Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3232342e302f32322d3234203d3e20313938303930.roa
File: 3139352e3137392e3232342e302f32322d3234203d3e20313938303930.roa (raw, json)
Hash identifier: qlG7ZQ23lKbDvLgK4crle/QlXTde1nxEPOWiURKKwRE=
Subject key identifier: 23:E2:83:A9:30:01:47:3E:BA:20:55:EA:6D:AA:0E:C5:2A:43:12:55
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6906C58F7FA1C04D3487C53F27C2F97D8F99B114
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3232342e302f32322d3234203d3e20313938303930.roa
Signing time: Mon 26 Feb 2024 08:53:15 +0000
ROA not before: Mon 26 Feb 2024 08:48:15 +0000
ROA not after: Mon 24 Feb 2025 08:53:15 +0000
asID: 198090
IP address blocks: 195.179.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 20:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:06:c5:8f:7f:a1:c0:4d:34:87:c5:3f:27:c2:f9:7d:8f:99:b1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:15 2024 GMT
Not After : Feb 24 08:53:15 2025 GMT
Subject: CN=23E283A93001473EBA2055EA6DAA0EC52A431255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:e3:5e:46:59:59:1f:1c:29:04:76:ca:42:
92:7c:74:f4:6c:aa:65:01:f6:f5:1b:b0:6f:ea:5b:
65:45:37:15:a2:1b:79:04:26:d3:78:64:64:2f:4b:
e6:0d:1f:b8:35:5a:e9:4d:be:83:b6:74:c7:e6:70:
d3:8c:e2:3a:f2:b3:4c:81:58:45:90:d3:d5:1c:d1:
ac:5a:98:b4:84:0a:75:02:c5:f9:45:63:ba:f7:ea:
5d:48:dc:f6:43:25:09:1c:00:80:f7:0e:93:a6:a3:
f9:8b:d3:aa:ba:a5:ee:1f:a4:80:67:62:84:f3:98:
b7:fd:9b:4c:81:97:72:79:af:40:cd:97:4c:48:20:
d5:ce:11:66:de:93:aa:27:93:da:39:fa:41:03:18:
3d:4a:20:e9:07:48:37:a4:de:4f:58:bc:2d:d8:da:
46:e3:6a:05:ca:e9:ff:44:29:df:38:db:9d:18:f2:
d7:9c:ce:1a:ff:ba:2d:8b:09:01:03:da:16:fa:1e:
00:4c:24:33:96:4b:20:73:d1:8a:57:72:3d:d9:bc:
d0:03:12:c7:9d:cb:cb:72:a4:51:a4:29:55:d7:67:
3a:bc:20:72:c4:7e:71:76:1f:e2:d4:49:a2:e0:d2:
b1:18:dd:72:e7:a6:22:74:cb:a0:4c:13:ef:b4:df:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:83:A9:30:01:47:3E:BA:20:55:EA:6D:AA:0E:C5:2A:43:12:55
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3232342e302f32322d3234203d3e20313938303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.224.0/22
Signature Algorithm: sha256WithRSAEncryption
97:3e:46:09:69:22:bd:f1:c1:a4:be:0c:3a:eb:52:fd:fb:e8:
2d:7b:0a:c0:e2:6d:80:9a:2c:75:0c:e5:e7:b5:45:ed:07:43:
1f:a1:fa:4a:8d:2c:2a:eb:5a:e3:6e:61:77:15:88:b3:a0:a3:
e9:3d:62:29:eb:03:1f:87:97:72:11:f5:1f:7c:37:1f:68:ac:
18:33:c4:84:5d:cb:5d:e7:56:63:72:39:ab:01:60:3f:32:43:
c1:79:ac:5a:74:a1:28:53:19:2c:97:be:04:60:88:f4:55:a2:
a0:ac:71:d9:d3:1f:53:b5:31:cd:9c:25:1d:b0:f1:e5:8d:5d:
ee:d5:4f:8e:6d:f0:c7:04:fc:a6:2c:5d:c3:73:ba:d1:41:0d:
9d:52:09:32:f5:3f:0d:84:e9:1d:4b:f9:e7:3d:4a:32:45:3d:
34:98:a5:83:6a:ab:04:02:1a:77:61:a4:1c:c5:f7:1d:8d:66:
c8:b7:d3:46:05:b2:46:0d:3b:ee:f5:af:e2:7d:5d:43:69:96:
d8:07:98:d0:f3:84:ed:76:49:35:80:13:1e:f6:a2:b2:d9:4f:
81:e7:ed:97:2f:06:ac:3c:11:0b:32:5b:3d:93:fc:a0:d3:6e:
5b:a9:ae:f9:68:6b:9c:10:3e:fa:9f:b6:be:d4:fe:9b:58:d0:
e2:55:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 00:21:41 2024 by rpki-client on console-fra.rpki-client.org