Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3232382e302f32322d3234203d3e203436343530.roa
File: 3134302e3135302e3232382e302f32322d3234203d3e203436343530.roa (raw, json)
Hash identifier: XWG/CoRUDsd8NAqw4ZTJ9J+8ExClNzretUPEa9L8sio=
Subject key identifier: FB:99:6E:53:7F:07:1A:BC:64:E9:12:42:1A:C6:D2:35:4D:85:E7:A6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 74061493EF5FCB64258B11CC13E790ED75927A58
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3232382e302f32322d3234203d3e203436343530.roa
Signing time: Thu 29 Feb 2024 21:05:14 +0000
ROA not before: Thu 29 Feb 2024 21:00:14 +0000
ROA not after: Thu 27 Feb 2025 21:05:14 +0000
asID: 46450
IP address blocks: 140.150.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:06:14:93:ef:5f:cb:64:25:8b:11:cc:13:e7:90:ed:75:92:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 29 21:00:14 2024 GMT
Not After : Feb 27 21:05:14 2025 GMT
Subject: CN=FB996E537F071ABC64E912421AC6D2354D85E7A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0d:b6:a7:e1:19:a8:f6:e2:3b:04:8c:cc:c2:
4b:90:a4:c8:e7:cd:1c:5e:cb:f5:b4:87:ca:14:ed:
e0:cf:61:d9:39:2a:41:95:82:67:4a:38:20:16:fc:
77:1d:fb:be:25:1f:41:02:4d:0f:2e:69:f2:f6:df:
27:d6:6a:84:a3:73:09:97:11:0c:c7:2f:5a:6d:60:
4b:cd:96:f6:c8:a7:27:20:f1:1f:d4:92:49:3e:9f:
ec:1e:8b:36:51:bb:7b:87:87:a2:b0:23:bf:1e:98:
b0:ae:9f:ef:8a:93:7e:62:14:3c:32:96:44:6f:8d:
cf:73:8f:a5:4d:e4:d2:85:05:a9:ae:93:c3:60:61:
47:4e:a0:9e:42:cd:c5:71:ea:1b:76:9b:50:e2:62:
e5:41:06:a7:18:5c:86:d3:b8:ef:4f:45:95:2e:cb:
48:84:54:69:18:24:d5:b5:bd:2a:73:e6:f0:b7:67:
37:2d:f2:14:da:d1:17:d9:4b:75:fe:94:08:4c:10:
ae:8a:0e:d2:bf:1b:92:81:db:b1:af:5e:a5:fa:ba:
48:c5:41:a6:f9:64:32:5c:bd:0f:e2:53:4c:6b:eb:
6e:b8:76:50:40:b9:80:93:c0:1e:8c:64:25:e9:b6:
75:6c:f9:bd:42:b5:5e:d1:97:1c:37:4b:f9:2d:20:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:6E:53:7F:07:1A:BC:64:E9:12:42:1A:C6:D2:35:4D:85:E7:A6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3232382e302f32322d3234203d3e203436343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:06:f9:c4:68:91:47:17:b4:d6:29:37:35:c9:7c:ca:3e:86:
79:d4:b4:23:1b:b6:f2:e7:84:b9:f0:57:65:d8:9b:0a:04:2e:
dd:29:d3:e9:9e:d4:8b:6b:ba:33:8c:65:8b:25:62:01:20:20:
72:ac:d7:b4:0c:7b:58:de:81:7b:61:0e:f0:ee:02:3f:89:69:
5d:74:35:12:50:cd:7d:75:ff:2e:88:49:ea:49:41:33:d7:a9:
02:ef:c6:27:a1:a8:96:ab:e3:86:15:8f:1f:47:ae:0f:df:f0:
b0:78:49:54:d6:43:be:44:39:cf:6e:08:8e:60:43:05:d0:c1:
32:39:29:da:eb:36:5e:0f:18:fe:60:46:d6:55:a3:62:3f:f1:
fc:61:bc:a9:8c:42:dc:28:dd:1c:68:79:c9:24:3b:ed:69:96:
82:10:da:40:32:d5:c7:4e:60:19:4e:dc:05:22:e0:11:00:bd:
36:dd:de:c7:53:5a:4c:f8:c3:7c:2b:7d:ea:26:f9:c3:5a:f0:
a4:5e:b1:b3:4c:f8:cc:ae:88:c0:d2:3c:fb:45:27:8a:1e:25:
86:7f:74:95:b7:48:41:c4:ce:db:32:5f:63:94:14:ca:77:86:
f1:9f:84:33:b2:0a:fa:4e:0d:d3:30:ff:dc:9e:c6:1e:65:cb:
3b:d4:59:b5
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdAYUk+9fy2QlixHME+eQ7XWSelgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAyMjkyMTAwMTRaFw0yNTAyMjcyMTA1MTRaMDMxMTAvBgNV
BAMTKEZCOTk2RTUzN0YwNzFBQkM2NEU5MTI0MjFBQzZEMjM1NEQ4NUU3QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnDban4Rmo9uI7BIzMwkuQpMjn
zRxey/W0h8oU7eDPYdk5KkGVgmdKOCAW/Hcd+74lH0ECTQ8uafL23yfWaoSjcwmX
EQzHL1ptYEvNlvbIpycg8R/Ukkk+n+weizZRu3uHh6KwI78emLCun++Kk35iFDwy
lkRvjc9zj6VN5NKFBamuk8NgYUdOoJ5CzcVx6ht2m1DiYuVBBqcYXIbTuO9PRZUu
y0iEVGkYJNW1vSpz5vC3Zzct8hTa0RfZS3X+lAhMEK6KDtK/G5KB27GvXqX6ukjF
Qab5ZDJcvQ/iU0xr6264dlBAuYCTwB6MZCXptnVs+b1CtV7Rlxw3S/ktINwZAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU+5luU38HGrxk6RJCGsbSNU2F56YwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDMwMmUzMTM1MzAyZTMy
MzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzYzNDM1MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKMluQwDQYJKoZIhvcNAQELBQADggEBAD0G+cRokUcXtNYpNzXJfMo+hnnUtCMb
tvLnhLnwV2XYmwoELt0p0+me1ItrujOMZYslYgEgIHKs17QMe1jegXthDvDuAj+J
aV10NRJQzX11/y6ISepJQTPXqQLvxiehqJar44YVjx9Hrg/f8LB4SVTWQ75EOc9u
CI5gQwXQwTI5KdrrNl4PGP5gRtZVo2I/8fxhvKmMQtwo3RxoeckkO+1ploIQ2kAy
1cdOYBlO3AUi4BEAvTbd3sdTWkz4w3wrfeom+cNa8KResbNM+MyuiMDSPPtFJ4oe
JYZ/dJW3SEHEztsyX2OUFMp3hvGfhDOyCvpODdMw/9yexh5lyzvUWbU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org