Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31312e302f32342d3234203d3e203233343730.roa
File: 3134362e3130332e31312e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: KMaaIbSulRPYpoUUWof7xXLwYEsbSBc9nRlljz5SVmE=
Subject key identifier: FA:93:40:A9:59:4B:82:90:1A:61:6E:42:5B:1D:1E:9B:3A:1C:19:DE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 54DBB06F7F307796F3601CB2E92AC88308C2DEEF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31312e302f32342d3234203d3e203233343730.roa
Signing time: Mon 25 Mar 2024 13:11:05 +0000
ROA not before: Mon 25 Mar 2024 13:06:05 +0000
ROA not after: Mon 24 Mar 2025 13:11:05 +0000
asID: 23470
IP address blocks: 146.103.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:db:b0:6f:7f:30:77:96:f3:60:1c:b2:e9:2a:c8:83:08:c2:de:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 25 13:06:05 2024 GMT
Not After : Mar 24 13:11:05 2025 GMT
Subject: CN=FA9340A9594B82901A616E425B1D1E9B3A1C19DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:a2:ae:60:ee:e4:a6:c1:52:02:4b:e9:51:
4c:52:9f:32:7e:5f:28:ce:be:03:1f:c8:03:76:12:
28:df:50:d6:5e:63:57:7a:3b:d4:cc:2b:f2:23:b1:
16:2a:af:40:6b:37:21:5b:e7:73:ac:de:8f:43:d8:
6f:9b:b4:00:f0:e7:e9:cb:71:55:65:2c:e0:6e:4a:
de:a0:e0:3d:7f:a9:e9:9b:d9:12:75:25:0b:87:f8:
d8:6e:62:6c:a4:aa:ed:35:cf:80:ec:76:b7:60:ce:
32:47:d9:ab:15:e3:28:9c:c1:e0:75:17:9f:6b:c4:
4d:f2:f9:7e:e6:cf:71:64:2b:aa:9d:48:e7:bb:c5:
5b:d9:c2:f2:5e:bf:32:85:cf:0c:68:20:b4:d3:b0:
99:62:98:1a:3c:a1:27:d7:48:5c:92:c2:23:98:45:
db:90:9c:3c:5a:5e:d0:df:d5:1f:d4:12:b8:30:a7:
1c:7a:c3:db:22:3a:75:40:42:d1:8c:49:b8:79:93:
6a:c3:ad:da:0e:22:ea:4c:e9:3b:e4:bf:d3:3f:2f:
ef:be:b5:1e:60:9c:f4:5a:67:35:12:26:7f:c0:d9:
8d:ce:3f:7f:4b:31:49:a6:7d:31:1b:e0:44:78:72:
49:a1:d9:4c:4e:a9:07:55:d8:43:5f:e3:d6:8b:e5:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:93:40:A9:59:4B:82:90:1A:61:6E:42:5B:1D:1E:9B:3A:1C:19:DE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31312e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:0b:1c:0d:d3:ae:f1:13:4f:d9:b5:12:a7:45:41:6c:cc:47:
ef:97:d7:86:dc:0d:35:1a:4e:cb:08:9e:66:68:1b:03:b5:8d:
7c:7f:8a:8d:8a:47:1a:97:31:9c:bd:d7:e4:d3:11:e7:d4:8a:
e1:b0:c8:c1:19:75:f4:a5:f5:e5:f1:c1:31:17:93:a4:8c:97:
bb:4c:f3:12:aa:28:74:5b:21:46:06:fc:f9:2b:01:fd:b0:29:
97:8a:49:87:fd:ec:d6:3f:46:9b:10:2c:3c:b1:14:3a:8f:38:
15:6b:61:4f:a2:e6:fc:4b:96:28:06:67:ff:2b:87:93:af:69:
df:e7:e8:6d:65:0e:d7:bc:94:fb:cf:58:47:c5:d0:1e:ea:98:
c0:56:1f:c0:29:af:bf:d7:4f:58:98:93:55:7f:d9:d3:fc:d4:
19:13:00:09:53:01:51:8a:39:ef:1a:f1:da:2f:a6:41:82:04:
f3:05:de:f5:15:15:68:50:43:1a:e7:89:7a:4a:69:f7:6f:32:
0c:ef:d0:24:be:8a:72:3b:8f:1b:67:cc:a0:7a:35:13:6c:f0:
56:10:6b:c2:de:0c:f4:e3:21:c1:a7:c9:56:ce:c8:0a:78:3e:
11:07:f9:35:19:f3:1f:c3:0f:1a:8b:a2:59:58:65:cc:5a:c1:
a9:a7:77:ce
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVNuwb38wd5bzYByy6SrIgwjC3u8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAzMjUxMzA2MDVaFw0yNTAzMjQxMzExMDVaMDMxMTAvBgNV
BAMTKEZBOTM0MEE5NTk0QjgyOTAxQTYxNkU0MjVCMUQxRTlCM0ExQzE5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQKKuYO7kpsFSAkvpUUxSnzJ+
XyjOvgMfyAN2EijfUNZeY1d6O9TMK/IjsRYqr0BrNyFb53Os3o9D2G+btADw5+nL
cVVlLOBuSt6g4D1/qemb2RJ1JQuH+NhuYmykqu01z4DsdrdgzjJH2asV4yicweB1
F59rxE3y+X7mz3FkK6qdSOe7xVvZwvJevzKFzwxoILTTsJlimBo8oSfXSFySwiOY
RduQnDxaXtDf1R/UErgwpxx6w9siOnVAQtGMSbh5k2rDrdoOIupM6Tvkv9M/L+++
tR5gnPRaZzUSJn/A2Y3OP39LMUmmfTEb4ER4ckmh2UxOqQdV2ENf49aL5Tg5AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU+pNAqVlLgpAaYW5CWx0emzocGd4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM2MmUzMTMwMzMyZTMx
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzQzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kmcLMA0GCSqGSIb3DQEBCwUAA4IBAQBOCxwN067xE0/ZtRKnRUFszEfvl9eG3A01
Gk7LCJ5maBsDtY18f4qNikcalzGcvdfk0xHn1IrhsMjBGXX0pfXl8cExF5OkjJe7
TPMSqih0WyFGBvz5KwH9sCmXikmH/ezWP0abECw8sRQ6jzgVa2FPoub8S5YoBmf/
K4eTr2nf5+htZQ7XvJT7z1hHxdAe6pjAVh/AKa+/109YmJNVf9nT/NQZEwAJUwFR
ijnvGvHaL6ZBggTzBd71FRVoUEMa54l6Smn3bzIM79AkvopyO48bZ8ygejUTbPBW
EGvC3gz04yHBp8lWzsgKeD4RB/k1GfMfww8ai6JZWGXMWsGpp3fO
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org