Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e32312e302f32342d3234203d3e20383334.roa
File: 3134372e37392e32312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: kKYnFeTn05DzDxkfNbq1W/Y4I5TugXQpY4sexnrN14o=
Subject key identifier: 9C:87:0E:AC:5A:90:26:B7:04:24:BC:F0:71:F7:21:4B:4E:5E:77:F1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1B1F07103B46E5187ABDFF667BC731B37F70080F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e32312e302f32342d3234203d3e20383334.roa
Signing time: Thu 04 Apr 2024 15:02:23 +0000
ROA not before: Thu 04 Apr 2024 14:57:23 +0000
ROA not after: Thu 03 Apr 2025 15:02:23 +0000
asID: 834
IP address blocks: 147.79.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:1f:07:10:3b:46:e5:18:7a:bd:ff:66:7b:c7:31:b3:7f:70:08:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 4 14:57:23 2024 GMT
Not After : Apr 3 15:02:23 2025 GMT
Subject: CN=9C870EAC5A9026B70424BCF071F7214B4E5E77F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:3c:4c:07:fe:45:c3:ab:3a:f7:12:c3:99:
9b:47:3e:10:f5:d6:b0:ce:9d:7c:75:41:64:0a:9f:
84:c2:00:b6:04:c6:9f:20:31:64:95:8f:88:40:9b:
ac:7e:11:d2:c9:eb:9f:f9:a0:2e:f4:e9:3e:09:2c:
d0:e8:bd:42:7c:a2:ec:84:31:a5:ea:7f:45:44:1c:
41:cf:cb:91:57:3d:13:7f:72:c5:82:95:ca:f1:96:
eb:e7:cb:56:13:cf:7c:24:9e:17:05:16:97:a4:e7:
6a:fd:d9:96:4c:f2:65:86:ed:b2:f7:34:c5:39:6f:
94:ff:ff:a4:05:44:bb:2a:89:b0:a5:fe:ee:c2:86:
b3:eb:ac:99:b5:1a:c5:34:f5:bc:62:73:2d:be:74:
12:7f:d5:3c:0d:4e:0d:a8:23:d2:09:3d:18:a8:b9:
cb:7f:23:f4:47:77:9e:4d:a0:fc:cc:ed:34:d8:93:
ea:24:20:6c:bb:5e:b6:24:44:ef:b3:68:f4:09:58:
0d:2e:70:16:94:26:06:e3:ba:3b:93:87:61:a1:48:
5a:84:f4:d2:54:e3:2b:12:26:9f:63:73:4b:96:47:
6d:db:82:12:09:7d:49:80:64:2c:93:a8:ac:e4:f5:
f1:56:ec:a2:37:78:79:bd:e9:8f:2e:94:33:49:52:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:0E:AC:5A:90:26:B7:04:24:BC:F0:71:F7:21:4B:4E:5E:77:F1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e32312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f0:1d:8c:95:ab:56:84:05:37:af:bc:ac:07:40:ab:64:61:
2d:81:91:76:d4:aa:77:7a:88:03:9b:b2:e1:8c:08:c1:9b:bf:
56:29:97:da:52:f0:25:f0:a0:21:2c:7e:f9:42:18:b4:b9:e6:
ef:94:15:f2:41:5d:a2:89:90:68:9a:c6:93:13:a7:58:a4:18:
76:16:ee:6d:eb:c1:cb:a3:fb:54:b7:aa:c7:7b:7e:da:35:09:
c1:f3:21:de:6e:43:47:06:97:bc:d9:a0:29:8b:ac:43:9a:c6:
48:b9:e1:24:b1:e0:7d:30:32:1a:71:b7:fe:ee:4c:5c:64:78:
6d:01:f1:c0:34:85:1c:95:45:cb:0c:8a:d5:a6:44:02:17:90:
3f:e9:9a:b5:65:9c:f0:25:2b:27:c9:b2:55:ba:ed:4e:1f:25:
4b:21:ed:1e:aa:bc:71:1a:6d:e2:b7:e9:12:14:fc:b8:c2:3e:
45:8a:5b:36:ac:29:c7:6b:df:7f:9a:af:b8:e1:e0:6c:5c:0a:
e8:3b:4d:9b:09:90:4d:44:4d:a5:ac:2d:1f:2c:fb:a0:e9:e8:
2e:5a:44:e4:5a:9a:e5:67:53:61:39:9a:98:57:48:9a:34:23:
2c:b6:8b:ee:06:9a:46:59:8f:9e:ef:40:61:78:9b:09:38:04:
f1:53:60:6e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUGx8HEDtG5Rh6vf9me8cxs39wCA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA0MDQxNDU3MjNaFw0yNTA0MDMxNTAyMjNaMDMxMTAvBgNV
BAMTKDlDODcwRUFDNUE5MDI2QjcwNDI0QkNGMDcxRjcyMTRCNEU1RTc3RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+zxMB/5Fw6s69xLDmZtHPhD1
1rDOnXx1QWQKn4TCALYExp8gMWSVj4hAm6x+EdLJ65/5oC706T4JLNDovUJ8ouyE
MaXqf0VEHEHPy5FXPRN/csWClcrxluvny1YTz3wknhcFFpek52r92ZZM8mWG7bL3
NMU5b5T//6QFRLsqibCl/u7ChrPrrJm1GsU09bxicy2+dBJ/1TwNTg2oI9IJPRio
uct/I/RHd55NoPzM7TTYk+okIGy7XrYkRO+zaPQJWA0ucBaUJgbjujuTh2GhSFqE
9NJU4ysSJp9jc0uWR23bghIJfUmAZCyTqKzk9fFW7KI3eHm96Y8ulDNJUhlHAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUnIcOrFqQJrcEJLzwcfchS05ed/EwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM3MmUzNzM5MmUzMjMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk08VMA0G
CSqGSIb3DQEBCwUAA4IBAQB/8B2MlatWhAU3r7ysB0CrZGEtgZF21Kp3eogDm7Lh
jAjBm79WKZfaUvAl8KAhLH75Qhi0uebvlBXyQV2iiZBomsaTE6dYpBh2Fu5t68HL
o/tUt6rHe37aNQnB8yHebkNHBpe82aApi6xDmsZIueEkseB9MDIacbf+7kxcZHht
AfHANIUclUXLDIrVpkQCF5A/6Zq1ZZzwJSsnybJVuu1OHyVLIe0eqrxxGm3it+kS
FPy4wj5Fils2rCnHa99/mq+44eBsXAroO02bCZBNRE2lrC0fLPug6eguWkTkWprl
Z1NhOZqYV0iaNCMstovuBppGWY+e70BheJsJOATxU2Bu
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org