Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233342e302f32342d3234203d3e2030.roa
File: 3139342e33322e3233342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: iiZnukRfWIjz0qUU5yrC9nIh2vdzlIwxl2M2RTC8EZU=
Subject key identifier: 5F:76:8C:BB:95:8D:56:1B:1E:FF:32:9B:60:E3:18:1B:F6:98:F7:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 424FA52CC3EAC4C292E0E2864730868EBA0C1D0F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233342e302f32342d3234203d3e2030.roa
Signing time: Fri 20 Oct 2023 13:41:59 +0000
ROA not before: Fri 20 Oct 2023 13:36:59 +0000
ROA not after: Fri 18 Oct 2024 13:41:59 +0000
asID: 0
IP address blocks: 194.32.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 18:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4f:a5:2c:c3:ea:c4:c2:92:e0:e2:86:47:30:86:8e:ba:0c:1d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:59 2023 GMT
Not After : Oct 18 13:41:59 2024 GMT
Subject: CN=5F768CBB958D561B1EFF329B60E3181BF698F74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:ea:2c:c1:e9:e1:86:21:d5:17:21:05:5f:
d2:90:85:26:4d:9f:49:de:c0:d3:4f:84:28:23:ec:
62:29:46:cf:14:a0:25:b6:3b:38:bf:5a:73:08:4d:
b6:67:b7:15:d6:c3:7e:74:24:d9:ae:c0:ca:23:3a:
ff:bc:35:3e:c0:15:14:dc:6d:12:ce:41:1c:97:f6:
b7:b9:78:97:0d:5a:dd:e2:95:4a:16:c0:e0:8e:d6:
79:c5:0a:4e:3f:af:f1:4d:f4:e4:91:3d:6f:20:42:
5d:de:4f:23:82:e9:09:f9:d4:7f:b0:20:78:b8:fa:
ca:9d:5a:98:00:09:fa:08:b1:fc:f6:96:e4:82:66:
5b:cd:05:46:a0:75:51:b7:c3:24:e1:c5:6c:62:c9:
a5:7c:c3:c5:ca:07:eb:a9:3e:dc:08:47:03:dc:98:
a5:05:ea:d3:65:a6:c8:11:32:23:20:b2:73:ba:96:
70:c9:45:5c:e1:64:c2:e9:95:84:fe:c0:5c:1e:72:
05:8d:f9:40:25:3d:90:11:4e:04:44:4e:f5:cc:0c:
24:0a:5e:6e:65:a1:04:28:14:94:c3:2c:e4:98:3b:
bb:eb:b0:c4:62:53:9d:4b:76:02:86:1e:0f:a7:16:
b0:5c:77:5d:7b:d2:1f:8f:e0:91:27:21:5c:6e:33:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:76:8C:BB:95:8D:56:1B:1E:FF:32:9B:60:E3:18:1B:F6:98:F7:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.234.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4d:cd:75:d5:63:bf:21:21:a3:10:a1:bb:e0:42:13:15:f5:
97:05:82:7a:a4:b2:4d:24:9a:06:4b:f5:47:a3:7e:78:23:37:
91:6d:82:15:50:51:80:4d:1a:02:a1:01:05:74:8a:a4:26:89:
90:80:8b:e3:03:53:df:9e:6e:f1:21:5b:00:9c:d3:72:e3:06:
2d:ab:e1:9d:57:a2:74:79:0d:44:7a:a2:ec:1b:22:5c:7e:17:
06:7c:6f:c8:ca:ba:76:61:67:af:bd:ef:6d:31:21:1c:32:08:
99:81:c8:74:9c:45:fa:26:64:fa:6e:31:c8:f1:18:c0:41:c6:
2c:c1:c6:ff:36:bc:17:b1:03:ef:e6:31:88:ee:cd:15:21:1a:
9c:87:10:8c:d3:91:3b:00:16:f5:d9:d8:52:bb:da:ea:96:e5:
3f:09:1d:4c:c8:38:12:d4:8b:3f:b2:a4:05:f3:7d:3f:f2:f0:
1e:8e:16:ca:00:be:54:d5:0e:3a:7d:91:b7:01:cd:18:ef:cd:
3e:53:22:13:89:e6:ab:66:54:be:bf:49:c7:d3:07:ae:90:e3:
59:27:ec:e1:d5:12:26:cd:28:3f:82:ef:9a:66:58:b9:99:e6:
7a:7a:aa:2e:fc:dc:94:3f:c4:28:0a:3c:a5:b8:75:ff:fa:43:
2a:8f:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 18:56:52 2024 by rpki-client on console-ams.rpki-client.org