Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3137362e302f32302d3230203d3e2030.roa
File: 3134382e3133352e3137362e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier: +oQggcXbEAJE6eFdYA77sGCZ5V6BfYJatbFSQdsXHzM=
Subject key identifier: FC:F1:A2:02:9B:95:B7:58:66:B9:99:38:A8:C4:D8:DE:21:45:ED:15
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 269635E25CD3D1C2CAE6D11E77AB594B1455B0E9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3137362e302f32302d3230203d3e2030.roa
Signing time: Fri 05 Jan 2024 10:05:08 +0000
ROA not before: Fri 05 Jan 2024 10:00:08 +0000
ROA not after: Fri 03 Jan 2025 10:05:08 +0000
asID: 0
IP address blocks: 148.135.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:96:35:e2:5c:d3:d1:c2:ca:e6:d1:1e:77:ab:59:4b:14:55:b0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 5 10:00:08 2024 GMT
Not After : Jan 3 10:05:08 2025 GMT
Subject: CN=FCF1A2029B95B75866B99938A8C4D8DE2145ED15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:85:9e:75:bc:2e:46:ca:ed:9c:a6:90:b7:
30:ad:0b:8f:6c:d6:a4:ca:80:e5:d9:d0:33:c3:61:
39:0d:99:2c:31:bc:6b:b2:31:ed:ff:ac:c3:ed:bd:
50:b8:15:00:96:08:d6:0e:78:29:bd:52:cd:de:6d:
1b:d0:8a:1f:84:c4:46:fb:48:fc:a1:d5:92:33:aa:
fc:9c:24:6b:49:3d:0e:13:dc:1a:8c:0e:e4:94:f6:
4b:a8:3b:b6:01:6e:cc:e1:37:7c:96:9f:28:fe:44:
6b:46:48:ce:47:19:ae:df:1e:75:3b:43:f5:d4:8c:
50:c7:b3:b6:9d:d9:40:06:a8:18:53:00:ca:e2:82:
fd:e7:f5:12:f8:80:51:78:5e:2e:e9:3a:00:ab:02:
93:62:eb:fe:1c:cb:95:d7:29:f2:61:c1:aa:a4:8e:
31:92:de:e3:be:92:72:85:dd:32:0f:20:2a:87:31:
ed:21:cc:ee:a7:ed:1d:2d:ac:ae:08:2d:0e:40:6d:
aa:31:9b:7b:cb:97:ab:91:21:13:7a:f2:83:74:7b:
64:96:e7:fd:db:30:1f:a7:8d:49:61:b3:42:af:14:
c3:e3:67:67:23:a7:da:cb:aa:e3:fe:d0:8f:1a:2e:
80:25:77:97:e1:06:54:4a:4f:20:b6:e9:51:71:10:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F1:A2:02:9B:95:B7:58:66:B9:99:38:A8:C4:D8:DE:21:45:ED:15
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3137362e302f32302d3230203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.176.0/20
Signature Algorithm: sha256WithRSAEncryption
73:04:97:7b:97:f3:2e:d7:34:52:05:1d:86:ce:1c:6b:42:52:
d5:8a:2e:28:b7:55:18:21:d5:bd:09:b1:5f:29:13:be:b8:62:
a8:cd:a6:3e:ed:f6:c7:e7:89:4c:b8:91:88:d7:71:8c:63:b2:
23:55:3f:c2:18:bd:ed:2c:f0:30:ef:7b:6a:6b:08:f0:f2:89:
80:a4:24:eb:87:a4:b8:5c:fc:d4:51:9e:17:83:44:4a:55:8f:
c5:12:ce:20:7e:7a:ee:22:96:69:73:0f:1e:7a:7a:4a:d9:3a:
1a:a8:c6:c3:c4:0a:92:ba:77:08:5e:52:1a:b1:63:21:d6:51:
9d:73:b6:d2:8b:7d:f8:45:89:e1:6d:af:38:a6:cf:00:25:7a:
0c:21:a1:15:36:82:dc:ce:ab:97:d4:0f:0c:a0:c0:72:32:fc:
eb:9a:cb:7b:19:ba:86:4b:f3:32:ec:e0:d2:f4:5c:ab:7d:7b:
bd:a4:05:9a:db:90:0c:6a:2a:3d:d9:b4:eb:bc:d3:66:d4:d6:
6a:2e:97:95:c3:ec:a9:cb:cd:c4:0f:47:09:c1:e6:84:2a:b5:
42:44:f1:76:66:56:cd:83:46:49:c8:37:33:49:0f:b9:a7:10:
0e:98:1b:55:4f:72:ce:7d:88:81:ef:48:18:70:2f:b9:1c:d8:
ff:a4:5e:3d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUJpY14lzT0cLK5tEed6tZSxRVsOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAxMDUxMDAwMDhaFw0yNTAxMDMxMDA1MDhaMDMxMTAvBgNV
BAMTKEZDRjFBMjAyOUI5NUI3NTg2NkI5OTkzOEE4QzREOERFMjE0NUVEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmX4WedbwuRsrtnKaQtzCtC49s
1qTKgOXZ0DPDYTkNmSwxvGuyMe3/rMPtvVC4FQCWCNYOeCm9Us3ebRvQih+ExEb7
SPyh1ZIzqvycJGtJPQ4T3BqMDuSU9kuoO7YBbszhN3yWnyj+RGtGSM5HGa7fHnU7
Q/XUjFDHs7ad2UAGqBhTAMrigv3n9RL4gFF4Xi7pOgCrApNi6/4cy5XXKfJhwaqk
jjGS3uO+knKF3TIPICqHMe0hzO6n7R0trK4ILQ5Abaoxm3vLl6uRIRN68oN0e2SW
5/3bMB+njUlhs0KvFMPjZ2cjp9rLquP+0I8aLoAld5fhBlRKTyC26VFxEDpvAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU/PGiApuVt1hmuZk4qMTY3iFF7RUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM4MmUzMTMzMzUyZTMx
MzczNjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElIewMA0G
CSqGSIb3DQEBCwUAA4IBAQBzBJd7l/Mu1zRSBR2GzhxrQlLVii4ot1UYIdW9CbFf
KRO+uGKozaY+7fbH54lMuJGI13GMY7IjVT/CGL3tLPAw73tqawjw8omApCTrh6S4
XPzUUZ4Xg0RKVY/FEs4gfnruIpZpcw8eenpK2ToaqMbDxAqSuncIXlIasWMh1lGd
c7bSi334RYnhba84ps8AJXoMIaEVNoLczquX1A8MoMByMvzrmst7GbqGS/My7ODS
9FyrfXu9pAWa25AMaio92bTrvNNm1NZqLpeVw+ypy83ED0cJweaEKrVCRPF2ZlbN
g0ZJyDczSQ+5pxAOmBtVT3LOfYiB70gYcC+5HNj/pF49
-----END CERTIFICATE-----
Generated at Sat Apr 6 11:51:07 2024 by rpki-client on console-ams.rpki-client.org