Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e3131322e302f32302d3234203d3e20383334.roa
File: 3134372e37392e3131322e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: ThbEMRTj5tj+A+dLn1F1VN9szODQRCuidvoCBuIq+Qg=
Subject key identifier: 4F:9B:69:F6:BB:38:21:59:47:87:72:75:4C:B1:CE:6B:B5:C7:F7:A3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 521A6E36CB6FD2BA4249364838D08A558BDCCFCE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e3131322e302f32302d3234203d3e20383334.roa
Signing time: Thu 14 Mar 2024 07:36:58 +0000
ROA not before: Thu 14 Mar 2024 07:31:58 +0000
ROA not after: Thu 13 Mar 2025 07:36:58 +0000
asID: 834
IP address blocks: 147.79.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 23:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1a:6e:36:cb:6f:d2:ba:42:49:36:48:38:d0:8a:55:8b:dc:cf:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 14 07:31:58 2024 GMT
Not After : Mar 13 07:36:58 2025 GMT
Subject: CN=4F9B69F6BB382159478772754CB1CE6BB5C7F7A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:52:a1:c4:c2:62:b2:9a:27:fa:59:15:b4:
06:36:87:57:d2:96:d9:2e:bf:d0:51:83:f2:f1:05:
db:16:24:13:23:7d:23:2d:6e:84:e1:6d:da:be:f8:
eb:15:5f:fc:70:2b:63:56:7a:9b:43:67:3d:22:47:
12:da:da:65:55:53:9b:b0:30:02:e2:82:fe:aa:d2:
ec:c9:f2:e2:3c:15:db:2c:c1:80:98:2a:43:58:ea:
40:7b:cd:42:2e:f0:0c:6d:25:8d:e3:3d:d4:12:57:
ba:51:d6:5c:18:b3:bc:db:e5:cf:5f:ab:87:b4:3e:
d6:df:ea:a8:55:aa:c0:06:24:b3:41:8f:f2:18:e4:
1f:92:84:7f:a8:6e:67:97:05:1f:83:6e:9e:b6:1a:
f4:f8:1a:d3:90:9d:e9:35:64:47:b3:51:67:97:0b:
bc:2a:d0:e7:38:a4:2d:43:da:85:44:7c:50:96:c0:
c3:aa:a5:9b:ab:b1:d7:f1:50:48:d3:25:4d:26:bb:
bf:f2:d7:20:bf:19:d1:da:c3:3c:a5:6b:23:c1:26:
f2:fd:0d:f1:b4:9b:c8:d1:d7:0f:68:94:40:9a:13:
b1:2c:38:27:0a:dd:9c:a8:fe:11:7f:31:1f:01:00:
9c:fe:d7:ae:22:32:1f:d6:c7:cf:6c:2c:01:81:33:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:69:F6:BB:38:21:59:47:87:72:75:4C:B1:CE:6B:B5:C7:F7:A3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e3131322e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.112.0/20
Signature Algorithm: sha256WithRSAEncryption
97:5a:23:10:04:54:fc:92:f4:81:6a:09:f7:8a:12:e0:dc:0c:
ad:69:4f:7f:b0:39:70:57:fd:e9:78:d7:9e:fe:de:54:1c:6c:
0c:e7:b1:40:14:b2:a8:d5:b8:4e:07:17:98:47:5c:d0:10:c8:
ca:68:b2:63:92:83:26:85:2e:e6:34:92:f3:c7:2e:47:06:a1:
42:82:b6:a0:30:76:8d:b1:e5:2a:8e:9c:59:03:80:04:e1:d7:
30:3a:27:5f:5a:11:b9:a1:62:a3:31:ce:e5:b8:2f:2f:02:5f:
23:e0:ae:6c:0d:be:50:fb:00:0c:af:a7:9f:7d:e6:e8:77:ff:
cc:f7:e7:67:ea:f3:c8:72:04:77:3e:4d:16:7a:2d:98:4a:6a:
f9:d9:ef:45:85:2f:31:45:54:08:7a:30:15:b6:41:f2:ae:56:
d1:5a:0c:14:34:2a:a0:7d:56:85:92:42:b2:b1:8a:62:9e:06:
f7:62:0b:92:bd:8a:00:f9:10:95:32:a1:03:f0:71:b4:b9:a8:
45:f6:75:61:78:c9:c8:0b:68:55:fe:bc:65:a3:9f:e6:5c:15:
c7:54:10:1f:ff:fc:93:4f:92:1e:d0:53:c7:64:1b:81:29:53:
5d:0c:63:51:50:8b:c9:ca:bb:33:46:57:40:bb:f0:b0:04:e5:
a8:96:65:21
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUUhpuNstv0rpCSTZIONCKVYvcz84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAzMTQwNzMxNThaFw0yNTAzMTMwNzM2NThaMDMxMTAvBgNV
BAMTKDRGOUI2OUY2QkIzODIxNTk0Nzg3NzI3NTRDQjFDRTZCQjVDN0Y3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQOlKhxMJispon+lkVtAY2h1fS
ltkuv9BRg/LxBdsWJBMjfSMtboThbdq++OsVX/xwK2NWeptDZz0iRxLa2mVVU5uw
MALigv6q0uzJ8uI8FdsswYCYKkNY6kB7zUIu8AxtJY3jPdQSV7pR1lwYs7zb5c9f
q4e0Ptbf6qhVqsAGJLNBj/IY5B+ShH+obmeXBR+Dbp62GvT4GtOQnek1ZEezUWeX
C7wq0Oc4pC1D2oVEfFCWwMOqpZursdfxUEjTJU0mu7/y1yC/GdHawzylayPBJvL9
DfG0m8jR1w9olECaE7EsOCcK3Zyo/hF/MR8BAJz+164iMh/Wx89sLAGBM411AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUT5tp9rs4IVlHh3J1TLHOa7XH96MwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM3MmUzNzM5MmUzMTMx
MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASTT3Aw
DQYJKoZIhvcNAQELBQADggEBAJdaIxAEVPyS9IFqCfeKEuDcDK1pT3+wOXBX/el4
157+3lQcbAznsUAUsqjVuE4HF5hHXNAQyMposmOSgyaFLuY0kvPHLkcGoUKCtqAw
do2x5SqOnFkDgATh1zA6J19aEbmhYqMxzuW4Ly8CXyPgrmwNvlD7AAyvp5995uh3
/8z352fq88hyBHc+TRZ6LZhKavnZ70WFLzFFVAh6MBW2QfKuVtFaDBQ0KqB9VoWS
QrKximKeBvdiC5K9igD5EJUyoQPwcbS5qEX2dWF4ycgLaFX+vGWjn+ZcFcdUEB//
/JNPkh7QU8dkG4EpU10MY1FQi8nKuzNGV0C78LAE5aiWZSE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org