Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32302d3230203d3e203234383531.roa
File: 3134362e3234372e34382e302f32302d3230203d3e203234383531.roa (raw, json)
Hash identifier: F5kRaQgfXBSXEiXpyePLO8U9MpduiWQGipNeWE15n9o=
Subject key identifier: 77:5E:3C:0E:B0:65:C6:4E:CE:F5:FA:F0:31:1C:7C:C2:38:C3:75:63
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 7216663FA434CA49020188D2BFBA2654045C7373
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32302d3230203d3e203234383531.roa
Signing time: Mon 25 Nov 2024 12:43:28 +0000
ROA not before: Mon 25 Nov 2024 12:38:28 +0000
ROA not after: Mon 24 Nov 2025 12:43:28 +0000
asID: 24851
IP address blocks: 146.247.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 09 Dec 2024 14:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:16:66:3f:a4:34:ca:49:02:01:88:d2:bf:ba:26:54:04:5c:73:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Nov 25 12:38:28 2024 GMT
Not After : Nov 24 12:43:28 2025 GMT
Subject: CN=775E3C0EB065C64ECEF5FAF0311C7CC238C37563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:e2:c7:3b:28:eb:61:f5:01:9d:dd:58:e1:
a2:17:dc:dc:7f:6d:26:05:7d:78:55:e7:05:36:ce:
02:52:1c:bc:e8:dd:6b:44:32:d5:2a:ac:69:37:71:
68:b7:d9:1a:30:08:d1:f9:a9:5d:04:e7:b1:89:17:
af:31:96:f6:58:a9:a7:bf:85:b8:dd:a4:86:e2:e4:
ab:71:fa:7a:40:23:df:a1:3b:cd:18:63:8c:ba:60:
e7:f6:37:be:7e:03:1c:e7:91:16:60:4d:fb:af:83:
4b:ff:85:ed:24:ec:78:b1:62:06:5c:e4:f2:d8:77:
90:e8:f4:ea:60:e7:48:78:bd:67:c0:ac:e4:7a:8a:
0d:ed:cd:c2:86:6d:39:b7:aa:6d:4f:b9:f7:48:5e:
3b:b4:db:f6:1d:63:0c:20:59:04:13:c8:ca:66:10:
bb:f7:1e:96:7c:93:6f:eb:d4:ce:1a:a6:10:fb:7b:
2b:60:52:64:a5:a1:e6:08:9c:c4:bc:46:14:9d:74:
2a:a8:68:19:7c:66:c9:be:60:4c:7a:23:62:ce:67:
62:c8:2d:9e:8a:21:e0:0a:b1:ea:70:2e:6f:67:5d:
df:e3:10:18:0c:3e:0e:f9:d1:59:8c:59:36:87:78:
00:b6:10:c0:19:e9:43:e4:48:a5:86:95:e5:1d:aa:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:3C:0E:B0:65:C6:4E:CE:F5:FA:F0:31:1C:7C:C2:38:C3:75:63
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32302d3230203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.48.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:ca:95:26:1b:6e:c6:33:ae:10:3b:f3:76:ef:b6:cc:4a:52:
44:50:cd:6c:4d:a0:dc:71:d8:b2:cb:6d:c5:77:83:7c:53:3b:
3c:c2:67:01:72:fb:68:a3:50:c2:44:5a:1e:a9:4d:d7:b7:da:
f1:9f:ca:8d:ea:7e:f6:85:34:64:1e:27:bb:78:43:a8:b3:45:
93:15:d1:70:38:f5:9b:98:06:eb:2b:8b:94:ab:17:ab:b9:d6:
97:4b:7f:d9:2a:d3:1b:bc:82:e3:cd:7e:52:a4:99:d0:51:ee:
d2:c3:b4:0a:79:7d:ad:50:3d:d2:ac:fa:12:b1:ca:d2:85:d0:
78:aa:ff:71:5f:56:37:e7:0e:b6:f9:5b:0a:53:c8:2d:e1:c7:
d6:82:46:ac:2e:f8:93:2a:ce:02:83:44:ff:c6:64:3d:16:44:
69:61:73:12:90:71:27:b4:07:92:8d:2e:9c:03:4a:da:a4:11:
c5:c9:9d:57:c7:4a:2c:9f:20:a8:51:3c:e5:2f:1f:6c:9f:ac:
22:14:9a:45:4c:6c:da:cd:43:67:c7:bb:96:c3:67:e6:d2:95:
17:12:64:4d:d0:0e:f2:8c:32:d1:a7:d5:d4:23:67:81:42:fb:
db:70:32:fd:f9:ab:db:6b:8d:54:d3:8c:f5:93:68:f6:2b:c8:
d0:e9:c7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:44:14 2025 by rpki-client