Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37382e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: +UtZcY/RvlonN2KVA1fur3AOOvT4MQpz+7wpg1mgDbI=
Subject key identifier: CE:0F:35:3E:0D:16:9F:F4:5D:E7:B4:62:13:13:49:1C:AD:BB:D2:68
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0440A11E09AF279EA21E4134D139E3F5ADFB28AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:29 +0000
ROA not before: Mon 26 Feb 2024 08:48:29 +0000
ROA not after: Mon 24 Feb 2025 08:53:29 +0000
asID: 136787
IP address blocks: 155.133.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:40:a1:1e:09:af:27:9e:a2:1e:41:34:d1:39:e3:f5:ad:fb:28:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:29 2024 GMT
Not After : Feb 24 08:53:29 2025 GMT
Subject: CN=CE0F353E0D169FF45DE7B4621313491CADBBD268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:07:b0:9f:af:e6:31:47:f1:75:20:90:50:
d2:0e:60:ec:d2:43:09:51:58:7d:69:cd:6e:12:53:
58:4f:ba:40:d2:08:41:94:39:4b:9a:3e:12:7f:f5:
ea:5e:fb:12:55:e5:67:d5:57:a9:56:c1:d5:91:25:
39:93:2f:ac:75:dc:46:24:10:62:40:48:bc:b5:5a:
9e:6d:5e:12:c7:d4:67:1d:63:98:78:dd:87:99:ba:
01:5e:57:1e:f9:37:7b:38:70:11:70:99:23:1a:e8:
2b:7c:86:d8:79:98:a4:91:fd:de:6a:f2:06:0f:70:
1d:ff:78:cf:7d:4c:58:18:5d:9a:d8:3f:f3:fe:55:
2d:36:e2:8d:cd:3e:a6:a1:21:07:ad:73:0e:22:50:
62:28:f5:bf:62:c2:ce:1f:db:21:2a:b1:5d:6a:06:
65:33:c4:e7:37:e7:d2:09:60:d9:5c:0a:10:91:b9:
40:df:c8:90:58:41:35:1d:e2:ee:de:ff:ae:d5:ab:
32:fc:52:0c:74:89:90:74:26:7a:17:5c:d5:14:d5:
2a:2b:c6:7f:40:b1:19:f1:21:58:27:48:44:39:bd:
48:e2:2f:54:65:47:e2:a3:42:a9:a2:c8:b4:fc:09:
66:8d:a7:ab:5b:c6:fd:3e:f3:c9:a3:ed:f7:53:01:
24:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0F:35:3E:0D:16:9F:F4:5D:E7:B4:62:13:13:49:1C:AD:BB:D2:68
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.78.0/24
Signature Algorithm: sha256WithRSAEncryption
58:83:d5:df:c4:ed:c7:47:1c:8c:03:4e:b7:f6:44:d6:f5:3d:
d1:29:c6:28:69:0e:fc:50:44:da:48:16:c9:16:40:48:6e:53:
a7:55:a7:31:d0:e6:cb:20:20:01:8f:dc:aa:9a:18:cb:8d:16:
30:62:e0:ed:98:ae:9e:03:70:51:33:52:0a:ea:fd:c9:05:21:
d0:a5:0a:d6:cd:1b:8f:96:4b:de:60:e0:d9:3b:2c:d5:1a:95:
dc:09:2f:d0:dc:40:b6:5a:10:5e:b8:f9:d8:0b:20:9a:0d:69:
f4:e1:cc:2e:07:5a:a4:22:e7:d7:2c:55:32:e2:47:eb:89:f1:
4e:c4:9c:36:a2:3b:2c:20:39:fe:9c:c4:b4:82:54:63:7b:74:
36:a5:85:69:15:38:84:f4:5b:79:c1:14:6e:ae:7d:84:48:02:
41:3d:93:4c:0f:b6:ce:37:5b:0b:b2:7c:f6:6d:1a:77:44:24:
98:59:c5:8f:f8:37:9d:e0:d9:78:69:8a:4a:ad:ee:ca:e8:e3:
91:ea:52:4f:d7:16:9e:dc:1a:d1:35:82:f8:e1:da:12:e8:ee:
fe:8d:bf:9a:c4:d3:a0:c5:2d:16:8c:bb:3f:1c:f7:2d:a3:37:
6f:72:52:11:a1:0a:73:35:f0:c4:ae:60:c7:28:29:bb:d0:3c:
f1:3f:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 11:57:01 2024 by rpki-client on console-fra.rpki-client.org