Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31382e302f32342d3234203d3e20313334383335.roa
File: 3134362e3130332e31382e302f32342d3234203d3e20313334383335.roa (raw, json)
Hash identifier: M4kIm7ynRIaJx5QCTb6hgFI1ILQV9oHHs1qxGxflnFc=
Subject key identifier: FA:CB:34:C0:A8:54:FE:3D:BD:3C:34:8A:B9:95:85:89:58:BA:7A:05
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2A2D43C620C5A6D0EA218E260FD04B5EDD7398D2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31382e302f32342d3234203d3e20313334383335.roa
Signing time: Thu 21 Mar 2024 09:38:21 +0000
ROA not before: Thu 21 Mar 2024 09:33:21 +0000
ROA not after: Thu 20 Mar 2025 09:38:21 +0000
asID: 134835
IP address blocks: 146.103.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2d:43:c6:20:c5:a6:d0:ea:21:8e:26:0f:d0:4b:5e:dd:73:98:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 21 09:33:21 2024 GMT
Not After : Mar 20 09:38:21 2025 GMT
Subject: CN=FACB34C0A854FE3DBD3C348AB995858958BA7A05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:5a:fa:4b:57:dc:7d:54:ff:48:4e:b9:e7:
7e:ce:55:ef:65:3e:db:05:16:d0:ad:0f:00:7b:9d:
62:6d:de:68:84:c3:ae:cd:57:ae:da:b8:52:b3:e3:
ec:6d:00:91:89:23:3c:e5:e1:88:7c:f6:10:3e:d1:
32:59:08:5e:28:d0:05:de:9c:47:1f:a8:31:4e:fe:
06:45:41:eb:73:2b:53:11:c5:85:9f:9c:2c:06:7c:
86:5d:ce:5f:9e:c7:02:f2:5b:6b:4b:64:de:af:b9:
31:a9:75:a0:b5:26:bc:9c:f3:03:27:c7:ac:8f:c7:
35:c6:35:25:27:7f:f2:7b:fe:a1:6b:30:e4:7e:6e:
a4:7c:93:e0:8c:70:bc:c8:77:ae:36:88:a0:84:99:
53:d3:e7:38:5d:6d:3e:66:04:f9:86:4d:38:29:44:
94:84:4a:8e:ca:af:72:fe:2f:53:1b:dc:9f:7c:63:
a6:a1:f9:74:33:b4:e7:63:b9:e2:a2:d0:7e:15:db:
50:7d:a9:b2:ff:14:8b:9f:0f:a4:3c:ff:0b:2c:7a:
d8:57:10:18:f7:f3:28:4c:3b:79:5a:90:d9:3f:f8:
c8:db:e3:44:28:ed:a7:17:7f:cb:0f:88:c2:2d:b9:
13:8a:54:0d:64:ab:93:e6:a6:e1:62:a9:e2:ec:f7:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CB:34:C0:A8:54:FE:3D:BD:3C:34:8A:B9:95:85:89:58:BA:7A:05
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e31382e302f32342d3234203d3e20313334383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.18.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d5:ff:3b:42:8f:e6:94:e2:ec:fc:cd:7f:79:52:08:1b:17:
bb:7c:87:da:18:21:b6:3e:91:f9:59:a5:83:c2:43:9c:5d:8c:
03:7f:fd:9e:0f:c8:5f:a2:85:5b:15:ab:5d:b1:49:31:08:da:
24:20:78:03:7c:59:2c:7d:56:94:94:99:85:ae:35:24:b5:e5:
30:81:a2:1d:57:3c:a1:71:52:0c:5b:89:1d:79:c2:2f:93:d0:
c3:8e:71:5a:ff:28:d3:15:d9:d0:e2:45:97:9d:12:69:e4:0a:
a3:49:90:82:05:4a:b0:53:50:f8:15:b6:7b:21:fd:c3:01:bc:
25:dd:80:42:2a:27:98:9f:21:20:af:53:84:9d:df:e5:90:63:
1a:26:40:cc:03:96:e5:8a:74:ba:33:eb:1a:ec:96:0a:a3:26:
a0:13:39:64:46:85:8e:9b:84:33:b2:05:b6:63:8f:db:c2:29:
23:40:45:0b:f6:4e:55:b0:b0:cf:9c:b6:3a:25:33:92:7f:e4:
94:70:dd:9a:cf:32:2d:7d:21:37:d3:a3:b8:b0:4c:ec:df:87:
5e:cb:65:19:ed:93:f7:f0:7a:4f:84:cd:63:6e:10:5a:a3:24:
01:89:f6:be:2f:e1:dc:57:c3:65:9e:18:60:60:cb:ef:25:60:
e5:01:fc:e2
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUKi1DxiDFptDqIY4mD9BLXt1zmNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAzMjEwOTMzMjFaFw0yNTAzMjAwOTM4MjFaMDMxMTAvBgNV
BAMTKEZBQ0IzNEMwQTg1NEZFM0RCRDNDMzQ4QUI5OTU4NTg5NThCQTdBMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/lr6S1fcfVT/SE65537OVe9l
PtsFFtCtDwB7nWJt3miEw67NV67auFKz4+xtAJGJIzzl4Yh89hA+0TJZCF4o0AXe
nEcfqDFO/gZFQetzK1MRxYWfnCwGfIZdzl+exwLyW2tLZN6vuTGpdaC1Jryc8wMn
x6yPxzXGNSUnf/J7/qFrMOR+bqR8k+CMcLzId642iKCEmVPT5zhdbT5mBPmGTTgp
RJSESo7Kr3L+L1Mb3J98Y6ah+XQztOdjueKi0H4V21B9qbL/FIufD6Q8/wssethX
EBj38yhMO3lakNk/+Mjb40Qo7acXf8sPiMItuROKVA1kq5PmpuFiqeLs9wfJAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU+ss0wKhU/j29PDSKuZWFiVi6egUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM2MmUzMTMwMzMyZTMx
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzQzODMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACSZxIwDQYJKoZIhvcNAQELBQADggEBADnV/ztCj+aU4uz8zX95UggbF7t8h9oY
IbY+kflZpYPCQ5xdjAN//Z4PyF+ihVsVq12xSTEI2iQgeAN8WSx9VpSUmYWuNSS1
5TCBoh1XPKFxUgxbiR15wi+T0MOOcVr/KNMV2dDiRZedEmnkCqNJkIIFSrBTUPgV
tnsh/cMBvCXdgEIqJ5ifISCvU4Sd3+WQYxomQMwDluWKdLoz6xrslgqjJqATOWRG
hY6bhDOyBbZjj9vCKSNARQv2TlWwsM+ctjolM5J/5JRw3ZrPMi19ITfTo7iwTOzf
h17LZRntk/fwek+EzWNuEFqjJAGJ9r4v4dxXw2WeGGBgy+8lYOUB/OI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org