Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3232342e302f32322d3232203d3e20313938303930.roa
File: 3139352e3137392e3232342e302f32322d3232203d3e20313938303930.roa (raw, json)
Hash identifier: OPJwxe8QdoajCxsrzNc4rYBVyPupmqmeLY/ANHlFLoo=
Subject key identifier: FE:3B:B6:83:EA:D5:69:0A:43:1D:C8:EE:EA:3A:CB:B4:4B:DF:63:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5DA87658EBB59EBF2F5FB3FEADF5506F57E17777
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3232342e302f32322d3232203d3e20313938303930.roa
Signing time: Mon 26 Feb 2024 08:53:27 +0000
ROA not before: Mon 26 Feb 2024 08:48:27 +0000
ROA not after: Mon 24 Feb 2025 08:53:27 +0000
asID: 198090
IP address blocks: 195.179.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 04 Apr 2024 20:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a8:76:58:eb:b5:9e:bf:2f:5f:b3:fe:ad:f5:50:6f:57:e1:77:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:27 2024 GMT
Not After : Feb 24 08:53:27 2025 GMT
Subject: CN=FE3BB683EAD5690A431DC8EEEA3ACBB44BDF63FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:da:0b:2e:c5:ec:e4:1b:ff:5f:3c:88:f2:
ce:ee:4d:e4:a6:e0:c5:1b:ac:d4:28:28:4d:bc:07:
c6:ed:91:ac:b8:4d:fa:b0:f7:f9:c2:9f:2c:24:30:
f6:d6:80:d7:41:bf:e1:b9:95:06:1d:fc:28:2f:a4:
7e:7a:30:20:85:d6:8a:f3:3c:0f:dc:48:88:c1:16:
69:9a:9e:ce:c0:a2:7c:ab:96:67:ff:19:7f:e9:0f:
e8:e5:aa:b5:ce:74:fa:07:df:a3:f2:a4:47:16:65:
94:fc:9d:34:84:06:50:1e:a5:3b:e7:8e:cb:41:ec:
d3:ce:a1:de:d6:d9:a0:a3:ee:4f:93:c2:06:80:fa:
50:cd:7c:6c:6c:dd:fd:cc:b4:df:67:91:c6:18:97:
31:bc:e3:80:b4:57:35:3c:6f:a8:cf:8d:9d:50:94:
88:da:f3:9e:4b:4a:9b:00:e6:21:22:7a:72:07:7a:
1b:71:a7:0a:5c:11:6f:f6:87:36:b3:cb:2b:5c:df:
b7:d1:40:87:cd:c2:8b:1c:1c:ad:7f:b3:57:50:d7:
5d:d0:02:93:b9:6e:8a:bf:5c:58:cc:c7:df:3d:d4:
19:34:58:db:75:c6:a4:63:54:a5:4c:9a:d3:e7:e1:
98:42:e3:f3:4a:f1:f7:16:aa:e0:3c:6c:af:c4:da:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3B:B6:83:EA:D5:69:0A:43:1D:C8:EE:EA:3A:CB:B4:4B:DF:63:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3232342e302f32322d3232203d3e20313938303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.224.0/22
Signature Algorithm: sha256WithRSAEncryption
96:43:64:c0:2c:a2:04:a4:7b:d3:45:63:86:42:ba:bb:4d:0a:
fa:cf:3c:67:8a:4d:f3:f9:d0:6e:e6:5d:e7:8b:98:ca:4f:64:
0f:20:b9:f7:a2:86:e6:93:3f:23:66:b4:65:93:e0:26:6c:de:
e1:18:27:1e:47:d1:8d:6e:86:2a:8a:03:16:61:bf:cb:b8:53:
9f:6e:00:a5:ae:0d:44:a8:66:94:ef:e0:2c:fc:c1:84:4b:a5:
0c:65:9c:30:0a:4c:51:1f:3f:02:e4:30:14:d1:6f:a6:bd:6b:
51:09:09:d8:78:99:65:6a:5d:db:91:f7:28:ac:6d:9b:49:c4:
70:c8:8b:0f:a1:ca:cc:75:db:db:e7:b0:65:ee:18:6b:8f:cb:
79:af:b5:11:5e:6d:fd:ca:00:19:6b:4c:36:4e:2a:7a:71:0b:
c5:17:57:d0:d5:2c:97:89:7c:8c:6d:1b:ee:83:d2:18:ed:60:
4c:dc:ed:a5:28:d4:95:c5:11:8a:62:0b:11:1b:87:ee:bf:a0:
e1:dc:eb:17:9b:27:db:be:29:99:00:66:0e:d7:32:d8:38:6b:
be:07:48:a6:f4:a8:c6:bf:e8:04:26:47:6d:e5:cf:fc:ab:d0:
90:f3:0f:8d:6b:72:6f:ec:22:b1:8c:46:90:4b:b3:a8:6f:fb:
96:d9:c9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 00:26:55 2024 by rpki-client on console-ams.rpki-client.org