Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: Qwhq8cS2K1dUNTwS/SVAMtCVB9UlAW6kQPfhdqEbuAI=
Subject key identifier: 75:F6:A0:FC:CC:A1:0C:98:EE:D0:88:DF:A6:F2:A8:9C:5E:B9:0A:BF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 022E6B47A4D060083A6132F5C6E0B72FF5563C7C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209242.roa
Signing time: Fri 14 Jun 2024 19:12:15 +0000
ROA not before: Fri 14 Jun 2024 19:07:15 +0000
ROA not after: Fri 13 Jun 2025 19:12:15 +0000
asID: 209242
IP address blocks: 147.79.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2e:6b:47:a4:d0:60:08:3a:61:32:f5:c6:e0:b7:2f:f5:56:3c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 14 19:07:15 2024 GMT
Not After : Jun 13 19:12:15 2025 GMT
Subject: CN=75F6A0FCCCA10C98EED088DFA6F2A89C5EB90ABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:ec:c8:18:fb:f6:1e:81:91:c6:af:9c:23:
c6:c2:00:43:e9:ca:49:34:b2:d8:05:d7:5e:0f:df:
d3:d6:96:12:18:8d:1b:94:45:e2:df:5c:41:e6:a3:
f3:77:4b:a8:ce:48:c5:83:0e:59:81:04:fb:b9:c5:
4b:45:be:d6:06:df:53:78:7c:d1:22:00:ae:d8:82:
26:d2:7a:df:7d:45:04:05:43:1e:af:a9:68:9f:ba:
7f:37:35:9a:96:ba:94:73:b3:0d:f0:fb:73:aa:7d:
38:ab:75:10:bc:b3:99:e1:99:f4:67:68:1b:31:a0:
64:2a:c0:d9:03:1b:a8:8a:5b:f6:c4:69:87:98:b2:
0f:21:f4:7c:5b:08:5f:b9:af:24:15:8a:6f:6a:aa:
4f:e4:ac:27:a1:bc:d5:f0:8e:86:ee:1d:2e:9f:ea:
6f:6a:29:16:4e:0b:72:9f:08:93:42:1c:2b:7b:37:
54:f3:74:0c:7a:38:46:8a:46:aa:0a:ac:de:63:d1:
d7:53:d1:fb:2b:30:9a:ad:6d:0f:c3:99:89:15:b7:
24:16:17:f9:db:27:4b:8d:17:90:04:9e:fb:3d:ac:
99:0b:f6:58:be:e7:f7:d3:88:80:8c:ac:8c:c1:8b:
3b:bb:75:c6:f8:bc:ad:db:dd:b5:92:49:38:49:6c:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F6:A0:FC:CC:A1:0C:98:EE:D0:88:DF:A6:F2:A8:9C:5E:B9:0A:BF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:cb:94:14:9b:85:e3:a7:cd:62:5f:96:ed:26:de:5d:16:6f:
21:66:57:a8:a8:a7:76:18:e6:7e:d7:ff:d3:5d:21:d5:50:03:
88:d7:89:58:65:a0:ee:48:66:49:39:24:02:45:72:1c:20:eb:
fc:40:42:00:a4:0b:4e:61:f8:83:72:78:49:b3:1c:63:5c:46:
93:93:1b:6a:ff:e1:1e:c2:a9:bc:fa:e7:b6:6b:bd:27:89:70:
2d:f9:97:d7:8a:ee:45:d1:56:67:32:a1:1e:95:d0:30:36:78:
44:b2:66:05:fc:4d:56:59:12:c3:c5:79:1a:a3:34:f0:81:48:
8e:93:0b:a5:6d:6c:60:2c:79:cd:3f:77:95:03:e7:19:36:d9:
62:81:eb:22:b6:41:4c:b4:c3:31:50:01:8d:22:f6:0f:50:43:
bc:b4:d7:77:3e:2b:f9:93:b9:7d:e5:76:94:74:f0:b3:d6:ec:
24:66:44:0e:e9:ec:cf:f9:77:4b:45:f5:51:c4:88:a4:80:90:
25:0f:ef:54:8b:87:69:15:5e:43:fe:96:73:fb:54:2d:7e:ad:
05:b8:6b:6a:d9:90:cc:a6:7c:80:65:29:86:69:76:d3:4f:15:
6c:fe:a3:5b:68:93:b2:5d:55:71:5b:76:68:5e:8b:89:70:c0:
94:45:a2:7d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUAi5rR6TQYAg6YTL1xuC3L/VWPHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA2MTQxOTA3MTVaFw0yNTA2MTMxOTEyMTVaMDMxMTAvBgNV
BAMTKDc1RjZBMEZDQ0NBMTBDOThFRUQwODhERkE2RjJBODlDNUVCOTBBQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZnuzIGPv2HoGRxq+cI8bCAEPp
ykk0stgF114P39PWlhIYjRuUReLfXEHmo/N3S6jOSMWDDlmBBPu5xUtFvtYG31N4
fNEiAK7YgibSet99RQQFQx6vqWifun83NZqWupRzsw3w+3OqfTirdRC8s5nhmfRn
aBsxoGQqwNkDG6iKW/bEaYeYsg8h9HxbCF+5ryQVim9qqk/krCehvNXwjobuHS6f
6m9qKRZOC3KfCJNCHCt7N1TzdAx6OEaKRqoKrN5j0ddT0fsrMJqtbQ/DmYkVtyQW
F/nbJ0uNF5AEnvs9rJkL9li+5/fTiICMrIzBizu7dcb4vK3b3bWSSThJbDPnAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUdfag/MyhDJju0IjfpvKonF65Cr8wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA5MjQyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk08W
MA0GCSqGSIb3DQEBCwUAA4IBAQA8y5QUm4Xjp81iX5btJt5dFm8hZleoqKd2GOZ+
1//TXSHVUAOI14lYZaDuSGZJOSQCRXIcIOv8QEIApAtOYfiDcnhJsxxjXEaTkxtq
/+Eewqm8+ue2a70niXAt+ZfXiu5F0VZnMqEeldAwNnhEsmYF/E1WWRLDxXkaozTw
gUiOkwulbWxgLHnNP3eVA+cZNtligesitkFMtMMxUAGNIvYPUEO8tNd3Piv5k7l9
5XaUdPCz1uwkZkQO6ezP+XdLRfVRxIikgJAlD+9Ui4dpFV5D/pZz+1Qtfq0FuGtq
2ZDMpnyAZSmGaXbTTxVs/qNbaJOyXVVxW3ZoXouJcMCURaJ9
-----END CERTIFICATE-----
Generated at Sun Jul 14 01:51:16 2024 by rpki-client on console-ams.rpki-client.org