Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3232382e302f32322d3232203d3e20323030353437.roa
File: 3139352e3137392e3232382e302f32322d3232203d3e20323030353437.roa (raw, json)
Hash identifier: xG6uxa2FGkDt6S+QgnsBVWK2OPMoYBlVC02kDDxkDic=
Subject key identifier: A1:64:C1:00:B0:5F:96:C8:BB:EA:F4:47:23:25:B0:4D:E6:FF:E8:E7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0AC106C568D06D22A58C66799BBC30D1F45B5AEA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3232382e302f32322d3232203d3e20323030353437.roa
Signing time: Mon 26 Feb 2024 08:53:26 +0000
ROA not before: Mon 26 Feb 2024 08:48:26 +0000
ROA not after: Mon 24 Feb 2025 08:53:26 +0000
asID: 200547
IP address blocks: 195.179.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 04 Apr 2024 20:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c1:06:c5:68:d0:6d:22:a5:8c:66:79:9b:bc:30:d1:f4:5b:5a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:26 2024 GMT
Not After : Feb 24 08:53:26 2025 GMT
Subject: CN=A164C100B05F96C8BBEAF4472325B04DE6FFE8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:4d:8c:70:33:6e:ee:6e:bb:28:ff:6b:6b:
81:97:5b:9f:06:82:a8:0f:7d:81:9d:b0:4b:b7:d2:
74:7b:15:20:8e:b7:f5:b0:c7:b1:21:a1:7f:14:05:
74:6f:50:26:8b:ad:97:d7:91:58:56:ed:9e:86:c8:
5c:38:13:a3:6b:32:a7:af:93:0a:32:63:b3:89:39:
43:75:9b:69:51:be:bb:6b:d5:d4:82:78:34:f9:eb:
5e:5f:79:1a:f5:c2:e6:87:35:50:cf:3e:b7:d7:15:
2e:f3:f5:7c:51:71:96:e7:a9:8f:0c:c3:2c:7f:d0:
13:cf:85:1c:56:56:56:93:e0:09:0a:36:ba:04:9b:
f6:42:03:fb:54:ab:44:38:97:c6:4e:ce:d5:b2:64:
ed:1f:ad:74:05:eb:aa:4c:0f:70:57:90:2b:f1:71:
15:b5:f3:9e:16:d1:1f:d3:ec:a5:16:38:43:02:e3:
98:94:3a:8a:8f:cf:bd:2f:41:a4:01:97:28:ab:62:
06:13:df:e0:40:ed:e2:a3:da:1f:18:e7:c5:4d:f6:
7a:08:94:04:19:e8:37:9e:e3:45:1b:a7:77:dc:36:
0d:ae:02:96:41:5c:07:d0:c3:91:b0:a3:97:61:bb:
d0:e5:3d:c9:24:d2:c0:e1:99:a3:2a:a2:6b:37:88:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:C1:00:B0:5F:96:C8:BB:EA:F4:47:23:25:B0:4D:E6:FF:E8:E7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3232382e302f32322d3232203d3e20323030353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:42:6f:cb:8a:b9:56:c0:30:a7:a8:1e:76:df:d4:78:bf:80:
5d:8f:7c:46:78:70:66:8e:cf:ff:f5:86:09:89:0c:c9:c4:16:
56:17:3a:49:bd:a2:be:bb:da:08:88:37:8c:d8:d7:57:10:ba:
b1:19:26:17:e5:5f:ba:8a:cc:82:ed:87:e8:ef:a4:5b:d5:ca:
c8:fb:96:8f:d9:c7:df:14:bd:1f:fe:e1:ad:25:17:27:af:5d:
67:ed:b0:29:ee:e0:cb:d5:84:d2:8c:93:dd:7a:00:b9:36:8c:
67:9a:6c:02:17:06:95:42:fa:ee:2d:c4:76:66:77:37:1b:00:
38:fd:37:be:d6:75:4a:b5:86:d8:6d:a9:3d:89:ef:0d:f8:41:
f3:13:85:44:f7:d4:07:e6:40:29:f1:bd:56:a0:30:26:b8:d1:
d6:e9:82:05:f4:82:84:ae:eb:e3:8f:72:6a:f1:3a:0b:e6:53:
07:5b:bb:96:8e:6f:c2:2f:14:5e:b1:2f:2b:db:90:dd:7a:69:
23:6a:05:d6:13:25:4c:b7:6e:7c:08:c6:87:22:7e:89:13:b1:
76:8b:b0:53:57:e6:78:66:f8:ec:13:7a:be:dd:d4:0f:f4:e5:
10:88:b3:64:44:a2:0e:79:02:7b:63:dc:bd:a2:a7:3f:20:e7:
72:0d:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:48 2025 by rpki-client