Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3139322e302f31392d3234203d3e2037333933.roa
File: 3134302e3135302e3139322e302f31392d3234203d3e2037333933.roa (raw, json)
Hash identifier: BYF8NbcDJupll3ZWhxwRhEmIDxEslRYz+0wuiS04Zbg=
Subject key identifier: 6F:82:64:D4:4A:6E:1E:90:AE:22:BE:3F:9E:E5:89:12:D7:DC:62:D8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6659131503AF016933167D5D8227D21FD2B1879D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3139322e302f31392d3234203d3e2037333933.roa
Signing time: Mon 26 Feb 2024 08:05:14 +0000
ROA not before: Mon 26 Feb 2024 08:00:14 +0000
ROA not after: Mon 24 Feb 2025 08:05:14 +0000
asID: 7393
IP address blocks: 140.150.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:59:13:15:03:af:01:69:33:16:7d:5d:82:27:d2:1f:d2:b1:87:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 26 08:00:14 2024 GMT
Not After : Feb 24 08:05:14 2025 GMT
Subject: CN=6F8264D44A6E1E90AE22BE3F9EE58912D7DC62D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:8c:9b:c7:57:09:78:ca:4d:ff:83:d4:a5:
9b:c4:ae:f5:45:a2:86:ed:ca:86:d9:d6:f5:ea:51:
ec:40:4d:50:1a:96:15:65:cc:b0:09:fd:91:5e:98:
17:8b:b8:9c:c7:3c:dc:6a:0f:f2:54:35:45:51:10:
bc:e3:a0:b5:83:54:e7:1a:2d:77:c7:58:64:74:57:
2c:f5:fb:1b:d3:9b:a0:32:3a:fe:24:bf:3d:0c:3d:
b6:6b:05:27:9d:90:dd:3f:9d:0b:1e:20:34:65:52:
24:bd:17:c5:62:56:74:30:62:27:d5:ca:7f:8c:ca:
1a:4a:db:d0:72:d4:d6:ae:b5:0a:4f:47:3b:0b:0d:
de:b8:98:b1:d2:37:65:df:a9:86:26:4f:3a:f3:14:
a4:a5:18:3a:f5:43:16:2c:2d:2c:50:ba:d7:23:71:
a0:ec:50:11:97:ea:e2:0a:ef:90:3d:ff:49:77:b8:
25:57:41:fe:01:f5:d9:88:10:79:8d:59:4d:31:6d:
0f:30:e5:8e:96:d7:8c:94:0f:f7:a1:4f:50:66:33:
5b:77:29:95:99:cc:df:a0:8e:3b:90:05:88:9b:54:
d2:11:b6:5d:da:a5:81:05:17:d5:7d:b8:81:b8:9b:
93:f0:db:8f:3f:e3:f0:21:d6:97:fd:a8:6e:e5:2d:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:82:64:D4:4A:6E:1E:90:AE:22:BE:3F:9E:E5:89:12:D7:DC:62:D8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3139322e302f31392d3234203d3e2037333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.192.0/19
Signature Algorithm: sha256WithRSAEncryption
96:62:04:db:d5:f3:30:cf:64:96:5a:36:ae:c4:67:cc:c6:82:
82:54:21:10:d8:4d:14:95:12:ec:b7:c5:41:5e:56:d5:63:0e:
57:83:f2:f9:3f:f2:81:d1:aa:7f:51:08:47:b9:2c:74:32:1d:
18:89:42:4f:90:64:31:41:f3:31:96:e4:24:37:9e:9d:90:1d:
d5:6a:af:45:2e:2a:8d:60:74:29:39:d2:84:14:98:26:02:e2:
d4:3b:37:df:44:c5:50:3a:07:62:34:9d:39:7f:b4:3b:51:d8:
09:e6:aa:25:5b:b5:99:93:f2:82:40:03:16:8f:eb:29:32:80:
c1:db:ae:04:e5:c8:89:38:a3:c8:3a:6c:cc:6c:24:08:10:20:
4f:9f:08:16:6a:dc:5f:14:f7:e1:4b:ec:4f:6d:93:58:73:c0:
42:d3:bc:a5:7e:6a:35:05:79:14:83:3f:f2:62:4b:12:86:40:
e6:46:c6:d2:8d:ad:4c:d6:4b:58:5d:f4:a0:a3:90:55:c3:6e:
42:2e:60:29:cb:fa:2e:a5:ee:66:13:a3:2d:6a:f7:a1:47:ab:
14:d3:d3:b7:8a:53:d1:9c:f9:11:72:29:79:d9:3e:a0:cd:b2:
32:16:e5:c3:0f:f3:9e:a3:31:35:5d:53:f8:6f:9f:7b:aa:3e:
76:be:50:2f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZlkTFQOvAWkzFn1dgifSH9Kxh50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAyMjYwODAwMTRaFw0yNTAyMjQwODA1MTRaMDMxMTAvBgNV
BAMTKDZGODI2NEQ0NEE2RTFFOTBBRTIyQkUzRjlFRTU4OTEyRDdEQzYyRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rYybx1cJeMpN/4PUpZvErvVF
oobtyobZ1vXqUexATVAalhVlzLAJ/ZFemBeLuJzHPNxqD/JUNUVRELzjoLWDVOca
LXfHWGR0Vyz1+xvTm6AyOv4kvz0MPbZrBSedkN0/nQseIDRlUiS9F8ViVnQwYifV
yn+MyhpK29By1NautQpPRzsLDd64mLHSN2XfqYYmTzrzFKSlGDr1QxYsLSxQutcj
caDsUBGX6uIK75A9/0l3uCVXQf4B9dmIEHmNWU0xbQ8w5Y6W14yUD/ehT1BmM1t3
KZWZzN+gjjuQBYibVNIRtl3apYEFF9V9uIG4m5Pw248/4/Ah1pf9qG7lLT4tAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUb4Jk1EpuHpCuIr4/nuWJEtfcYtgwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDMwMmUzMTM1MzAyZTMx
MzkzMjJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDM3MzMzOTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF
jJbAMA0GCSqGSIb3DQEBCwUAA4IBAQCWYgTb1fMwz2SWWjauxGfMxoKCVCEQ2E0U
lRLst8VBXlbVYw5Xg/L5P/KB0ap/UQhHuSx0Mh0YiUJPkGQxQfMxluQkN56dkB3V
aq9FLiqNYHQpOdKEFJgmAuLUOzffRMVQOgdiNJ05f7Q7UdgJ5qolW7WZk/KCQAMW
j+spMoDB264E5ciJOKPIOmzMbCQIECBPnwgWatxfFPfhS+xPbZNYc8BC07ylfmo1
BXkUgz/yYksShkDmRsbSja1M1ktYXfSgo5BVw25CLmApy/oupe5mE6MtavehR6sU
09O3ilPRnPkRcil52T6gzbIyFuXDD/OeozE1XVP4b597qj52vlAv
-----END CERTIFICATE-----
Generated at Sat Apr 6 12:13:37 2024 by rpki-client on console-fra.rpki-client.org