Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e302e302f32342d3234203d3e20383334.roa
File: 3134372e37392e302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ELqdmnlKJB9eOfIl8MRdl2DN8zHT5oeaChCsWg4z4Lc=
Subject key identifier: 1F:60:92:C3:A2:9C:50:14:83:3F:E5:A4:E0:5E:92:BB:C2:BD:6F:E9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2261C91C483E15806A6782367DA62FE8180EBBC4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e302e302f32342d3234203d3e20383334.roa
Signing time: Fri 05 Apr 2024 11:02:38 +0000
ROA not before: Fri 05 Apr 2024 10:57:38 +0000
ROA not after: Fri 04 Apr 2025 11:02:38 +0000
asID: 834
IP address blocks: 147.79.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:61:c9:1c:48:3e:15:80:6a:67:82:36:7d:a6:2f:e8:18:0e:bb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 5 10:57:38 2024 GMT
Not After : Apr 4 11:02:38 2025 GMT
Subject: CN=1F6092C3A29C5014833FE5A4E05E92BBC2BD6FE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:39:81:30:1d:9f:09:13:55:d2:5c:b1:f6:
6f:f7:da:4d:e5:08:d8:10:fa:56:a9:7a:5a:b5:1b:
4e:8a:aa:97:6d:be:53:b1:63:64:e8:f3:42:49:cc:
d6:24:e0:c9:19:6c:25:91:78:24:5c:9b:36:bd:ff:
c9:ef:6b:bf:e1:0a:10:ba:cb:f5:d5:13:05:18:4b:
69:24:9c:8e:4d:a1:58:0d:ab:05:05:1f:dd:ee:f7:
91:7e:3f:b4:79:3d:10:db:48:64:3f:d4:c7:66:5a:
e5:7f:10:db:75:1d:04:6e:46:c4:9c:7c:da:6a:1f:
24:5f:07:2c:6d:13:3f:a1:59:20:69:b2:93:89:a1:
bb:19:4c:ba:a6:a5:1b:1c:4a:2c:ca:49:11:ac:61:
ed:ab:9d:11:f1:18:09:f4:3a:85:23:1f:57:99:83:
13:87:4d:84:91:2c:f0:fc:aa:0a:2f:57:9b:72:dc:
5a:15:60:b2:1e:61:b7:37:fb:36:10:66:5d:9f:d5:
90:1b:f0:fd:74:a2:f5:49:e5:11:3c:3c:c1:d2:78:
0d:a5:8b:75:d4:7a:56:4e:76:35:01:63:e4:ba:df:
ff:70:d1:22:2b:4e:ea:4e:d0:10:a0:b1:a5:8d:3b:
64:bc:51:ca:92:5d:7f:2e:e5:e1:30:13:2a:46:04:
c0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:60:92:C3:A2:9C:50:14:83:3F:E5:A4:E0:5E:92:BB:C2:BD:6F:E9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c8:50:d0:df:a1:3d:8e:1c:88:43:6b:30:9c:fa:95:a7:d2:
bb:5c:cd:66:43:23:e5:3f:68:3b:61:76:ea:bc:53:e0:0a:c3:
ca:ea:9e:93:ae:8d:bd:d9:81:98:5d:f3:0f:c0:94:d9:bf:c1:
a8:72:83:aa:08:96:53:e1:e7:2e:52:03:c0:a4:bb:87:ad:be:
7f:76:31:2a:d5:66:72:41:7b:7e:a0:7f:8c:2f:6e:43:39:c7:
9c:3c:8f:c4:cc:0f:01:f7:4d:c8:6a:ed:46:b2:47:a4:f8:ff:
49:02:a1:d2:f6:c3:57:e6:12:80:61:14:6c:49:c7:c2:b7:dd:
89:5a:0f:3b:21:19:e2:d1:cf:27:55:e7:d3:8e:ff:b6:5f:cf:
2c:73:c7:19:0f:b9:51:b2:06:cd:ba:42:58:7e:5c:90:94:ed:
8e:e3:46:88:b2:18:64:6f:26:4e:b7:8d:f9:8e:71:16:0f:6b:
b2:2d:74:fd:f7:65:da:74:19:13:15:e6:0d:2d:28:71:db:b6:
e8:d1:5a:08:a5:a1:37:2f:10:52:2c:92:53:71:b4:31:5c:aa:
da:b5:8f:68:b9:d2:84:05:b7:54:9e:2e:12:d2:24:96:29:ec:
19:68:a1:04:67:23:af:c6:79:e9:26:3c:04:cf:70:5f:4d:bf:
b7:86:9c:c1
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUImHJHEg+FYBqZ4I2faYv6BgOu8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA0MDUxMDU3MzhaFw0yNTA0MDQxMTAyMzhaMDMxMTAvBgNV
BAMTKDFGNjA5MkMzQTI5QzUwMTQ4MzNGRTVBNEUwNUU5MkJCQzJCRDZGRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEjmBMB2fCRNV0lyx9m/32k3l
CNgQ+lapelq1G06KqpdtvlOxY2To80JJzNYk4MkZbCWReCRcmza9/8nva7/hChC6
y/XVEwUYS2kknI5NoVgNqwUFH93u95F+P7R5PRDbSGQ/1MdmWuV/ENt1HQRuRsSc
fNpqHyRfByxtEz+hWSBpspOJobsZTLqmpRscSizKSRGsYe2rnRHxGAn0OoUjH1eZ
gxOHTYSRLPD8qgovV5ty3FoVYLIeYbc3+zYQZl2f1ZAb8P10ovVJ5RE8PMHSeA2l
i3XUelZOdjUBY+S63/9w0SIrTupO0BCgsaWNO2S8UcqSXX8u5eEwEypGBMChAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUH2CSw6KcUBSDP+Wk4F6Su8K9b+kwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM3MmUzNzM5MmUzMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJNPADANBgkq
hkiG9w0BAQsFAAOCAQEATMhQ0N+hPY4ciENrMJz6lafSu1zNZkMj5T9oO2F26rxT
4ArDyuqek66NvdmBmF3zD8CU2b/BqHKDqgiWU+HnLlIDwKS7h62+f3YxKtVmckF7
fqB/jC9uQznHnDyPxMwPAfdNyGrtRrJHpPj/SQKh0vbDV+YSgGEUbEnHwrfdiVoP
OyEZ4tHPJ1Xn047/tl/PLHPHGQ+5UbIGzbpCWH5ckJTtjuNGiLIYZG8mTreN+Y5x
Fg9rsi10/fdl2nQZExXmDS0ocdu26NFaCKWhNy8QUiySU3G0MVyq2rWPaLnShAW3
VJ4uEtIklinsGWihBGcjr8Z56SY8BM9wX02/t4acwQ==
-----END CERTIFICATE-----
Generated at Sat Apr 6 12:13:37 2024 by rpki-client on console-fra.rpki-client.org