Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e203632323430.roa
File: 3139342e33312e3134382e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: xJQVIqCOaiDB8R3FyAz8N60YTVQm9uJ1mskJcBe30sI=
Subject key identifier: 10:AE:68:84:73:24:56:03:38:99:DD:BB:5A:B2:8C:22:90:00:81:64
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0AB87D183C85EAB79E3F02A1CE12878DE420E00B
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e203632323430.roa
Signing time: Mon 27 Mar 2023 08:27:09 +0000
ROA not before: Mon 27 Mar 2023 08:22:09 +0000
ROA not after: Mon 25 Mar 2024 08:27:09 +0000
asID: 62240
IP address blocks: 194.31.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 20:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b8:7d:18:3c:85:ea:b7:9e:3f:02:a1:ce:12:87:8d:e4:20:e0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 27 08:22:09 2023 GMT
Not After : Mar 25 08:27:09 2024 GMT
Subject: CN=10AE6884732456033899DDBB5AB28C2290008164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:b4:33:02:28:78:b4:d6:46:79:07:be:65:
26:f4:c5:20:6d:b7:27:08:35:5b:35:55:91:64:d8:
e6:12:d6:44:c1:b1:43:d7:d3:a0:75:a8:59:e4:53:
0b:17:29:47:6b:77:29:c1:c8:78:9d:c6:91:78:15:
a3:86:24:07:9a:5a:4b:81:af:bf:de:a8:fe:18:0c:
50:52:ed:e0:ab:c1:7b:5c:7f:12:e5:cd:36:39:81:
ad:f0:2c:03:5a:42:0f:6f:f3:34:42:aa:30:e2:74:
66:0d:9c:71:6f:32:c7:61:18:f9:65:92:ff:44:d4:
f0:dc:4e:dd:76:f4:06:23:07:bd:4a:64:ff:70:b7:
6d:7e:83:2f:06:ba:bf:e6:12:f2:49:44:44:27:22:
17:e4:dd:02:67:17:af:6b:c3:0a:d3:e5:f0:f6:25:
af:c4:56:9b:d5:5c:a5:5b:6f:8c:68:60:83:e7:98:
8b:02:00:65:9d:db:3b:9f:fb:b2:f1:26:e4:12:57:
1c:c2:b6:19:8c:c7:ee:f0:72:37:76:81:25:ce:79:
80:99:b0:53:be:1c:d0:7a:ab:55:e2:07:90:7b:93:
46:c4:d3:85:01:4f:66:92:c5:fa:6b:a5:42:c9:82:
17:6a:ff:36:da:de:36:88:11:c3:24:7a:e3:8f:13:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:68:84:73:24:56:03:38:99:DD:BB:5A:B2:8C:22:90:00:81:64
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:00:18:59:8b:5b:b8:1f:8b:42:4b:8e:50:6e:74:27:b6:7c:
6c:81:35:72:e2:e1:5d:a6:a4:13:bf:d9:e4:42:44:f5:a9:31:
52:9a:6b:c5:2f:a5:04:b8:c6:86:81:90:09:18:64:00:0b:38:
64:6b:c3:48:e4:11:46:d7:e1:a0:04:fd:ce:75:5f:aa:13:e4:
63:45:8e:1b:2e:d4:9f:bd:17:5b:04:fd:fb:a4:0f:5e:4b:4b:
98:9f:c7:a6:34:9d:2c:85:37:15:47:e9:20:e9:08:e8:1f:16:
61:9d:c3:a6:2a:b4:cc:d4:07:4c:9b:4f:27:a8:b6:d5:30:4f:
52:31:a7:a3:cc:ac:f4:74:aa:fa:a0:60:68:35:92:af:2a:a6:
1d:cb:e1:b0:4a:36:c1:f4:08:09:e0:5b:18:39:7d:9b:86:73:
19:18:25:57:24:2d:ff:eb:77:89:79:8d:da:9e:69:af:87:de:
d9:32:e7:e1:e5:52:d9:b3:eb:d2:f6:d2:5d:ad:2a:5a:d2:cb:
1c:cc:dd:b9:37:3f:c4:4a:29:b0:e5:be:91:6b:58:8b:3a:d6:
4e:14:6d:1a:62:96:61:41:2c:fc:ef:7e:5a:d0:71:5d:df:b4:
d1:31:14:31:b1:a5:7d:fa:0b:c3:3a:9a:e9:98:0f:ff:b1:fe:
fb:be:58:91
-----BEGIN CERTIFICATE-----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Generated at Wed Feb 21 23:43:31 2024 by rpki-client on console-fra.rpki-client.org