Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e32342e302f32322d3232203d3e20313734.roa
File: 3134372e37392e32342e302f32322d3232203d3e20313734.roa (raw, json)
Hash identifier: 87BLpP0dzuFfZTG0l5HKvTAffuCUMHuZdeuS0Lc4dcE=
Subject key identifier: 02:92:3A:B9:D8:7D:CB:AA:14:69:6B:BC:1F:C6:69:9E:19:6F:B9:CC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 54D376E60B203146F4EA787FBA6DDD5901F5DC9C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e32342e302f32322d3232203d3e20313734.roa
Signing time: Tue 27 Feb 2024 00:51:43 +0000
ROA not before: Tue 27 Feb 2024 00:46:43 +0000
ROA not after: Tue 25 Feb 2025 00:51:43 +0000
asID: 174
IP address blocks: 147.79.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d3:76:e6:0b:20:31:46:f4:ea:78:7f:ba:6d:dd:59:01:f5:dc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 27 00:46:43 2024 GMT
Not After : Feb 25 00:51:43 2025 GMT
Subject: CN=02923AB9D87DCBAA14696BBC1FC6699E196FB9CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:e6:c5:30:2c:fc:04:c5:91:d6:5c:db:87:
61:b9:30:1d:08:19:77:07:8f:8d:3f:8e:1a:7e:6d:
9a:d6:f6:46:2a:72:1e:81:aa:d5:55:fd:a3:db:ff:
91:00:2a:f1:ed:0b:4c:27:f3:52:5d:35:a0:94:9c:
8c:2b:ce:94:bb:09:c6:fa:dc:74:0d:30:eb:3f:da:
0c:1a:82:ca:74:dc:81:66:9a:74:31:66:c4:b3:dc:
3e:d9:40:a1:b5:38:a1:3a:ff:0f:62:87:d3:96:4c:
8e:3d:25:c6:bb:cf:f6:bb:b8:bc:f5:6b:0f:af:04:
89:ed:fe:fb:05:cc:bf:ba:72:55:e7:bc:a5:a0:c0:
af:c1:cf:21:37:7f:87:e4:cd:b2:0c:20:43:66:70:
22:5d:86:56:b9:e9:fd:c2:e5:c5:fb:9f:6c:30:54:
86:51:b9:58:9f:08:e3:2a:f2:1d:a2:13:83:53:c4:
88:6f:fe:39:1e:cb:a8:f7:36:77:d4:fb:03:84:7d:
bf:7b:81:8d:06:2a:8d:9f:9a:54:62:cd:63:55:ac:
5d:5f:17:9c:bc:02:b0:91:af:99:a6:9c:27:b9:59:
23:01:9b:ef:2c:3a:7b:e7:45:ac:4b:6d:02:bc:31:
81:03:45:bd:3a:74:a0:65:ed:d1:09:e6:3c:73:3e:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:92:3A:B9:D8:7D:CB:AA:14:69:6B:BC:1F:C6:69:9E:19:6F:B9:CC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e32342e302f32322d3232203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.24.0/22
Signature Algorithm: sha256WithRSAEncryption
51:dc:e8:ca:ce:c4:26:2c:ef:27:85:dd:e8:09:0a:ef:46:be:
51:94:21:0d:1e:12:e4:9a:3c:d8:2e:cf:81:5b:5b:82:88:04:
ce:c4:38:16:40:0b:e5:62:5b:8d:b7:31:61:9c:22:77:1a:85:
ba:19:b7:2d:07:9e:9d:46:f4:95:ff:b8:01:ee:3f:50:f6:f0:
3b:1c:56:d3:4c:40:1e:9f:7b:46:ca:63:a4:aa:9e:bd:e2:ed:
b8:0f:47:28:e1:bd:8e:29:0a:47:02:9f:53:e4:0c:54:2f:53:
e4:66:26:5c:8f:06:3b:91:a7:3b:63:22:bd:e6:b0:ba:bc:4d:
20:3b:f0:a5:4a:e3:7a:8b:6e:a8:ea:91:93:82:19:67:3e:39:
fd:e8:c9:25:c7:e4:dd:8c:7f:3e:80:28:88:b8:86:62:ca:42:
27:5a:0d:f6:76:a6:47:61:ef:6c:64:5b:c5:f6:4c:37:6d:48:
f9:3b:7a:bc:a4:bf:61:76:1b:6f:b2:50:da:f7:fe:a1:e7:eb:
1e:6a:7a:19:41:68:bf:74:d0:39:d2:9c:a2:cf:81:6e:73:1e:
98:c4:71:9b:e5:a3:48:d4:e7:ef:fe:a8:50:4f:6b:59:53:f5:
dc:6c:e2:10:ce:2c:a5:31:93:4c:af:33:34:42:59:54:68:70:
1e:dc:c8:70
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUVNN25gsgMUb06nh/um3dWQH13JwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAyMjcwMDQ2NDNaFw0yNTAyMjUwMDUxNDNaMDMxMTAvBgNV
BAMTKDAyOTIzQUI5RDg3RENCQUExNDY5NkJCQzFGQzY2OTlFMTk2RkI5Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebObFMCz8BMWR1lzbh2G5MB0I
GXcHj40/jhp+bZrW9kYqch6BqtVV/aPb/5EAKvHtC0wn81JdNaCUnIwrzpS7Ccb6
3HQNMOs/2gwagsp03IFmmnQxZsSz3D7ZQKG1OKE6/w9ih9OWTI49Jca7z/a7uLz1
aw+vBInt/vsFzL+6clXnvKWgwK/BzyE3f4fkzbIMIENmcCJdhla56f3C5cX7n2ww
VIZRuVifCOMq8h2iE4NTxIhv/jkey6j3NnfU+wOEfb97gY0GKo2fmlRizWNVrF1f
F5y8ArCRr5mmnCe5WSMBm+8sOnvnRaxLbQK8MYEDRb06dKBl7dEJ5jxzPvz5AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUApI6udh9y6oUaWu8H8ZpnhlvucwwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM3MmUzNzM5MmUzMjM0
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk08YMA0G
CSqGSIb3DQEBCwUAA4IBAQBR3OjKzsQmLO8nhd3oCQrvRr5RlCENHhLkmjzYLs+B
W1uCiATOxDgWQAvlYluNtzFhnCJ3GoW6GbctB56dRvSV/7gB7j9Q9vA7HFbTTEAe
n3tGymOkqp694u24D0co4b2OKQpHAp9T5AxUL1PkZiZcjwY7kac7YyK95rC6vE0g
O/ClSuN6i26o6pGTghlnPjn96Mklx+TdjH8+gCiIuIZiykInWg32dqZHYe9sZFvF
9kw3bUj5O3q8pL9hdhtvslDa9/6h5+seanoZQWi/dNA50pyiz4Fucx6YxHGb5aNI
1Ofv/qhQT2tZU/XcbOIQziylMZNMrzM0QllUaHAe3Mhw
-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org