Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e342e302f32322d3232203d3e20313734.roa
File: 3134362e3130332e342e302f32322d3232203d3e20313734.roa (raw, json)
Hash identifier: WxSrRpQ6kH7aRa04bEki1fAFseNxLs41MDkSuEo23M4=
Subject key identifier: 80:1F:A2:60:07:E7:9B:33:7D:BD:B6:1D:30:67:88:8F:9B:C7:9B:93
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3B756635D37B643A3628B25FE63412290DF7C2E4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e342e302f32322d3232203d3e20313734.roa
Signing time: Fri 15 Mar 2024 11:04:59 +0000
ROA not before: Fri 15 Mar 2024 10:59:59 +0000
ROA not after: Fri 14 Mar 2025 11:04:59 +0000
asID: 174
IP address blocks: 146.103.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:75:66:35:d3:7b:64:3a:36:28:b2:5f:e6:34:12:29:0d:f7:c2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 15 10:59:59 2024 GMT
Not After : Mar 14 11:04:59 2025 GMT
Subject: CN=801FA26007E79B337DBDB61D3067888F9BC79B93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:d6:e0:fa:16:aa:2d:a9:8d:79:09:11:81:
b5:ff:d0:ef:35:a3:42:68:8d:ea:84:a6:98:d7:03:
d3:20:23:6f:59:c2:80:67:94:cb:48:b7:09:b3:2e:
74:ba:f8:b0:94:a0:d0:b3:91:2f:82:7b:cb:7a:79:
01:9b:b0:d3:ba:3e:c9:2a:0d:59:c3:c6:6f:6b:a2:
37:ab:c3:77:2a:92:79:be:3c:d1:a5:86:bd:76:63:
86:03:79:b1:66:da:b2:3b:c0:e7:6b:61:c0:3a:fc:
0a:ac:d3:df:bf:25:cf:51:c5:11:8f:eb:b8:1a:f0:
22:ad:ed:fa:fb:bc:73:a3:f4:b8:f1:da:44:02:f0:
e6:3e:ee:2f:30:80:62:b5:33:71:83:5f:42:7a:fb:
39:f0:4d:bb:84:0f:12:cb:6a:d3:fc:e4:1d:c7:40:
23:dc:d7:e7:22:6a:d6:24:c3:ec:c4:cc:78:12:a6:
f0:cd:e8:03:cc:cc:99:98:32:9c:a0:02:80:8b:b3:
c4:8b:6a:e7:e0:23:78:78:34:6c:9b:72:6a:71:27:
bc:2c:a2:f6:01:89:3f:ec:89:76:67:2a:8c:26:fe:
9f:68:f0:53:4e:6b:11:3f:88:62:71:d7:96:de:71:
ea:d7:37:81:4a:97:b7:12:54:36:06:87:85:8f:6d:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1F:A2:60:07:E7:9B:33:7D:BD:B6:1D:30:67:88:8F:9B:C7:9B:93
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e342e302f32322d3232203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.4.0/22
Signature Algorithm: sha256WithRSAEncryption
96:99:47:ca:0f:5e:7e:cf:00:e8:cc:b3:80:61:2e:0a:78:ce:
6f:62:50:56:d0:71:48:2e:aa:46:94:f3:38:49:f6:5e:c0:0e:
88:d8:3a:f7:bd:a5:52:86:9f:b3:1e:26:5d:30:97:0d:5e:3a:
ac:44:a7:8e:be:ba:ab:8d:50:24:04:08:12:8c:53:06:cf:97:
8d:8c:5f:6f:f6:bd:b0:a7:f1:87:f0:6f:0e:16:04:78:ef:de:
d9:65:b1:b1:5e:79:c2:ea:dc:ba:6f:8e:ca:c8:af:99:24:83:
2d:15:d4:b0:a4:8c:e2:1f:63:63:62:eb:28:35:e9:66:96:52:
89:f6:d3:6e:6c:3f:e1:44:7a:53:2b:93:5a:47:30:54:fb:a7:
35:98:d2:07:e7:20:16:22:9f:25:eb:86:b8:62:fb:b6:d7:71:
80:13:ee:a0:2b:c9:fb:5f:c6:52:b5:fe:cf:a5:29:2f:df:1a:
a7:7c:f9:c5:cc:02:f4:a9:f9:19:03:81:c2:21:12:a8:40:d5:
53:32:54:e6:b1:59:fc:a7:6d:ce:34:a2:9d:29:29:7a:45:0e:
88:3f:fc:dd:06:ab:29:59:dd:ba:90:28:42:79:02:2f:30:b8:
e7:0b:1e:17:91:dd:a5:61:98:9e:9f:6c:e0:7c:ab:71:de:88:
1b:d9:6f:3d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUO3VmNdN7ZDo2KLJf5jQSKQ33wuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAzMTUxMDU5NTlaFw0yNTAzMTQxMTA0NTlaMDMxMTAvBgNV
BAMTKDgwMUZBMjYwMDdFNzlCMzM3REJEQjYxRDMwNjc4ODhGOUJDNzlCOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3r9bg+haqLamNeQkRgbX/0O81
o0JojeqEppjXA9MgI29ZwoBnlMtItwmzLnS6+LCUoNCzkS+Ce8t6eQGbsNO6Pskq
DVnDxm9rojerw3cqknm+PNGlhr12Y4YDebFm2rI7wOdrYcA6/Aqs09+/Jc9RxRGP
67ga8CKt7fr7vHOj9Ljx2kQC8OY+7i8wgGK1M3GDX0J6+znwTbuEDxLLatP85B3H
QCPc1+ciatYkw+zEzHgSpvDN6APMzJmYMpygAoCLs8SLaufgI3h4NGybcmpxJ7ws
ovYBiT/siXZnKowm/p9o8FNOaxE/iGJx15becerXN4FKl7cSVDYGh4WPbZlPAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUgB+iYAfnmzN9vbYdMGeIj5vHm5MwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM2MmUzMTMwMzMyZTM0
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkmcEMA0G
CSqGSIb3DQEBCwUAA4IBAQCWmUfKD15+zwDozLOAYS4KeM5vYlBW0HFILqpGlPM4
SfZewA6I2Dr3vaVShp+zHiZdMJcNXjqsRKeOvrqrjVAkBAgSjFMGz5eNjF9v9r2w
p/GH8G8OFgR4797ZZbGxXnnC6ty6b47KyK+ZJIMtFdSwpIziH2NjYusoNelmllKJ
9tNubD/hRHpTK5NaRzBU+6c1mNIH5yAWIp8l64a4Yvu213GAE+6gK8n7X8ZStf7P
pSkv3xqnfPnFzAL0qfkZA4HCIRKoQNVTMlTmsVn8p23ONKKdKSl6RQ6IP/zdBqsp
Wd26kChCeQIvMLjnCx4Xkd2lYZien2zgfKtx3ogb2W89
-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org