Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e20383334.roa
File: 3139342e33312e3139362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: HVVMn+yn4QnxmESH9qTXe7q9d9/OKvwD5jDu5jtim7M=
Subject key identifier: DF:DB:7D:CB:2D:29:68:12:7C:D1:B6:A7:D7:73:4C:89:0C:FD:17:8F
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 500E1AA3535A60CDDEE95D15E7AA8379CD329C71
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e20383334.roa
Signing time: Mon 08 Jan 2024 00:00:06 +0000
ROA not before: Sun 07 Jan 2024 23:55:06 +0000
ROA not after: Mon 06 Jan 2025 00:00:06 +0000
asID: 834
IP address blocks: 194.31.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 06:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0e:1a:a3:53:5a:60:cd:de:e9:5d:15:e7:aa:83:79:cd:32:9c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jan 7 23:55:06 2024 GMT
Not After : Jan 6 00:00:06 2025 GMT
Subject: CN=DFDB7DCB2D2968127CD1B6A7D7734C890CFD178F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:ce:7a:50:54:bc:30:74:15:f8:c0:96:45:
05:b4:d1:11:c8:d8:0c:80:fe:dd:65:73:1b:0b:3f:
34:96:07:74:8c:1f:81:a0:39:5f:7a:83:54:f7:1d:
7f:de:04:40:aa:e4:8b:ee:a8:3e:de:8c:21:22:39:
57:2d:33:ea:f3:02:b9:bb:ef:b7:c3:4c:99:e8:3a:
fc:38:85:db:1b:b9:1c:ad:78:fb:4a:c4:b3:7e:20:
2b:3d:41:7f:6a:b9:57:a8:a4:5d:7b:6c:b6:1e:95:
9d:c7:7a:39:63:e9:73:d5:eb:02:ec:cb:60:3f:02:
59:a5:25:a3:af:a7:14:b5:df:45:c3:f8:20:7d:a5:
d0:e3:b5:cc:6f:2b:c3:c4:77:35:1f:e3:a3:57:30:
ab:f9:c3:a4:da:06:e8:24:5d:cd:34:e3:d9:3c:7e:
f2:d2:65:21:20:3d:6c:4b:cb:05:f8:85:79:17:37:
ff:6a:db:14:c4:f8:cb:25:2c:2a:79:03:fb:36:f9:
78:82:ff:b4:e3:89:e5:ed:7f:f3:f2:2f:f4:01:ae:
29:28:86:d8:7d:9c:6a:94:11:0d:46:af:7c:21:82:
6d:19:bf:da:f0:57:8e:83:15:9c:66:9e:9d:d1:5f:
9d:7e:01:40:54:61:44:8f:e3:b0:de:74:75:a0:c7:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DB:7D:CB:2D:29:68:12:7C:D1:B6:A7:D7:73:4C:89:0C:FD:17:8F
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.196.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5c:74:1f:cb:a8:9e:99:32:97:99:2a:8b:59:29:02:10:9d:
d1:67:d3:20:ad:00:54:55:e6:db:84:14:4d:e2:4a:6a:ac:d1:
89:9b:d6:3f:97:65:40:ec:f9:3a:e6:c0:d6:bf:24:9d:c4:6b:
bc:12:d2:68:33:e1:54:e4:3b:84:bc:af:d7:f7:6b:bd:68:b6:
ae:53:bd:62:14:02:dc:5a:79:d4:e0:77:65:5c:54:6a:a3:26:
fc:55:e2:7c:90:b1:50:68:88:41:bc:14:03:76:46:ba:9e:55:
5d:cd:25:6a:62:a5:85:fe:08:8a:76:f1:b8:0e:d8:5c:ca:86:
db:bc:91:df:9c:19:d7:fd:b2:4c:f6:01:d9:04:17:af:50:bc:
90:54:eb:1e:8f:cd:1b:1a:b9:34:a5:01:22:31:d2:1d:68:f4:
52:80:e0:fb:38:9a:6c:57:30:6a:14:82:e3:f7:55:e4:30:1f:
62:59:96:5e:bb:47:38:af:7d:58:6f:cb:38:48:61:b7:fa:bc:
a1:b4:1f:e0:ab:ec:b0:6d:93:92:16:4a:c3:28:c4:7f:3c:29:
1a:3e:9d:84:14:34:fe:55:a2:89:74:84:be:cb:73:1a:53:07:
bd:54:b6:15:ad:7b:84:c5:fc:26:44:ae:f3:28:3c:6b:0f:77:
16:3c:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 08:09:03 2024 by rpki-client on console.sobornost.net