Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3136302e302f32312d3234203d3e20383334.roa
File: 3134302e3135302e3136302e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: ij+dIOwrLB9ZIOLN54kdFox7b+sWUsaaso8zVmnMhLc=
Subject key identifier: 87:2C:7C:37:19:96:F0:F1:91:98:71:9A:19:53:2E:F0:DE:22:5C:77
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0EAB542DC02C0BA30C68E3B2546658675C1C1A24
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3136302e302f32312d3234203d3e20383334.roa
Signing time: Wed 21 Jun 2023 00:00:05 +0000
ROA not before: Tue 20 Jun 2023 23:55:05 +0000
ROA not after: Wed 19 Jun 2024 00:00:05 +0000
asID: 834
IP address blocks: 140.150.160.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 18:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ab:54:2d:c0:2c:0b:a3:0c:68:e3:b2:54:66:58:67:5c:1c:1a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 20 23:55:05 2023 GMT
Not After : Jun 19 00:00:05 2024 GMT
Subject: CN=872C7C371996F0F19198719A19532EF0DE225C77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:3c:fc:df:1b:fd:18:ee:76:0c:c7:04:1d:
79:e9:df:52:85:de:d9:73:86:1b:2f:8f:44:ed:c5:
eb:ec:45:e7:c1:29:40:23:66:73:3d:f3:e0:0f:d7:
ce:01:12:20:68:ef:c4:38:f7:3e:fb:b4:f0:7e:38:
8e:34:2d:30:b4:d5:10:4e:bf:e3:cc:03:85:4c:eb:
68:06:14:1f:83:7e:e2:ad:1e:97:c1:73:03:36:10:
e9:9b:14:a8:9c:07:6b:78:0a:e9:ee:36:67:18:a9:
c3:e3:a1:0f:7f:d0:5f:15:c3:af:2d:a5:42:60:34:
9f:7d:65:23:e8:9c:a7:34:3c:4f:0c:b0:88:12:51:
ad:3a:03:ce:ac:ec:b5:38:f7:ae:43:e8:af:2f:61:
09:dd:e3:96:f4:c4:d3:fc:74:9b:54:89:3b:c1:41:
bd:58:b8:8b:5d:1c:f6:68:4c:f6:05:35:bb:89:ea:
ba:d3:f5:35:d3:1c:ef:e6:ba:72:ee:3b:90:f4:cb:
05:ed:ce:18:7a:ce:6b:7c:be:88:c2:9d:d0:a3:94:
a9:d5:a7:2b:ed:0d:2a:8a:50:af:69:19:94:4e:44:
d3:d1:33:f7:6f:b0:8a:cc:88:a2:a5:cc:04:05:aa:
29:5b:56:d5:dd:5e:b3:2b:43:97:59:c6:54:14:44:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2C:7C:37:19:96:F0:F1:91:98:71:9A:19:53:2E:F0:DE:22:5C:77
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3136302e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.160.0/21
Signature Algorithm: sha256WithRSAEncryption
10:8c:c2:06:6c:5f:91:82:bd:de:cc:b5:4a:2b:79:ca:5f:d7:
77:4c:b3:ae:67:63:7a:d3:e2:53:ce:b0:e7:87:4a:23:21:68:
da:27:f9:0d:f0:86:84:a9:a3:cd:c6:54:7b:b9:48:2c:f4:39:
70:22:c4:75:24:4a:b2:2d:eb:8d:72:7d:af:f2:b3:49:d0:ca:
af:4f:d9:15:18:fc:7d:b5:17:f6:9f:80:c3:49:76:9b:83:0b:
10:ee:c3:ec:fa:e2:dd:b0:b8:54:8e:69:d6:aa:3b:5b:65:81:
b0:99:20:09:ab:38:88:0d:cd:31:e6:46:5e:c4:26:3c:e2:3b:
75:34:86:1b:35:27:e8:ac:2c:73:08:45:1e:2f:02:82:3c:ec:
ad:55:6a:a4:49:3b:fc:4f:ed:e8:1c:64:7e:b3:fb:ec:83:dc:
e4:35:d9:72:f3:de:0f:cf:83:b6:df:74:98:bf:f9:cd:10:96:
94:3a:6f:e1:11:9a:fc:43:e2:71:ad:f6:c6:e2:1e:04:4d:94:
28:c7:8b:2d:86:4e:fd:ea:57:07:a3:35:16:6d:11:66:ed:a7:
45:34:5d:85:aa:2a:54:58:6e:1a:57:e6:51:60:c7:03:b9:eb:
00:c1:cb:20:4a:85:f1:82:57:1c:d6:92:73:3c:72:45:57:eb:
d2:42:b2:5c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDqtULcAsC6MMaOOyVGZYZ1wcGiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yMzA2MjAyMzU1MDVaFw0yNDA2MTkwMDAwMDVaMDMxMTAvBgNV
BAMTKDg3MkM3QzM3MTk5NkYwRjE5MTk4NzE5QTE5NTMyRUYwREUyMjVDNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgjz83xv9GO52DMcEHXnp31KF
3tlzhhsvj0TtxevsRefBKUAjZnM98+AP184BEiBo78Q49z77tPB+OI40LTC01RBO
v+PMA4VM62gGFB+DfuKtHpfBcwM2EOmbFKicB2t4CunuNmcYqcPjoQ9/0F8Vw68t
pUJgNJ99ZSPonKc0PE8MsIgSUa06A86s7LU4965D6K8vYQnd45b0xNP8dJtUiTvB
Qb1YuItdHPZoTPYFNbuJ6rrT9TXTHO/munLuO5D0ywXtzhh6zmt8vojCndCjlKnV
pyvtDSqKUK9pGZRORNPRM/dvsIrMiKKlzAQFqilbVtXdXrMrQ5dZxlQURCdBAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhyx8NxmW8PGRmHGaGVMu8N4iXHcwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDMwMmUzMTM1MzAyZTMx
MzYzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA4yW
oDANBgkqhkiG9w0BAQsFAAOCAQEAEIzCBmxfkYK93sy1Sit5yl/Xd0yzrmdjetPi
U86w54dKIyFo2if5DfCGhKmjzcZUe7lILPQ5cCLEdSRKsi3rjXJ9r/KzSdDKr0/Z
FRj8fbUX9p+Aw0l2m4MLEO7D7Pri3bC4VI5p1qo7W2WBsJkgCas4iA3NMeZGXsQm
POI7dTSGGzUn6KwscwhFHi8CgjzsrVVqpEk7/E/t6BxkfrP77IPc5DXZcvPeD8+D
tt90mL/5zRCWlDpv4RGa/EPica32xuIeBE2UKMeLLYZO/epXB6M1Fm0RZu2nRTRd
haoqVFhuGlfmUWDHA7nrAMHLIEqF8YJXHNaSczxyRVfr0kKyXA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org