Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34382e302f32312d3234203d3e2035303635.roa
File: 3134362e3130332e34382e302f32312d3234203d3e2035303635.roa (raw, json)
Hash identifier: wuI0YlC1X/mThx7+D6rShYepOPwrrPEoenfEZOrGDYA=
Subject key identifier: 5C:AB:0E:C8:CC:25:33:A6:AB:05:47:D0:25:1E:18:2E:02:2D:27:D4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1AAC2F4ADC1EE23AE197D4959807FFC2D29B93BC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34382e302f32312d3234203d3e2035303635.roa
Signing time: Tue 26 Mar 2024 10:15:17 +0000
ROA not before: Tue 26 Mar 2024 10:10:17 +0000
ROA not after: Tue 25 Mar 2025 10:15:17 +0000
asID: 5065
IP address blocks: 146.103.48.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ac:2f:4a:dc:1e:e2:3a:e1:97:d4:95:98:07:ff:c2:d2:9b:93:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 26 10:10:17 2024 GMT
Not After : Mar 25 10:15:17 2025 GMT
Subject: CN=5CAB0EC8CC2533A6AB0547D0251E182E022D27D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4c:fa:bd:37:11:7f:df:81:af:c1:c5:1e:2b:
b4:83:25:33:88:49:a3:c5:cb:e8:bf:65:e4:1f:d0:
87:31:0a:a1:8c:25:c9:ae:c1:3c:5f:00:ab:76:bc:
50:80:87:a5:3a:9a:c3:1e:49:bf:6d:fa:8b:99:19:
f4:5a:47:6c:3c:49:96:f7:41:33:02:45:7d:63:f5:
4f:ab:6c:c8:13:18:9c:c4:e6:4f:0c:de:90:de:ea:
c3:43:53:e3:61:e5:41:98:65:94:20:56:75:ba:75:
a9:6b:ee:01:3f:6e:b0:10:7a:9a:d5:50:be:88:85:
92:0b:f6:75:9b:83:dd:f7:1a:94:cd:22:ac:88:49:
ce:49:05:19:87:ae:c0:38:84:d4:c5:60:29:2d:ea:
cf:d7:d8:8a:4a:30:d3:18:a8:f1:a2:a4:02:01:3d:
99:57:d4:70:41:df:5a:a9:7e:a8:dd:a7:08:d8:6a:
15:46:6c:7b:d0:1a:21:26:6e:0b:e1:7e:be:6b:90:
67:3e:c6:1c:05:d0:00:12:d4:dc:76:17:23:40:af:
a2:0b:4a:7e:02:61:04:0e:4f:e3:ef:ad:c2:4a:a6:
ac:5c:42:fa:78:d6:26:e5:98:d6:dc:52:19:3a:1d:
c4:d1:f3:11:88:7e:e9:ee:33:aa:b9:3e:6a:0a:86:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AB:0E:C8:CC:25:33:A6:AB:05:47:D0:25:1E:18:2E:02:2D:27:D4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134362e3130332e34382e302f32312d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.48.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:47:37:1e:d0:f9:69:84:7e:9f:d1:ad:6b:66:7d:a1:cb:65:
f4:93:cf:59:26:37:76:f0:65:ae:0d:64:e4:19:b8:11:39:27:
11:27:c9:76:d5:8b:4f:9b:aa:8f:de:d6:36:d2:28:93:7f:c8:
f9:4b:63:71:3c:dd:5f:8d:95:fc:11:f5:11:b4:2a:6e:b3:d5:
c4:e3:ca:c9:14:0a:64:ed:76:9a:61:e5:97:4d:88:b9:9d:09:
7b:9a:f5:00:c0:da:86:fb:7f:23:52:c9:20:eb:e1:3c:af:fc:
1f:96:35:63:ff:90:f3:d1:08:ae:d1:25:d9:5e:09:ce:d6:70:
38:0d:35:c3:97:66:c8:fc:f0:8e:48:96:ff:af:10:51:78:de:
d3:66:bc:65:c6:95:64:8a:cc:93:a1:94:93:de:ff:a4:fc:63:
9e:e8:79:c9:0f:a8:a4:37:ad:35:2e:eb:39:c5:04:0a:0c:78:
0a:22:06:8a:36:5a:e0:c3:44:87:92:64:d2:6c:d1:e4:e8:20:
2d:01:0d:2f:eb:8b:5f:4e:44:59:0a:d8:22:ea:3f:95:af:db:
76:c4:9e:4c:e3:73:d5:19:13:79:60:74:a6:d1:3b:95:33:0c:
83:a7:49:a0:05:70:c0:6b:28:de:da:71:f4:31:4f:27:67:5d:
79:45:cc:a1
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGqwvStwe4jrhl9SVmAf/wtKbk7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAzMjYxMDEwMTdaFw0yNTAzMjUxMDE1MTdaMDMxMTAvBgNV
BAMTKDVDQUIwRUM4Q0MyNTMzQTZBQjA1NDdEMDI1MUUxODJFMDIyRDI3RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjTPq9NxF/34GvwcUeK7SDJTOI
SaPFy+i/ZeQf0IcxCqGMJcmuwTxfAKt2vFCAh6U6msMeSb9t+ouZGfRaR2w8SZb3
QTMCRX1j9U+rbMgTGJzE5k8M3pDe6sNDU+Nh5UGYZZQgVnW6dalr7gE/brAQeprV
UL6IhZIL9nWbg933GpTNIqyISc5JBRmHrsA4hNTFYCkt6s/X2IpKMNMYqPGipAIB
PZlX1HBB31qpfqjdpwjYahVGbHvQGiEmbgvhfr5rkGc+xhwF0AAS1Nx2FyNAr6IL
Sn4CYQQOT+PvrcJKpqxcQvp41iblmNbcUhk6HcTR8xGIfunuM6q5PmoKhjDxAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUXKsOyMwlM6arBUfQJR4YLgItJ9QwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM2MmUzMTMwMzMyZTM0
MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMwMzYzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5Jn
MDANBgkqhkiG9w0BAQsFAAOCAQEADEc3HtD5aYR+n9Gta2Z9octl9JPPWSY3dvBl
rg1k5Bm4ETknESfJdtWLT5uqj97WNtIok3/I+UtjcTzdX42V/BH1EbQqbrPVxOPK
yRQKZO12mmHll02IuZ0Je5r1AMDahvt/I1LJIOvhPK/8H5Y1Y/+Q89EIrtEl2V4J
ztZwOA01w5dmyPzwjkiW/68QUXje02a8ZcaVZIrMk6GUk97/pPxjnuh5yQ+opDet
NS7rOcUECgx4CiIGijZa4MNEh5Jk0mzR5OggLQENL+uLX05EWQrYIuo/la/bdsSe
TONz1RkTeWB0ptE7lTMMg6dJoAVwwGso3tpx9DFPJ2ddeUXMoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org