Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34372e302f32342d3234203d3e20383334.roa
File: 3134362e3130332e34372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 26X2OSTlyFNf/60JV9oFtr5o9Zh0oDY6uBUqt0uS658=
Subject key identifier: 9F:04:C6:F9:7C:D6:49:AD:0E:24:1C:D1:61:4C:B5:CD:DB:88:90:BE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2A24BD872DA0B6F0472567798566B9E99B85F288
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34372e302f32342d3234203d3e20383334.roa
Signing time: Wed 03 Apr 2024 16:15:49 +0000
ROA not before: Wed 03 Apr 2024 16:10:49 +0000
ROA not after: Wed 02 Apr 2025 16:15:49 +0000
asID: 834
IP address blocks: 146.103.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:24:bd:87:2d:a0:b6:f0:47:25:67:79:85:66:b9:e9:9b:85:f2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 3 16:10:49 2024 GMT
Not After : Apr 2 16:15:49 2025 GMT
Subject: CN=9F04C6F97CD649AD0E241CD1614CB5CDDB8890BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:f6:fc:a8:f2:4b:75:36:3a:ce:6e:33:58:
4d:1b:70:90:04:f6:e3:a2:29:4c:e3:48:52:7c:07:
4e:24:34:a8:1f:52:e1:8e:ae:6f:a3:f7:d0:d0:49:
d2:49:19:6a:96:43:89:e3:9a:e8:a8:58:49:97:76:
09:ec:41:0d:5a:9a:a4:f7:03:85:48:d7:f7:e3:17:
0c:67:18:55:75:94:3a:00:0e:22:4d:7f:50:54:47:
89:25:b3:90:31:6e:96:63:55:aa:55:d9:dd:bc:5e:
3b:c5:bc:18:f1:4b:63:ec:81:27:e0:56:3e:38:0f:
d4:09:e4:e8:1f:54:7a:4e:ab:01:f4:6d:f1:db:b1:
0c:b1:80:33:be:c6:bb:94:87:c9:43:fd:e3:34:a4:
da:f0:ea:b8:a7:41:83:ae:6f:04:92:81:80:51:57:
77:d1:aa:b6:b4:bc:8c:70:50:d8:3c:7d:99:64:6f:
25:20:fe:c5:46:4c:3b:bf:02:37:7a:c8:9e:cc:10:
07:4d:05:12:12:f7:0e:47:7e:86:bc:79:67:e5:25:
d5:9c:ad:20:ec:e6:50:7c:6f:ab:48:8e:27:fc:a8:
e3:f5:d7:a9:c0:3f:c2:3f:4d:d6:72:c1:53:0e:fd:
70:0b:71:1b:fa:16:a7:74:a7:b0:a5:1e:3e:be:b7:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:C6:F9:7C:D6:49:AD:0E:24:1C:D1:61:4C:B5:CD:DB:88:90:BE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.47.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cf:db:51:82:d7:c3:04:43:4e:7e:dd:0b:6c:74:f2:d8:f7:
bb:77:63:ce:ec:01:d5:c1:77:68:1c:aa:fc:d7:0d:8d:16:1a:
6e:da:5e:07:06:d0:4e:15:d0:6d:8f:d4:f7:e4:52:b0:a7:8b:
04:10:0b:ae:a2:7e:40:60:d3:19:eb:ae:27:c1:e9:7a:63:e6:
bc:e4:bb:70:ae:aa:97:49:a0:f4:0a:df:2e:63:95:2b:eb:65:
b3:87:2b:9e:ed:a1:65:7d:de:d3:f8:04:08:32:e9:5d:b8:fc:
2b:bf:1b:22:e3:ec:17:75:50:4a:42:a1:da:56:6a:f4:e5:3c:
4b:8b:64:05:08:67:c5:2a:62:57:ac:f8:23:1e:8d:b7:fa:3f:
43:05:28:d3:d0:09:62:e0:20:33:89:2d:eb:39:3f:a7:32:59:
23:bd:31:61:1d:c3:57:34:35:77:5b:80:5d:47:d3:4c:51:d1:
ba:9c:53:44:27:c2:58:48:3a:89:d0:1e:91:a0:92:0d:55:1a:
d0:3f:71:0b:5e:83:5e:25:b6:94:fc:ce:b5:fe:59:a0:d5:db:
d0:0a:e1:7c:be:05:ee:ff:38:b0:db:e2:73:ee:e9:e3:c8:16:
b5:95:f1:30:65:8c:f9:41:81:cb:de:e4:99:a3:d9:7f:5f:29:
03:de:c5:03
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUKiS9hy2gtvBHJWd5hWa56ZuF8ogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA0MDMxNjEwNDlaFw0yNTA0MDIxNjE1NDlaMDMxMTAvBgNV
BAMTKDlGMDRDNkY5N0NENjQ5QUQwRTI0MUNEMTYxNENCNUNEREI4ODkwQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXlPb8qPJLdTY6zm4zWE0bcJAE
9uOiKUzjSFJ8B04kNKgfUuGOrm+j99DQSdJJGWqWQ4njmuioWEmXdgnsQQ1amqT3
A4VI1/fjFwxnGFV1lDoADiJNf1BUR4kls5AxbpZjVapV2d28XjvFvBjxS2PsgSfg
Vj44D9QJ5OgfVHpOqwH0bfHbsQyxgDO+xruUh8lD/eM0pNrw6rinQYOubwSSgYBR
V3fRqra0vIxwUNg8fZlkbyUg/sVGTDu/Ajd6yJ7MEAdNBRIS9w5Hfoa8eWflJdWc
rSDs5lB8b6tIjif8qOP116nAP8I/TdZywVMO/XALcRv6Fqd0p7ClHj6+t9PHAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUnwTG+XzWSa0OJBzRYUy1zduIkL4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM2MmUzMTMwMzMyZTM0
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACSZy8w
DQYJKoZIhvcNAQELBQADggEBAATP21GC18MEQ05+3QtsdPLY97t3Y87sAdXBd2gc
qvzXDY0WGm7aXgcG0E4V0G2P1PfkUrCniwQQC66ifkBg0xnrrifB6Xpj5rzku3Cu
qpdJoPQK3y5jlSvrZbOHK57toWV93tP4BAgy6V24/Cu/GyLj7Bd1UEpCodpWavTl
PEuLZAUIZ8UqYles+CMejbf6P0MFKNPQCWLgIDOJLes5P6cyWSO9MWEdw1c0NXdb
gF1H00xR0bqcU0QnwlhIOonQHpGgkg1VGtA/cQteg14ltpT8zrX+WaDV29AK4Xy+
Be7/OLDb4nPu6ePIFrWV8TBljPlBgcve5Jmj2X9fKQPexQM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org