Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37382e302f32342d3234203d3e20323039383534.roa
File: 3135352e3133332e37382e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: yWdHkugYNB0+Al8TVKxDR6lqAUi7lAtVyibCNZY0/HI=
Subject key identifier: 28:5A:11:1F:B0:E0:C9:C8:75:51:BC:BB:96:22:C2:1B:DC:01:C9:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 148EDD20B36103E50915FBC621C616A6CBC7F7EE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37382e302f32342d3234203d3e20323039383534.roa
Signing time: Mon 04 Mar 2024 09:26:47 +0000
ROA not before: Mon 04 Mar 2024 09:21:47 +0000
ROA not after: Mon 03 Mar 2025 09:26:47 +0000
asID: 209854
IP address blocks: 155.133.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 12:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8e:dd:20:b3:61:03:e5:09:15:fb:c6:21:c6:16:a6:cb:c7:f7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 09:21:47 2024 GMT
Not After : Mar 3 09:26:47 2025 GMT
Subject: CN=285A111FB0E0C9C87551BCBB9622C21BDC01C9F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:39:21:12:62:7f:99:94:e5:f5:96:2a:8e:
03:f2:23:4e:f9:51:09:83:e5:4b:73:4b:6f:99:b1:
eb:e8:2d:fe:62:a1:79:a5:46:b5:ce:4a:75:33:a6:
ee:2e:fa:fc:78:e3:a6:56:72:0c:9b:75:41:0d:d2:
71:a1:5c:eb:6c:15:d1:9a:58:1d:3e:c5:6c:65:6d:
37:5b:80:e4:1a:80:c3:ce:9b:0f:6f:00:61:9a:16:
4e:67:3b:d0:01:d1:f1:6e:11:e1:b6:48:16:cc:22:
e8:34:74:ee:17:9b:98:8a:0d:10:c2:ff:c5:1a:dc:
5d:b1:57:50:3f:f6:31:8f:2f:f9:aa:8c:77:36:b3:
79:f4:70:16:b7:5e:37:64:1b:c7:5a:f3:b3:ec:fe:
01:44:ea:f9:05:69:01:74:0c:3d:6b:e7:fa:50:6e:
b4:76:9b:03:2c:ca:f9:c2:94:eb:bc:21:fa:a2:16:
5a:a7:98:a4:73:c8:27:b7:a0:de:d5:e7:c4:93:8d:
8d:09:c6:8a:73:04:7d:23:84:5b:c0:1d:d8:2e:35:
58:d8:24:db:3e:f6:53:b8:6c:78:0e:69:ca:6a:d9:
a6:4c:1a:68:35:d8:b3:b1:a8:79:ad:12:c5:dc:17:
98:c1:48:24:a3:15:35:52:d2:e2:e6:15:5a:b6:a3:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5A:11:1F:B0:E0:C9:C8:75:51:BC:BB:96:22:C2:1B:DC:01:C9:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37382e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:dc:aa:b6:da:31:9a:8d:50:d8:a6:25:c4:09:13:5f:46:b7:
73:3d:b7:2f:4b:cf:8a:83:36:30:6f:0b:e2:48:63:dd:58:13:
1d:51:67:57:b0:46:bb:b5:a0:a3:66:f0:4a:f6:44:03:cf:6f:
9d:ba:05:a8:6a:5e:ea:4e:69:78:0e:b6:58:f6:dd:6a:fb:18:
73:4e:0d:59:2a:b3:07:7a:7f:4d:52:7e:47:a8:3a:c1:a7:7d:
d6:47:bf:44:83:bd:5f:ed:b9:43:f7:76:15:61:02:1b:6b:05:
15:90:0f:7c:f3:50:c6:b8:63:8b:63:1d:c7:69:2e:39:13:0f:
60:24:89:5a:e6:19:64:44:c4:78:b0:31:42:b3:72:17:8a:ed:
43:4a:61:ff:12:f7:ec:31:78:77:3c:53:15:ef:54:7b:20:96:
bf:e7:7a:40:90:ef:64:f7:55:c0:11:3f:4b:2c:9e:14:2b:d9:
66:c8:26:37:9a:a0:a1:d5:44:50:fa:e7:f7:ba:82:e1:e0:db:
7d:b8:61:d5:4f:10:50:fb:da:bc:ff:c1:02:ec:f9:ab:42:15:
ab:a5:c7:38:a7:d0:a9:f8:ca:b0:ad:2c:2f:7e:94:05:97:e8:
de:5c:55:66:18:0d:9f:ef:90:54:f3:84:44:a5:00:47:38:0d:
6e:bb:fc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 17:22:44 2024 by rpki-client on console-ams.rpki-client.org