Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e20383334.roa
File: 3134302e3233332e3139322e302f31382d3234203d3e20383334.roa (raw, json)
Hash identifier: fAyarjrZgaYVxjud7uKuPhIaK0FSTbAtHzzEWTWbsAk=
Subject key identifier: D9:C0:B6:40:F8:84:EE:26:DC:60:8F:E7:06:C3:84:97:4B:3B:27:76
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5723E87DE52A5CCD15A3D1CE7584E1CBAEFA8BB6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e20383334.roa
Signing time: Thu 08 Feb 2024 14:02:43 +0000
ROA not before: Thu 08 Feb 2024 13:57:43 +0000
ROA not after: Thu 06 Feb 2025 14:02:43 +0000
asID: 834
IP address blocks: 140.233.192.0/18 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:23:e8:7d:e5:2a:5c:cd:15:a3:d1:ce:75:84:e1:cb:ae:fa:8b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 8 13:57:43 2024 GMT
Not After : Feb 6 14:02:43 2025 GMT
Subject: CN=D9C0B640F884EE26DC608FE706C384974B3B2776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:19:bd:0f:9d:38:ac:ab:e1:a4:c2:f5:97:
84:e6:d9:a8:ad:58:a6:3d:cd:90:6f:aa:08:f6:c3:
88:a5:f4:d6:79:24:bc:13:7e:02:1c:1c:09:ad:87:
44:47:4c:ed:2e:42:9e:09:35:8e:71:c7:32:f1:bf:
9f:b9:e7:25:0d:4e:40:67:ff:d1:4e:94:04:a8:93:
18:9a:b0:4e:aa:eb:60:58:82:6c:ff:a0:5d:78:b1:
48:57:59:9c:f4:14:ca:89:16:45:6b:c7:c1:9e:26:
a3:ba:80:fe:74:d7:99:b0:2e:64:a2:34:8a:28:1e:
93:8d:66:ea:2f:75:58:b2:57:21:8a:b6:5a:ec:8e:
6b:61:33:a1:a4:7a:65:22:5e:3c:de:6c:55:61:6b:
50:b0:e1:e7:90:ff:d8:59:04:29:85:29:16:c9:5f:
2d:55:cf:63:a9:31:e8:83:2c:fa:e0:6a:59:67:84:
69:24:b6:90:0f:01:7c:7e:2e:cf:54:ad:17:bb:e0:
7d:76:0d:91:9a:bb:97:de:2e:e6:ec:34:f2:32:35:
70:49:db:9e:34:27:ce:e7:ca:96:8a:e6:ef:7d:d6:
ba:a3:35:7e:c1:17:77:8b:4b:31:c3:8e:f9:3d:c7:
30:a5:e6:10:2b:3a:8f:20:bf:d0:f4:7e:95:66:2c:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C0:B6:40:F8:84:EE:26:DC:60:8F:E7:06:C3:84:97:4B:3B:27:76
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3233332e3139322e302f31382d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
Signature Algorithm: sha256WithRSAEncryption
bc:0a:1e:0f:7e:8c:c9:66:9f:96:a3:3a:0c:c6:9c:a2:fa:e2:
78:bc:75:0c:e4:c8:73:27:84:57:ef:5e:64:b7:86:86:ef:a5:
78:08:92:e3:0f:e7:50:61:89:df:e1:de:a3:c9:25:a2:ae:4f:
51:70:44:8d:d7:ce:02:8f:6c:48:1f:25:ed:8e:78:21:4a:69:
3f:ed:4c:17:9b:f1:d5:81:d5:8c:73:da:0a:ed:54:8a:b0:c6:
98:e1:6c:58:62:b5:cb:bf:d7:bc:75:75:e2:fc:aa:15:e4:f9:
04:bc:55:fa:13:78:58:ef:db:16:c9:9a:c0:85:c5:ce:9d:6c:
d8:3f:52:1f:db:54:37:86:d7:d2:26:07:fd:ce:32:0e:8b:98:
dd:0e:60:58:45:cc:c2:03:18:54:28:bb:34:9a:15:57:32:11:
75:0d:9b:e3:79:72:f9:f9:82:4f:a7:7a:e5:8b:d3:7d:8d:99:
d6:66:61:61:d5:6c:3c:a8:d5:c5:87:a1:4f:eb:3e:80:ed:06:
e0:b8:f8:74:67:d1:72:8c:64:e3:ee:9e:1f:4e:4d:64:1f:77:
07:81:c6:d4:59:d0:61:c4:17:83:ee:d8:a6:47:1c:14:54:22:
34:bf:99:cf:17:ad:8a:2f:27:72:c0:39:ad:f5:c0:48:86:a4:
98:e0:7b:ca
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVyPofeUqXM0Vo9HOdYThy676i7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAyMDgxMzU3NDNaFw0yNTAyMDYxNDAyNDNaMDMxMTAvBgNV
BAMTKEQ5QzBCNjQwRjg4NEVFMjZEQzYwOEZFNzA2QzM4NDk3NEIzQjI3NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbBm9D504rKvhpML1l4Tm2ait
WKY9zZBvqgj2w4il9NZ5JLwTfgIcHAmth0RHTO0uQp4JNY5xxzLxv5+55yUNTkBn
/9FOlASokxiasE6q62BYgmz/oF14sUhXWZz0FMqJFkVrx8GeJqO6gP5015mwLmSi
NIooHpONZuovdViyVyGKtlrsjmthM6GkemUiXjzebFVha1Cw4eeQ/9hZBCmFKRbJ
Xy1Vz2OpMeiDLPrgallnhGkktpAPAXx+Ls9UrRe74H12DZGau5feLubsNPIyNXBJ
2540J87nypaK5u991rqjNX7BF3eLSzHDjvk9xzCl5hArOo8gv9D0fpVmLG5BAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU2cC2QPiE7ibcYI/nBsOEl0s7J3YwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDMwMmUzMjMzMzMyZTMx
MzkzMjJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBozp
wDANBgkqhkiG9w0BAQsFAAOCAQEAvAoeD36MyWaflqM6DMacovrieLx1DOTIcyeE
V+9eZLeGhu+leAiS4w/nUGGJ3+Heo8kloq5PUXBEjdfOAo9sSB8l7Y54IUppP+1M
F5vx1YHVjHPaCu1UirDGmOFsWGK1y7/XvHV14vyqFeT5BLxV+hN4WO/bFsmawIXF
zp1s2D9SH9tUN4bX0iYH/c4yDouY3Q5gWEXMwgMYVCi7NJoVVzIRdQ2b43ly+fmC
T6d65YvTfY2Z1mZhYdVsPKjVxYehT+s+gO0G4Lj4dGfRcoxk4+6eH05NZB93B4HG
1FnQYcQXg+7YpkccFFQiNL+Zzxetii8ncsA5rfXASIakmOB7yg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org