Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134392e302f32342d3234203d3e203339353236.roa
File: 3139342e33312e3134392e302f32342d3234203d3e203339353236.roa (raw, json)
Hash identifier: 8VESJHHL4CklJvLxJxWrMWPOhkxuX3FmLNSbEoO9Rzo=
Subject key identifier: 43:6F:8F:AD:59:1A:E1:21:7E:3A:55:99:F8:6E:D2:AA:D4:1E:31:38
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 435557D33E50B1D25E3EADC53ECA361A74FBBF75
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134392e302f32342d3234203d3e203339353236.roa
Signing time: Mon 27 Mar 2023 08:27:05 +0000
ROA not before: Mon 27 Mar 2023 08:22:05 +0000
ROA not after: Mon 25 Mar 2024 08:27:05 +0000
asID: 39526
IP address blocks: 194.31.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 12:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:55:57:d3:3e:50:b1:d2:5e:3e:ad:c5:3e:ca:36:1a:74:fb:bf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 27 08:22:05 2023 GMT
Not After : Mar 25 08:27:05 2024 GMT
Subject: CN=436F8FAD591AE1217E3A5599F86ED2AAD41E3138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:d1:b6:9e:4f:73:26:3f:b4:9a:0d:04:a6:
ff:00:62:16:a7:2e:05:9c:b3:40:9a:5a:0e:cb:86:
d0:48:db:73:4d:1c:bd:85:de:26:9e:00:42:c8:f6:
dc:c8:fc:cf:e5:08:6d:ca:45:0b:31:80:dc:fe:3e:
4e:06:67:f3:29:e2:c1:e2:7f:8d:59:82:8f:cf:6e:
c3:3c:06:4e:7c:ec:bc:27:db:d3:7f:47:f9:cc:64:
d7:db:fb:86:b0:00:4d:31:24:ff:b7:5a:f0:96:6c:
d6:fb:3e:58:d5:24:2e:a9:a4:ae:e8:ad:51:ed:13:
28:dd:fd:a3:b1:56:36:1d:f7:c7:80:12:3a:9e:1e:
2b:41:1d:77:9d:ce:ba:9c:52:7d:01:50:93:ab:5d:
22:70:93:bd:c2:20:cf:aa:a0:6d:14:6f:4a:60:3a:
19:73:32:ea:2c:45:52:42:9b:05:c3:ad:65:91:93:
e4:fe:2e:b0:99:cf:ec:5f:cd:cb:8f:9f:90:72:78:
31:1b:ca:1e:51:fe:0d:e4:f8:ab:1c:7e:99:18:15:
57:24:fa:c8:7d:79:bb:18:64:a6:3e:43:94:a8:bc:
9f:e1:73:cc:40:c7:5f:a7:f1:b3:32:fe:d7:a2:da:
6a:46:d3:cc:c3:63:7d:db:b4:c5:cf:7b:b2:1a:4b:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6F:8F:AD:59:1A:E1:21:7E:3A:55:99:F8:6E:D2:AA:D4:1E:31:38
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134392e302f32342d3234203d3e203339353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.149.0/24
Signature Algorithm: sha256WithRSAEncryption
55:37:7c:38:92:d0:6c:f5:02:46:9b:2b:be:5b:c5:fc:ab:ae:
56:57:8d:ff:02:56:48:56:82:dd:44:be:66:6b:f9:09:6b:27:
b5:b2:7b:52:ce:1e:8a:43:0a:34:c9:b9:d9:98:d5:14:de:76:
1a:96:e1:e7:44:84:d5:3a:2d:f6:b5:e1:8a:6b:31:a7:71:f5:
fd:11:2c:6e:0b:2e:30:66:87:5a:5a:dc:79:d9:79:cd:b4:78:
c6:6d:20:28:4d:a6:7a:82:54:79:58:58:c0:32:60:03:e1:63:
99:f3:4f:76:ca:0d:8f:c9:ce:db:54:0f:4b:b0:9e:64:64:34:
38:40:97:b2:4b:ea:42:b0:c7:d6:26:94:22:04:8c:4f:2c:6c:
5f:0f:a1:01:7a:a8:94:3a:6e:01:c3:d6:73:75:69:11:e3:6d:
54:1b:cc:54:1f:c3:70:8f:92:27:d1:25:d1:cc:83:5a:9c:25:
ef:00:67:29:8f:e9:f0:06:a9:c4:a7:d4:c2:b2:66:9a:1f:f6:
90:ea:27:42:32:e4:ea:94:c4:98:79:35:fd:11:52:1c:96:8b:
73:23:2f:02:ed:20:df:03:8a:59:01:e1:59:91:61:dd:9d:f2:
fe:56:de:bd:87:22:20:10:12:4a:10:02:34:d6:e0:91:0d:99:
d7:83:46:8d
-----BEGIN CERTIFICATE-----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Generated at Wed Feb 14 18:19:23 2024 by rpki-client on console-fra.rpki-client.org