Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134835.roa
File: AS134835.roa (raw, json)
Hash identifier: /UY2yf0JaLwiWEUopbPlAktH40r/4NcciYyzaJT6mM0=
Subject key identifier: 09:97:AB:AB:D5:56:9B:1A:6B:01:F0:14:AC:53:FC:D5:83:22:AE:E2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2E6F57A9289BAA5A8D1F306466CCE7E250D6C658
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134835.roa
Signing time: Sat 06 Apr 2024 11:09:30 +0000
ROA not before: Sat 06 Apr 2024 11:04:30 +0000
ROA not after: Sat 05 Apr 2025 11:09:30 +0000
asID: 134835
IP address blocks: 146.103.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Apr 2024 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6f:57:a9:28:9b:aa:5a:8d:1f:30:64:66:cc:e7:e2:50:d6:c6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 6 11:04:30 2024 GMT
Not After : Apr 5 11:09:30 2025 GMT
Subject: CN=0997ABABD5569B1A6B01F014AC53FCD58322AEE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:40:0d:ce:47:0a:28:46:7b:8d:1a:58:0a:
d1:d3:6f:83:aa:9e:9d:e6:0d:87:26:d7:92:ac:44:
d4:e7:f6:9f:55:3c:43:99:8a:9b:49:15:d1:86:d8:
68:89:b1:2f:72:ec:f3:3a:74:59:3f:13:2c:e0:b4:
31:a0:46:b5:80:cf:a5:66:97:46:ad:06:b0:e0:9f:
d9:d9:93:99:33:ed:cc:3f:1b:27:54:6d:5c:52:5b:
b2:84:9a:53:d9:d9:b3:0e:84:ad:85:1d:7e:b1:c2:
d9:6f:ca:a2:27:77:74:0d:1f:c6:db:c9:73:6d:95:
41:f0:ac:50:53:c3:5f:d4:99:3a:bd:47:7d:9b:9d:
01:b0:e4:3e:ce:2a:98:2c:3f:83:cc:19:a0:e5:c1:
5e:d5:34:99:b2:b4:6d:f9:06:a0:a7:82:04:2f:80:
8b:e6:d7:ca:21:c5:0f:91:c7:aa:b2:d3:4b:d0:ff:
aa:de:cd:d6:45:94:02:0b:2e:ee:4b:09:ff:71:26:
e1:58:66:a5:3d:b3:62:ed:28:7e:9c:ad:9f:41:f1:
33:d5:61:4c:5e:53:1d:9d:13:1b:e4:52:df:9a:ce:
f4:01:6e:ec:f5:24:29:65:b4:ac:65:77:46:56:ed:
85:86:3d:3a:dd:e5:f5:90:54:f9:1f:b1:15:be:28:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:97:AB:AB:D5:56:9B:1A:6B:01:F0:14:AC:53:FC:D5:83:22:AE:E2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.18.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:60:f5:74:56:81:09:97:70:3b:86:2b:b0:1a:cc:a9:aa:55:
5c:c6:d4:66:03:1d:db:c6:ca:f4:b7:c2:f5:8c:59:04:e2:23:
c9:dd:4f:d2:65:df:d3:dd:e3:5c:14:6a:aa:1a:0b:0b:eb:f9:
36:8d:e9:93:e0:f4:65:0c:a5:54:33:c0:0d:f6:32:8d:27:1a:
72:47:1b:88:0b:b0:cc:48:21:59:88:00:0d:f6:c6:c5:89:07:
15:97:20:5a:3d:97:a1:ee:ae:06:af:63:02:cc:d9:d0:7b:5d:
5e:9a:d4:3c:83:c8:7a:b7:ad:65:6b:88:29:37:b5:6f:95:e2:
6a:d3:2f:c9:cc:cc:dd:9e:79:a1:97:d6:3d:b2:4f:ce:78:b4:
8a:87:e7:3f:8c:dd:33:de:63:3b:b7:f9:b7:7d:d8:5b:a5:8c:
76:34:1d:86:d5:fd:8f:19:44:f8:59:ed:1b:7a:0a:21:ee:2f:
cd:d3:52:00:d8:f4:fe:04:24:f2:40:91:9b:a6:5b:f7:d0:2a:
53:80:88:d3:ca:e7:52:83:14:bf:da:9d:4a:60:82:f1:a5:7e:
dd:74:59:3c:4b:ee:1f:3a:ee:ab:1d:25:65:42:c4:a3:8e:f9:
26:d6:da:49:f6:df:23:e6:45:80:44:55:e8:9b:73:2c:2b:c3:
d0:d9:5f:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIULm9XqSibqlqNHzBkZszn4lDWxlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA0MDYxMTA0MzBaFw0yNTA0MDUxMTA5MzBaMDMxMTAvBgNV
BAMTKDA5OTdBQkFCRDU1NjlCMUE2QjAxRjAxNEFDNTNGQ0Q1ODMyMkFFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxUANzkcKKEZ7jRpYCtHTb4Oq
np3mDYcm15KsRNTn9p9VPEOZiptJFdGG2GiJsS9y7PM6dFk/EyzgtDGgRrWAz6Vm
l0atBrDgn9nZk5kz7cw/GydUbVxSW7KEmlPZ2bMOhK2FHX6xwtlvyqInd3QNH8bb
yXNtlUHwrFBTw1/UmTq9R32bnQGw5D7OKpgsP4PMGaDlwV7VNJmytG35BqCnggQv
gIvm18ohxQ+Rx6qy00vQ/6rezdZFlAILLu5LCf9xJuFYZqU9s2LtKH6crZ9B8TPV
YUxeUx2dExvkUt+azvQBbuz1JClltKxld0ZW7YWGPTrd5fWQVPkfsRW+KHD3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUCZerq9VWmxprAfAUrFP81YMiruIwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM0ODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkmcS
MA0GCSqGSIb3DQEBCwUAA4IBAQCqYPV0VoEJl3A7hiuwGsypqlVcxtRmAx3bxsr0
t8L1jFkE4iPJ3U/SZd/T3eNcFGqqGgsL6/k2jemT4PRlDKVUM8AN9jKNJxpyRxuI
C7DMSCFZiAAN9sbFiQcVlyBaPZeh7q4Gr2MCzNnQe11emtQ8g8h6t61la4gpN7Vv
leJq0y/JzMzdnnmhl9Y9sk/OeLSKh+c/jN0z3mM7t/m3fdhbpYx2NB2G1f2PGUT4
We0begoh7i/N01IA2PT+BCTyQJGbplv30CpTgIjTyudSgxS/2p1KYILxpX7ddFk8
S+4fOu6rHSVlQsSjjvkm1tpJ9t8j5kWARFXom3MsK8PQ2V9h
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org