Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32322e302f32342d3234203d3e20393138.roa
File: 3134362e3130332e32322e302f32342d3234203d3e20393138.roa (raw, json)
Hash identifier: KjqaSZhR1sMy5IoawtUT2NjzhBt35xbeCU8fehnSkMQ=
Subject key identifier: 15:EB:1C:6D:B8:F2:5E:B4:3D:F2:2E:11:DD:D4:17:38:E2:7C:DB:CB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 171C18484F285631B4FC7B77911C8EC5AA11CE8E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32322e302f32342d3234203d3e20393138.roa
Signing time: Sun 31 Mar 2024 08:50:51 +0000
ROA not before: Sun 31 Mar 2024 08:45:51 +0000
ROA not after: Sun 30 Mar 2025 08:50:51 +0000
asID: 918
IP address blocks: 146.103.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1c:18:48:4f:28:56:31:b4:fc:7b:77:91:1c:8e:c5:aa:11:ce:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 31 08:45:51 2024 GMT
Not After : Mar 30 08:50:51 2025 GMT
Subject: CN=15EB1C6DB8F25EB43DF22E11DDD41738E27CDBCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:58:c4:7e:cc:18:a0:24:4b:52:fb:f2:64:
af:38:6a:af:29:e1:02:a8:69:fc:59:6d:0f:01:08:
b5:ef:84:31:fb:7d:6e:9d:28:81:ef:3e:48:ca:98:
e4:01:22:84:1d:ee:d2:a1:cf:71:53:11:f5:bf:14:
45:b1:b3:90:df:d6:14:84:d5:83:8d:4b:1b:5c:17:
c1:ed:a7:91:83:13:0d:9d:83:60:b3:00:a7:2f:29:
05:75:23:87:72:02:f3:57:fa:b5:74:ba:61:05:6b:
29:0d:90:46:b2:a0:36:7c:4c:61:78:55:5d:fd:2a:
47:cb:36:90:7d:79:c6:77:39:d6:d9:39:2d:67:c8:
84:22:6a:f7:8d:3f:af:48:f5:44:02:38:ba:6a:0f:
e0:3e:90:fd:7c:2c:53:21:f3:d3:00:55:88:ca:3e:
bd:46:3a:03:bf:a1:f4:18:a0:46:2c:b5:4b:9f:02:
8d:0f:56:9f:a3:7e:0b:af:9b:e6:31:98:2e:35:6b:
da:8e:27:ac:86:36:7e:db:d5:02:99:f1:c7:74:e2:
03:9f:32:87:e8:c2:5b:d3:49:8f:c9:2a:9f:06:b6:
b6:2d:54:08:d1:df:a2:fb:ab:70:2b:e5:9f:0e:5d:
9f:7a:8b:9b:9d:44:80:b0:b1:11:18:2c:36:5c:86:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EB:1C:6D:B8:F2:5E:B4:3D:F2:2E:11:DD:D4:17:38:E2:7C:DB:CB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e32322e302f32342d3234203d3e20393138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5b:9d:5f:d5:e9:a0:78:8f:4b:75:4a:58:d6:a4:bb:cf:6e:
ae:d2:02:80:a2:e3:83:c4:f3:37:60:15:37:b2:37:fd:10:98:
67:82:32:15:a3:3e:6e:ca:dc:97:94:2e:c4:ca:ab:01:35:92:
4f:56:de:aa:a4:f5:d9:40:4a:c8:64:b6:69:9d:57:5b:97:28:
fe:6f:a2:aa:52:07:4e:bc:92:1b:97:ce:95:d8:14:30:82:80:
89:f4:e1:e2:5d:98:45:7c:c4:d0:55:53:a4:c5:83:b4:9c:4c:
51:c8:34:14:7c:38:b4:25:1a:7a:d2:63:fd:14:89:c5:77:69:
be:f8:f2:e7:5e:f2:65:20:93:f1:11:c0:4d:da:69:7e:82:66:
d4:a5:05:af:df:89:e3:82:c5:fb:e2:e0:10:f1:d8:9f:3c:95:
17:30:0a:b3:b6:a4:18:ac:5b:f4:4a:75:35:46:02:70:4d:d5:
51:31:d3:3d:b2:3d:0c:33:a4:03:72:9b:df:2c:0c:22:7a:85:
85:f4:08:7a:3c:da:46:44:e6:46:1c:1a:59:c9:d8:16:ec:7e:
09:c6:58:2a:4d:bf:3c:b9:14:79:b9:0e:8f:60:0c:32:b0:77:
57:b6:e1:13:ef:77:94:bc:82:78:14:5b:3e:b1:bc:4f:34:f8:
a5:f2:46:79
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUFxwYSE8oVjG0/Ht3kRyOxaoRzo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAzMzEwODQ1NTFaFw0yNTAzMzAwODUwNTFaMDMxMTAvBgNV
BAMTKDE1RUIxQzZEQjhGMjVFQjQzREYyMkUxMURERDQxNzM4RTI3Q0RCQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6B1jEfswYoCRLUvvyZK84aq8p
4QKoafxZbQ8BCLXvhDH7fW6dKIHvPkjKmOQBIoQd7tKhz3FTEfW/FEWxs5Df1hSE
1YONSxtcF8Htp5GDEw2dg2CzAKcvKQV1I4dyAvNX+rV0umEFaykNkEayoDZ8TGF4
VV39KkfLNpB9ecZ3OdbZOS1nyIQiaveNP69I9UQCOLpqD+A+kP18LFMh89MAVYjK
Pr1GOgO/ofQYoEYstUufAo0PVp+jfguvm+YxmC41a9qOJ6yGNn7b1QKZ8cd04gOf
MofowlvTSY/JKp8GtrYtVAjR36L7q3Ar5Z8OXZ96i5udRICwsREYLDZchvg5AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUFescbbjyXrQ98i4R3dQXOOJ828swHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM2MmUzMTMwMzMyZTMy
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMxMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACSZxYw
DQYJKoZIhvcNAQELBQADggEBAD1bnV/V6aB4j0t1SljWpLvPbq7SAoCi44PE8zdg
FTeyN/0QmGeCMhWjPm7K3JeULsTKqwE1kk9W3qqk9dlASshktmmdV1uXKP5voqpS
B068khuXzpXYFDCCgIn04eJdmEV8xNBVU6TFg7ScTFHINBR8OLQlGnrSY/0UicV3
ab748ude8mUgk/ERwE3aaX6CZtSlBa/fieOCxfvi4BDx2J88lRcwCrO2pBisW/RK
dTVGAnBN1VEx0z2yPQwzpANym98sDCJ6hYX0CHo82kZE5kYcGlnJ2BbsfgnGWCpN
vzy5FHm5Do9gDDKwd1e24RPvd5S8gngUWz6xvE80+KXyRnk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org