Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20333933393432.roa
File: 3139342e3139352e39342e302f32342d3234203d3e20333933393432.roa (raw, json)
Hash identifier: 3t61FrgcMDCsfQNQZpmOPzlZUIzM8W6fEXbs5/c4f3s=
Subject key identifier: 84:25:CA:B5:E9:33:0F:5F:F0:C9:E7:D8:C1:30:C9:21:EF:28:02:23
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5C7EB9DCA807DD2C85E4E33B1AEEFDF277561484
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20333933393432.roa
Signing time: Mon 26 Aug 2024 11:05:32 +0000
ROA not before: Mon 26 Aug 2024 11:00:32 +0000
ROA not after: Mon 25 Aug 2025 11:05:32 +0000
asID: 393942
IP address blocks: 194.195.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 19:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:7e:b9:dc:a8:07:dd:2c:85:e4:e3:3b:1a:ee:fd:f2:77:56:14:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 26 11:00:32 2024 GMT
Not After : Aug 25 11:05:32 2025 GMT
Subject: CN=8425CAB5E9330F5FF0C9E7D8C130C921EF280223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:5d:cb:39:04:4b:60:3e:be:a8:c4:46:36:
13:79:05:15:16:c4:e2:c6:07:b9:dd:88:4c:d2:4a:
bf:8c:c3:be:42:ae:4e:17:1e:9a:1d:36:a2:61:29:
68:3c:e6:61:d0:e6:84:00:73:ad:49:97:bb:d5:30:
3d:79:6e:07:f1:25:b3:88:48:41:e8:7f:e6:38:11:
de:5f:72:a1:f6:10:dc:e5:98:27:e2:00:14:9f:dc:
02:5a:87:76:98:93:0f:14:54:4a:da:ab:48:cc:bf:
37:01:07:3c:4c:00:d2:be:72:40:81:54:ce:ba:d9:
eb:7a:d3:90:10:ee:75:b2:a4:3f:5b:05:47:13:fc:
14:5c:db:ac:b5:c8:0f:8c:0f:62:af:fc:e5:61:8a:
c2:e0:37:94:88:92:49:7a:d3:a7:17:1a:58:4b:12:
2d:08:50:08:71:bb:99:eb:6d:82:a2:7b:99:b1:d1:
0c:87:ee:70:fd:4a:34:9c:95:33:d7:d7:ed:c4:78:
c3:21:47:60:93:57:01:31:3a:4c:17:00:dd:33:6e:
31:7a:92:99:71:00:c0:31:6c:55:69:56:82:46:19:
10:a8:b5:59:68:b7:36:53:97:1e:c2:b3:66:8b:84:
d8:96:cd:58:53:d5:a8:8f:67:76:59:3b:d4:46:00:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:CA:B5:E9:33:0F:5F:F0:C9:E7:D8:C1:30:C9:21:EF:28:02:23
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20333933393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6d:ef:00:5b:72:f8:92:f9:50:a1:07:50:ea:ff:cc:36:bf:
a0:52:3c:7e:72:89:e8:e9:f6:e1:1e:4e:21:c7:b0:23:13:c1:
a2:48:c9:8c:29:20:87:bd:8b:23:20:e2:12:5f:a7:35:14:56:
8e:81:6e:51:fe:4b:ea:59:6d:23:e7:24:7a:fa:c3:65:e7:21:
46:ff:a2:cf:85:bc:5e:6c:65:90:5b:7d:a8:ef:a6:18:95:07:
6b:56:19:6b:75:f4:41:a4:84:07:df:f9:01:50:a2:fe:02:08:
64:4e:24:b6:49:f8:3a:b3:b8:01:34:0a:4b:6a:4c:8e:78:66:
1a:57:e6:73:71:10:56:bb:d0:dd:4f:e4:d7:b3:ec:00:3a:c1:
61:c7:70:67:a5:b4:5d:db:c8:58:ed:af:24:87:cd:88:d9:36:
be:27:82:5b:69:47:c8:73:ef:22:4e:1a:7e:26:71:11:24:b8:
8e:30:6c:5f:44:84:98:60:62:ad:24:9e:8e:93:8b:ac:07:5d:
f5:e9:1b:21:d4:15:8e:84:9d:32:97:c9:e1:fd:13:61:21:12:
85:d8:dd:ac:80:c8:d3:b5:32:c0:22:58:db:3b:d2:a2:ce:b7:
27:41:89:15:57:72:91:22:c8:79:dd:48:56:f4:c8:29:a2:75:
9a:b2:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:28:28 2024 by rpki-client on console-ams.rpki-client.org