Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20383334.roa
File: 3139332e39332e3135332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rbJKV9HBKgj1F5skz4S4dyRkuUIo4WTTOagjiXJUpGk=
Subject key identifier: AE:13:0A:1A:99:3D:59:A7:1F:4C:4D:3F:8B:C1:4C:BC:DD:D3:11:C3
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 24C3DECE3CFBBD4545B6FA125E437F26AF824F7F
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20383334.roa
Signing time: Thu 06 Jun 2024 00:03:05 +0000
ROA not before: Wed 05 Jun 2024 23:58:05 +0000
ROA not after: Thu 05 Jun 2025 00:03:05 +0000
asID: 834
IP address blocks: 193.93.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 09:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c3:de:ce:3c:fb:bd:45:45:b6:fa:12:5e:43:7f:26:af:82:4f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Jun 5 23:58:05 2024 GMT
Not After : Jun 5 00:03:05 2025 GMT
Subject: CN=AE130A1A993D59A71F4C4D3F8BC14CBCDDD311C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:13:64:39:8a:1f:8b:7f:29:c1:c5:17:27:
29:7a:5b:6d:b7:08:c7:14:0c:ac:6d:e5:9e:f8:8b:
b6:57:f9:96:1d:61:1e:73:e1:d9:df:1f:74:d5:d3:
28:6d:52:55:48:69:59:01:b9:78:21:a4:3f:37:22:
0b:9d:dd:26:fa:4f:16:81:b7:28:6b:23:9f:31:d4:
b7:91:30:8f:c2:b0:09:22:3b:21:33:50:45:f9:5e:
ca:6a:dd:b7:79:7f:66:77:40:32:9c:e1:de:37:d3:
aa:f7:bc:6b:df:40:37:57:38:69:4f:ef:f3:d4:d9:
bf:01:e8:65:da:5f:89:2b:27:8f:08:f3:d8:88:e4:
38:e7:0e:99:98:db:17:63:e5:26:a1:69:c7:ff:50:
2c:08:fe:8e:c6:7c:a2:d0:8a:69:ea:f1:ea:87:18:
3d:80:7d:48:03:65:44:d2:ab:75:0d:75:1e:d2:c1:
74:42:54:e3:8d:85:db:59:ba:da:4f:68:ee:01:10:
65:5a:05:d2:e5:44:21:a9:3c:8d:21:40:0b:a1:e8:
0b:70:27:7c:f9:14:5a:a3:4e:ce:b9:e5:9d:b7:28:
86:ff:3c:9b:77:92:77:7d:9f:ea:de:8a:d0:e6:26:
91:e0:f5:81:15:25:98:84:39:e1:65:5f:9a:9d:6a:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:13:0A:1A:99:3D:59:A7:1F:4C:4D:3F:8B:C1:4C:BC:DD:D3:11:C3
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:77:1a:6d:2a:d2:56:d8:90:10:a3:ea:ae:0d:9f:46:5f:3b:
20:30:f8:38:2f:85:ab:e3:03:ae:5b:c9:81:ab:af:db:12:00:
93:23:c2:14:dc:1e:9d:6d:ba:40:d5:61:73:03:7a:0d:19:39:
a1:f0:93:e2:d3:0a:2d:8d:75:1b:29:49:4e:d5:49:08:6d:52:
8d:b5:7c:89:44:cb:a0:48:5f:6b:81:53:c9:d3:98:44:1b:5e:
27:87:b6:db:4d:8a:2a:f7:1d:bc:80:fd:4c:43:7f:82:bb:20:
76:68:1e:f6:f7:bc:47:39:2e:e3:21:6f:09:dd:39:a5:65:a9:
8c:8d:27:8d:05:e0:b2:40:f4:f6:f8:f2:08:44:60:8b:de:7c:
2b:c4:bf:79:47:0a:0e:84:0e:f7:fd:c6:ae:ec:fe:4d:4f:5d:
2f:0e:d5:ce:e8:80:cb:f6:c7:ea:22:8c:cd:6b:70:ad:01:e0:
0e:fe:a4:d7:8a:1e:1e:4b:2b:13:0e:cb:a8:72:2b:92:31:d8:
e4:19:56:96:3d:c1:58:c2:17:1d:ec:4d:d3:ff:aa:25:ae:99:
14:11:94:5b:3a:f3:94:d2:19:d5:cd:d4:db:59:45:60:31:d2:
1d:2c:b8:73:50:47:37:f6:e9:6f:59:1d:df:93:9a:c4:da:fa:
a4:d0:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 12:31:51 2024 by rpki-client on console.sobornost.net