Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e2037303138.roa
File: 3139342e33312e3134382e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: /glmOV8k/XwZnbj2xSLhSM2tM23VgVnZ8sMg4N3JOfE=
Subject key identifier: 63:4A:A8:67:ED:DA:C8:8B:CB:B9:7C:3B:1D:04:E5:F5:D1:1D:B7:4C
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 65255BF23C04C4753BDD20BA1DFDE66A15F69315
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e2037303138.roa
Signing time: Thu 25 Jul 2024 07:36:15 +0000
ROA not before: Thu 25 Jul 2024 07:31:15 +0000
ROA not after: Thu 24 Jul 2025 07:36:15 +0000
asID: 7018
IP address blocks: 194.31.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 16:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:25:5b:f2:3c:04:c4:75:3b:dd:20:ba:1d:fd:e6:6a:15:f6:93:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jul 25 07:31:15 2024 GMT
Not After : Jul 24 07:36:15 2025 GMT
Subject: CN=634AA867EDDAC88BCBB97C3B1D04E5F5D11DB74C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:d7:06:a7:6a:40:f1:72:29:d8:c2:d0:1a:
1f:62:82:67:59:04:d7:8f:53:cf:6d:df:db:89:b3:
58:a4:9d:8c:8b:7b:ed:4c:01:40:a6:99:ce:f0:a7:
0a:b3:23:25:0a:6b:72:fa:27:85:f0:3c:15:7c:c6:
7f:e9:b6:76:fe:a2:7b:93:7f:f1:7c:b1:c0:d2:cb:
59:f3:e3:e1:0f:f8:a5:cf:74:34:ac:a7:53:47:88:
25:bd:71:c1:3e:35:66:3d:22:ae:af:8f:52:b5:86:
c8:cd:3f:a6:18:b5:5c:d2:bc:34:3f:4f:1c:19:68:
61:b0:61:3d:9d:df:d9:35:10:d6:85:87:8d:c8:c5:
dd:2c:5c:61:f6:a5:4f:16:05:90:30:06:72:3c:c1:
09:eb:08:27:24:40:52:1f:9c:73:a9:f7:25:73:cc:
c7:6b:6b:7c:06:de:44:23:90:cc:12:e6:e3:9a:27:
be:0e:63:c1:24:9f:31:fa:4f:45:80:34:a6:5d:57:
29:39:52:a3:83:10:17:8e:03:be:76:cf:69:7f:16:
b0:1e:50:8b:5f:b2:d2:d9:fd:cd:17:76:46:3d:b6:
ba:e5:16:a7:ca:65:4d:a3:26:62:de:89:db:e2:fe:
01:21:78:28:7a:90:ec:67:d1:e8:5c:28:a0:9c:b5:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4A:A8:67:ED:DA:C8:8B:CB:B9:7C:3B:1D:04:E5:F5:D1:1D:B7:4C
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.148.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1e:56:e7:af:af:b9:43:24:ac:76:66:96:08:3b:8c:7e:6c:
38:4a:81:b5:d9:34:10:d3:dd:0c:e4:d6:54:19:79:e7:f9:16:
32:e5:41:4f:71:ad:69:7a:0c:c7:e5:cf:e4:f2:65:24:02:63:
c3:cc:36:72:f1:cd:d1:4a:1f:a6:2b:4e:b7:6d:69:b1:f8:e3:
db:36:01:a7:19:f0:c9:e5:2c:c1:68:29:f1:2f:23:c8:03:73:
e9:fd:48:af:dd:8f:ed:88:39:a2:e5:44:5a:c1:b7:9e:4c:37:
e9:ea:f0:57:80:28:0a:6d:19:32:88:51:c6:bd:20:c5:cc:e9:
e2:70:84:76:a3:ec:da:8a:02:3c:9a:89:33:76:71:32:e1:63:
84:42:56:99:27:6a:8c:8c:e2:9e:e1:85:ec:6c:d5:54:3e:d1:
c6:55:94:53:7b:13:53:8e:a2:a3:c2:dc:89:0d:7e:b5:fe:c3:
bb:01:9a:1c:64:23:2f:dd:d2:4f:0f:11:0d:80:0b:55:6f:ae:
ca:67:41:6f:d0:25:71:63:f6:56:e3:9c:29:f8:81:c8:80:0b:
76:8f:3b:37:fd:ff:74:85:d4:a8:76:bf:4b:e6:37:15:98:1c:
b7:6a:05:6b:aa:4b:2d:61:bb:c3:7e:4b:7b:28:f4:46:8b:00:
86:47:5a:fa
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 26 18:39:40 2024 by rpki-client on console-fra.rpki-client.org