Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20313339363630.roa
File: 3139342e33312e3134382e302f32342d3234203d3e20313339363630.roa (raw, json)
Hash identifier: RByfxuT9OEsITuaafXiAINaL+fUrTZIWa0nuBbJ/CX8=
Subject key identifier: 56:65:12:B7:61:68:F0:0F:9E:5B:1C:21:6C:B4:5F:17:C8:A2:E2:31
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0487D33B104A7FD6C97F5CA6FAD3ADA9C88D8D43
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20313339363630.roa
Signing time: Mon 27 Mar 2023 08:27:04 +0000
ROA not before: Mon 27 Mar 2023 08:22:04 +0000
ROA not after: Mon 25 Mar 2024 08:27:04 +0000
asID: 139660
IP address blocks: 194.31.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 20:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:87:d3:3b:10:4a:7f:d6:c9:7f:5c:a6:fa:d3:ad:a9:c8:8d:8d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 27 08:22:04 2023 GMT
Not After : Mar 25 08:27:04 2024 GMT
Subject: CN=566512B76168F00F9E5B1C216CB45F17C8A2E231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:37:05:35:95:a5:73:0a:e1:f0:f0:10:dd:
c1:27:ce:33:15:79:f9:ea:90:79:1b:b6:2c:48:66:
08:76:0a:67:0f:b5:b6:7e:9e:f3:ac:85:82:10:20:
86:4f:3e:97:c9:ce:32:f0:89:e9:a5:1f:b2:1e:8e:
b5:73:97:ff:a0:fd:2b:4e:d5:5d:17:47:a3:6e:a4:
a5:75:56:e8:0f:8e:d9:fd:5b:08:6c:87:34:7f:b6:
2f:1d:65:e8:aa:bb:30:1b:10:f5:4f:6f:21:4c:50:
86:86:51:66:7f:1a:ea:09:0d:57:7c:32:13:0b:8c:
c0:a1:64:95:cf:c8:f9:cc:32:25:89:40:a0:ac:11:
bb:65:09:86:b1:98:da:86:34:8c:35:5a:60:1f:e4:
05:96:c7:4e:2a:64:43:b9:32:66:96:1f:f1:27:06:
56:5f:24:31:6d:49:c7:44:06:4f:bd:ed:73:cd:d0:
87:db:3a:27:68:24:dd:4c:0a:34:a5:d4:55:7a:13:
32:93:4c:d5:f9:1d:7a:f5:1c:fa:70:77:98:c5:01:
bf:ef:bd:7b:a5:3c:77:bc:53:81:c0:a9:2a:c0:8b:
87:9a:7c:cd:9e:df:2c:b2:bd:fc:3d:65:8a:41:eb:
d4:a2:61:57:03:34:61:6c:61:d0:3f:65:cd:e8:bd:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:65:12:B7:61:68:F0:0F:9E:5B:1C:21:6C:B4:5F:17:C8:A2:E2:31
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20313339363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fe:d1:da:b4:09:12:74:96:a2:d9:80:76:05:5b:bb:15:fe:
e8:21:57:10:82:9e:13:78:d7:9a:63:40:b7:f4:41:dc:5a:79:
78:73:22:22:61:cd:17:d6:10:fc:67:c9:07:7a:05:e8:21:03:
95:07:46:df:02:b6:d1:fd:21:43:d0:d6:e1:96:87:56:68:92:
a3:aa:44:42:ad:17:24:d2:d0:4e:70:4c:a4:24:36:51:6a:e5:
11:f0:0f:10:61:1e:2f:42:33:f2:e6:d7:f0:04:a6:9e:14:69:
f2:5e:31:6e:dc:98:75:84:ba:6e:52:f3:26:3e:f9:42:06:c3:
15:1e:2f:ea:66:59:15:c3:bc:93:33:b4:d2:d5:b9:cf:47:25:
9d:d0:4d:e7:d0:aa:4c:a4:65:a4:b6:95:c8:e5:c2:b3:4e:89:
40:7a:99:ba:98:43:88:cb:4d:e5:b1:04:66:a7:c4:65:6f:d8:
ba:b8:f2:34:fc:9d:e6:d0:8d:14:35:84:e3:fc:83:7e:71:de:
e5:81:a8:e8:3e:f6:66:09:68:4f:b0:5f:b7:53:eb:c8:43:e8:
bc:92:cb:8a:ef:ff:96:1c:87:92:a4:2c:a3:23:68:b4:b3:52:
23:8a:76:04:d5:fc:85:fe:69:30:8c:c2:fb:74:83:85:da:1f:
27:8f:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 23:43:31 2024 by rpki-client on console-fra.rpki-client.org