Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3232203d3e203632323430.roa
File: 3134302e3135302e3233362e302f32322d3232203d3e203632323430.roa (raw, json)
Hash identifier: nX3sqUCs5XeqzGvjUJ68tnwqmw+Dzqvdkyb3Mxkemxo=
Subject key identifier: 6B:23:0F:89:C6:C1:E2:51:8E:84:14:D0:D9:9D:18:0F:45:1F:31:2E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 245686ECAA98509F17D12EA55F3EC7E78A37D4F6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3232203d3e203632323430.roa
Signing time: Thu 15 Feb 2024 03:42:05 +0000
ROA not before: Thu 15 Feb 2024 03:37:05 +0000
ROA not after: Thu 13 Feb 2025 03:42:05 +0000
asID: 62240
IP address blocks: 140.150.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:56:86:ec:aa:98:50:9f:17:d1:2e:a5:5f:3e:c7:e7:8a:37:d4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 15 03:37:05 2024 GMT
Not After : Feb 13 03:42:05 2025 GMT
Subject: CN=6B230F89C6C1E2518E8414D0D99D180F451F312E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:01:7e:64:1f:1a:b0:64:0d:8a:1d:b9:c7:
57:7b:7e:dc:cc:20:a5:fa:7f:95:15:62:7b:67:e8:
3b:05:69:ad:cb:04:5d:a6:b5:12:b3:0b:c8:5e:5b:
4b:bd:70:94:22:58:26:bf:5f:4d:c8:aa:8f:f0:7e:
77:8a:e6:22:67:b0:9e:54:61:11:02:df:d9:3e:d3:
d4:df:8d:80:f9:c4:c3:fe:ad:7c:b8:db:1a:28:7a:
ef:20:37:79:5c:87:a8:f2:15:92:a3:05:0f:c1:59:
c5:07:3b:95:a3:39:a6:44:f5:15:93:18:ae:2a:dd:
88:4c:42:ca:20:13:95:2f:e3:63:82:58:51:c9:27:
08:67:e1:1d:85:62:d4:f3:a9:ce:dc:0a:a6:69:88:
82:64:c9:dd:fa:1c:a4:bb:70:de:52:d2:96:e2:64:
93:43:00:65:7c:a2:02:3d:24:87:8f:52:49:86:c3:
ac:ce:f7:41:7e:41:28:78:c3:21:79:7d:46:78:7e:
7f:15:81:7e:c6:3b:6b:72:11:3c:2a:54:a8:16:d3:
d2:af:bc:4d:7f:e8:cf:8c:32:35:44:5c:21:41:4a:
13:9b:7b:b3:7c:63:26:82:65:0d:e4:c5:4a:50:fd:
24:81:6c:7e:ee:eb:ac:73:bf:0d:d6:92:86:4e:c3:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:23:0F:89:C6:C1:E2:51:8E:84:14:D0:D9:9D:18:0F:45:1F:31:2E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3233362e302f32322d3232203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.236.0/22
Signature Algorithm: sha256WithRSAEncryption
18:48:7f:cd:30:8f:ae:8d:99:44:d3:d9:eb:50:73:a4:96:0d:
d3:f5:c7:d0:31:96:d7:77:07:ba:9e:d1:c9:cf:a9:bf:8c:28:
71:52:7e:30:d5:de:a6:fe:aa:a4:8d:e7:3e:94:21:0c:25:3a:
54:18:5b:ae:5e:7b:cc:34:1a:20:72:cc:30:ed:ca:08:d3:4a:
90:51:a3:0d:99:68:34:7e:a3:29:86:9a:e0:af:94:d7:ff:31:
19:2f:3d:d8:00:3d:0f:75:cb:78:5a:4e:d8:3c:d9:86:a0:58:
d7:49:55:bf:03:d4:a9:5d:88:bb:46:e1:39:90:9e:2e:24:e7:
7e:07:22:f3:74:4b:92:ea:57:41:ab:56:53:ba:fe:ab:0a:53:
08:3f:5b:dc:8e:a5:62:65:33:71:e0:f2:3c:01:6b:ee:a7:8e:
86:28:b0:f9:2e:a5:b8:cd:29:14:74:82:51:01:df:02:fe:00:
cf:4d:67:b7:a3:e3:aa:20:a2:42:fd:ec:75:89:c8:88:fc:57:
4c:04:2b:f1:18:74:e5:0b:04:32:0e:a8:7e:18:9e:99:9c:7e:
4f:a9:be:1c:4c:60:30:3f:1e:fb:10:ce:e4:17:31:44:cb:98:
fa:1b:8b:81:ae:24:b1:2e:bd:9e:f6:04:95:0c:4f:5a:46:b1:
ed:1c:82:a6
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJFaG7KqYUJ8X0S6lXz7H54o31PYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAyMTUwMzM3MDVaFw0yNTAyMTMwMzQyMDVaMDMxMTAvBgNV
BAMTKDZCMjMwRjg5QzZDMUUyNTE4RTg0MTREMEQ5OUQxODBGNDUxRjMxMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS3gF+ZB8asGQNih25x1d7ftzM
IKX6f5UVYntn6DsFaa3LBF2mtRKzC8heW0u9cJQiWCa/X03Iqo/wfneK5iJnsJ5U
YREC39k+09TfjYD5xMP+rXy42xooeu8gN3lch6jyFZKjBQ/BWcUHO5WjOaZE9RWT
GK4q3YhMQsogE5Uv42OCWFHJJwhn4R2FYtTzqc7cCqZpiIJkyd36HKS7cN5S0pbi
ZJNDAGV8ogI9JIePUkmGw6zO90F+QSh4wyF5fUZ4fn8VgX7GO2tyETwqVKgW09Kv
vE1/6M+MMjVEXCFBShObe7N8YyaCZQ3kxUpQ/SSBbH7u66xzvw3WkoZOw585AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUayMPicbB4lGOhBTQ2Z0YD0UfMS4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDMwMmUzMTM1MzAyZTMy
MzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKMluwwDQYJKoZIhvcNAQELBQADggEBABhIf80wj66NmUTT2etQc6SWDdP1x9Ax
ltd3B7qe0cnPqb+MKHFSfjDV3qb+qqSN5z6UIQwlOlQYW65ee8w0GiByzDDtygjT
SpBRow2ZaDR+oymGmuCvlNf/MRkvPdgAPQ91y3haTtg82YagWNdJVb8D1KldiLtG
4TmQni4k534HIvN0S5LqV0GrVlO6/qsKUwg/W9yOpWJlM3Hg8jwBa+6njoYosPku
pbjNKRR0glEB3wL+AM9NZ7ej46ogokL97HWJyIj8V0wEK/EYdOULBDIOqH4Ynpmc
fk+pvhxMYDA/HvsQzuQXMUTLmPobi4GuJLEuvZ72BJUMT1pGse0cgqY=
-----END CERTIFICATE-----
Generated at Sat Apr 6 12:13:37 2024 by rpki-client on console-fra.rpki-client.org