CF5CE136B7EFD58CE0D147BADCD49CC57815032B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:e6:2a:cb:a9:28:3f:37:ef:8d:e0:8c:7d:
38:4a:51:63:3c:d6:72:46:70:da:0f:58:c0:61:a9:
6c:46:55:a6:a8:f1:b3:bc:f4:43:b1:f3:ac:48:33:
a8:aa:5f:3d:b6:d2:3b:86:56:16:58:39:77:93:40:
00:c7:59:f3:69:4c:3b:91:b0:1e:71:1d:b8:77:14:
87:b9:3c:cd:19:f9:86:62:64:ef:27:a5:d5:08:5b:
e8:24:29:15:cf:6f:21:5d:8d:77:63:aa:f5:2a:e6:
dd:2d:ac:65:48:6d:74:76:cd:47:ae:12:54:26:a7:
61:66:8a:98:98:a3:13:e5:40:c0:2c:d7:35:19:1f:
52:07:54:b7:e1:09:7e:83:fa:a6:ce:90:ea:49:95:
2d:fd:24:6a:e8:cc:ed:0a:19:ae:1f:2b:86:39:f2:
20:88:5a:cb:97:94:d8:a2:bc:50:ad:c1:94:fb:9d:
6b:a9:b2:a0:ac:48:f3:7e:08:cd:1e:f3:04:b1:00:
39:32:b3:c9:df:18:b7:80:d1:97:b0:da:2e:2a:14:
35:62:f0:85:a5:2a:09:88:23:ba:cc:c1:92:d0:11:
7c:73:a5:de:ad:ab:85:25:54:f6:9e:86:65:2b:1f:
65:5b:00:96:f0:98:8a:af:c4:79:7c:d6:50:f3:12:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5C:E1:36:B7:EF:D5:8C:E0:D1:47:BA:DC:D4:9C:C5:78:15:03:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f1:80:77:49:85:2c:4c:8e:a7:43:a0:f9:5d:32:d9:4e:77:
4e:05:95:1d:eb:52:20:f7:86:1e:de:da:71:87:70:87:5d:fd:
60:27:23:85:95:ea:d9:4c:8d:a0:0c:8a:a9:a1:8e:0a:f1:5a:
b6:d9:ef:89:8a:ee:95:bb:e3:28:26:f5:4d:bd:1b:5c:e4:20:
3f:6a:e1:de:51:52:9b:fa:ff:37:f0:2a:e5:8f:9d:04:42:db:
4f:a0:49:39:12:d7:0e:5b:f6:0a:32:bc:b0:ee:50:43:a3:9f:
9d:d8:57:d5:e2:6f:24:2c:a2:c1:46:96:b6:3b:cd:4e:30:3c:
dc:f9:d1:2b:1c:0d:01:f1:e3:c4:c2:33:90:ef:b8:48:dd:54:
8f:50:7b:6f:dd:b0:91:6d:af:5e:f6:63:2f:c8:08:95:a8:7c:
e8:7a:10:b2:11:60:d1:43:d0:42:09:e4:a6:89:e7:2e:2e:2c:
96:05:ac:c8:94:e7:b6:3b:2a:42:d3:63:a4:fd:b0:93:a5:75:
3a:fa:6a:76:ba:75:2a:52:37:23:4c:b6:5c:b2:35:e6:95:56:
d9:f2:fe:21:dd:cc:88:ab:ee:ec:3f:23:45:19:bd:9b:0a:c4:
2a:dc:b7:ea:94:d5:87:cf:b6:b0:4d:5d:e0:f6:fa:13:d8:b5:
b9:ab:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 11:57:01 2024 by rpki-client on console-fra.rpki-client.org