Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38342e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Jk2/EgbmHq4E1yk7kq97LVRqSQdPTgZQbec38obuIk0=
Subject key identifier: D9:0F:5F:3A:AB:BF:AE:78:EC:7B:88:61:34:F3:2C:06:F9:88:06:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62C85D4A7E3B3A55EF22E66F2745583C3A46E9E2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:21 +0000
ROA not before: Mon 26 Feb 2024 08:48:21 +0000
ROA not after: Mon 24 Feb 2025 08:53:21 +0000
asID: 136787
IP address blocks: 155.133.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c8:5d:4a:7e:3b:3a:55:ef:22:e6:6f:27:45:58:3c:3a:46:e9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:21 2024 GMT
Not After : Feb 24 08:53:21 2025 GMT
Subject: CN=D90F5F3AABBFAE78EC7B886134F32C06F9880673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:fd:49:69:92:e5:76:bd:5d:1b:65:50:87:
50:9a:28:30:12:05:e9:1e:da:90:55:53:23:3c:3c:
2c:4e:83:78:fa:ea:1f:88:b6:43:b0:84:66:dd:a3:
fa:9b:22:96:99:34:71:72:db:65:67:66:50:c1:2a:
5f:d4:9b:b6:30:97:56:2b:0e:5e:68:91:84:4c:1a:
47:ad:cd:b6:b1:a0:53:ac:f5:f6:9d:a8:a5:23:8a:
95:af:db:d4:f1:8a:6a:5a:6f:63:77:f8:a1:89:c2:
b0:ef:0a:d5:eb:bd:e6:fc:3e:6f:ab:b2:9d:c3:76:
c6:cb:16:77:22:53:00:03:98:83:37:26:ad:3d:07:
fc:3c:b1:16:2f:36:5b:d9:2b:ee:82:5d:89:93:20:
99:de:fc:64:19:7d:e7:00:ad:66:5c:e0:07:45:15:
0f:b5:fa:3f:a4:b2:34:36:06:53:7c:cb:e7:d3:49:
f1:f8:9c:39:94:df:df:4d:34:8d:8a:3f:cc:82:a0:
ca:ce:8e:64:a7:11:5b:76:ef:30:a9:d5:ae:7a:50:
2e:eb:03:a7:af:81:94:b6:cd:2a:5e:21:70:1c:bc:
c3:a1:e4:ae:f1:ec:b5:94:f4:fe:14:f9:52:cc:b0:
98:90:80:96:5c:ef:11:3e:37:d0:af:55:47:ea:96:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:5F:3A:AB:BF:AE:78:EC:7B:88:61:34:F3:2C:06:F9:88:06:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:17:09:38:48:0d:63:01:92:3d:75:fd:c3:cd:a0:d5:4c:d2:
17:ae:fa:d9:66:c7:2e:0a:12:c7:fb:de:8b:80:70:19:78:9d:
77:d6:8c:12:a4:e8:b1:e4:a5:1f:b9:5d:4e:f2:75:77:c5:8b:
e2:be:d7:85:89:40:4c:31:e2:51:a8:bf:46:29:cb:61:a3:b1:
8b:f4:ac:46:4b:f3:a7:92:17:81:91:a7:62:d2:c7:b4:9f:d9:
f1:ac:63:c5:1f:6b:de:9e:71:59:41:7f:a4:bc:f1:bf:30:35:
ee:51:74:64:e8:ab:78:cc:c1:d8:27:70:d1:b4:7f:ac:5f:8f:
13:a4:8e:e5:96:88:33:ec:1c:67:dc:7b:d8:6f:b7:3e:02:47:
d9:67:96:e9:11:8a:7c:4a:fb:de:f0:4a:c7:ab:9c:6c:39:32:
c4:2d:15:ec:89:93:0d:47:f8:1a:f6:94:23:aa:9f:1d:37:ff:
9a:7a:a5:7f:e3:34:4f:51:49:93:a1:af:f0:96:30:3b:24:ca:
c5:9b:54:81:2b:40:af:92:ee:60:de:50:71:cb:41:36:7f:51:
a3:a1:3d:8f:a5:17:86:3e:62:97:9b:17:fb:94:2b:dc:a4:33:
40:16:10:ca:5b:d1:74:5a:69:26:9c:a3:ea:f8:ba:2c:d3:bc:
4f:42:12:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 12:18:12 2024 by rpki-client on console-ams.rpki-client.org