Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20383334.roa
File: 3139342e3139352e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7wb5fPq2RCd3R4fEA4CpOdYlNr8RqkntrwKIDM3Fxcw=
Subject key identifier: 3B:4A:38:72:B7:6A:6E:D1:EB:28:31:72:AB:8F:98:03:7B:02:60:C3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7E15ED2F5CA49C67EEE4A26D0454EF1C0AD85964
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20383334.roa
Signing time: Tue 22 Oct 2024 19:51:56 +0000
ROA not before: Tue 22 Oct 2024 19:46:56 +0000
ROA not after: Tue 21 Oct 2025 19:51:56 +0000
asID: 834
IP address blocks: 194.195.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 21:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:15:ed:2f:5c:a4:9c:67:ee:e4:a2:6d:04:54:ef:1c:0a:d8:59:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 22 19:46:56 2024 GMT
Not After : Oct 21 19:51:56 2025 GMT
Subject: CN=3B4A3872B76A6ED1EB283172AB8F98037B0260C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:18:91:96:fc:ea:bd:12:71:5f:a6:2e:3b:
05:8e:c2:2b:2b:e6:54:40:7b:9a:03:97:b7:88:c2:
93:5d:5e:1e:5f:97:47:f2:61:22:0c:8f:01:d4:96:
ea:50:07:64:dd:49:60:0f:f4:93:40:6b:00:0e:6d:
6f:78:20:40:80:12:b8:73:0b:24:5d:c1:9b:35:09:
17:45:f1:2a:f5:f9:cf:4a:12:23:78:61:af:1e:55:
3e:98:da:6e:ee:1d:0c:13:69:49:d0:a3:73:3e:cf:
2f:16:d2:cc:28:c4:f2:36:0f:6e:ec:b4:99:e7:63:
02:41:3c:16:10:7c:c2:2c:99:48:e6:f4:05:c3:19:
44:46:9b:1c:b1:79:58:0e:4f:97:c3:74:0f:3a:2d:
84:1b:59:13:8c:5d:c0:41:51:88:e2:94:cf:68:63:
81:9c:23:6b:f9:04:bc:35:67:1b:5e:c6:c8:82:be:
d8:fc:c6:f0:cc:4b:b2:4b:2c:4e:86:bd:ff:41:8f:
b8:fa:dd:1f:07:b4:ab:5e:53:42:ff:1c:2c:cd:e9:
97:c9:7d:2a:43:b6:ba:ab:40:52:f9:4e:5a:8a:c4:
5f:1a:0b:6e:cc:08:78:19:d3:08:69:01:53:a2:5b:
e3:b8:f1:a0:54:bb:6c:53:f6:35:6f:89:99:ed:74:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4A:38:72:B7:6A:6E:D1:EB:28:31:72:AB:8F:98:03:7B:02:60:C3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c1:42:8a:cc:83:f4:4b:67:ec:95:67:07:32:0a:8f:f4:21:
ce:c0:fd:11:d2:94:d7:6b:1e:03:b7:32:a7:f3:ba:82:2b:0b:
b9:00:5b:ea:f9:1b:ea:f8:cf:a3:b3:3e:2b:bd:f3:8f:66:c1:
02:92:d6:ea:40:bf:2d:66:8a:fc:c3:82:ae:1f:72:89:c6:ae:
d7:6c:c5:57:eb:75:22:b8:2d:e1:78:53:15:e3:17:c3:5a:bc:
53:2b:01:81:81:d1:1d:83:41:66:b6:a9:a0:a2:b7:21:91:e8:
fa:65:e9:61:db:53:18:09:67:6a:f8:14:7d:16:42:dc:7d:4f:
5a:96:cf:0a:2a:21:46:25:ba:be:1b:83:63:55:20:65:03:9b:
72:20:b7:b9:93:1f:d2:02:53:a4:e2:2d:59:7a:a2:3f:66:bf:
7f:e4:e2:cc:34:52:64:e1:20:ba:a7:c6:0e:2e:4c:af:47:6e:
f1:14:73:c3:cb:bb:7d:3f:33:d6:29:37:49:d3:61:a3:47:fc:
5d:52:32:c3:90:77:b0:1c:8e:f6:2b:c7:c2:6b:2c:42:71:ef:
7f:4b:90:c6:c6:ef:c0:a4:f3:f3:8d:96:f3:06:6d:38:fc:ce:
1c:f0:a7:73:a6:dc:9c:8c:72:45:e7:d6:ed:07:c1:62:6d:f9:
48:95:86:26
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 10 02:19:47 2024 by rpki-client on console-fra.rpki-client.org