Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/3139352e3139312e34392e302f32342d3234203d3e203631333137.roa
File: 3139352e3139312e34392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: kYcrjWMXRbNivM8NXN/2PrNxELjKs9ZuJSESbnahTN4=
Subject key identifier: 84:AC:6E:AD:2C:08:E0:9C:E4:B6:B4:DE:62:E4:46:D8:68:7C:6D:DF
Certificate issuer: /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial: 3F1CA88AAD452A036776504FA8F336903EA667A5
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/3139352e3139312e34392e302f32342d3234203d3e203631333137.roa
Signing time: Tue 14 Nov 2023 08:34:26 +0000
ROA not before: Tue 14 Nov 2023 08:29:26 +0000
ROA not after: Tue 12 Nov 2024 08:34:26 +0000
asID: 61317
IP address blocks: 195.191.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:1c:a8:8a:ad:45:2a:03:67:76:50:4f:a8:f3:36:90:3e:a6:67:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
Validity
Not Before: Nov 14 08:29:26 2023 GMT
Not After : Nov 12 08:34:26 2024 GMT
Subject: CN=84AC6EAD2C08E09CE4B6B4DE62E446D8687C6DDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:ee:72:3f:85:75:db:e8:e7:af:d0:76:8d:
ff:bf:db:2e:96:4a:37:e8:62:7c:f0:07:80:93:7c:
dc:f8:d1:b2:d1:48:98:c5:6b:2f:e0:a7:8c:0f:2a:
5e:56:94:30:69:5d:6f:7b:1d:b5:34:2e:c2:34:a6:
e1:7c:35:58:a6:73:fd:27:37:9d:a7:50:d4:b5:17:
9c:d9:97:83:4e:e6:41:f6:0d:69:20:85:72:55:52:
0c:f6:14:40:8d:9b:7e:33:f1:d1:44:b9:0b:5f:52:
60:c7:7e:ca:55:25:e8:9f:98:72:8f:85:fa:92:e0:
3a:2c:41:f1:b9:58:d3:3b:4c:16:43:b7:45:0e:d2:
5d:a3:ba:3e:42:cc:2f:ba:44:5d:60:e1:6f:60:1e:
e2:b0:85:de:8e:bd:f7:6e:62:73:57:3a:ba:95:da:
ad:3c:9f:47:24:d6:b3:1f:96:87:ab:d6:d1:61:c8:
b5:0c:b8:2a:f0:84:64:ec:01:20:6c:dd:3d:ef:56:
35:a6:4e:13:9a:9f:46:c8:dd:27:f9:74:cf:11:c9:
07:4c:d0:4a:b3:cd:34:cf:99:e2:f9:e5:3c:ea:c1:
11:33:09:6a:73:e9:c3:df:e9:4b:39:5d:3c:7c:81:
2b:b1:50:b8:9d:d4:0b:a8:45:5d:51:a6:82:4d:f2:
8d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AC:6E:AD:2C:08:E0:9C:E4:B6:B4:DE:62:E4:46:D8:68:7C:6D:DF
X509v3 Authority Key Identifier:
keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/3139352e3139312e34392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.49.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3a:f9:38:22:55:18:df:59:87:e7:97:ac:6d:42:d4:9a:be:
8a:ef:d2:a8:f1:c5:27:ea:f3:5c:82:d0:4a:82:9e:28:08:e1:
ff:11:b9:25:88:56:14:f6:54:7f:00:d5:2d:16:93:22:a7:27:
bb:8e:14:c3:af:d5:63:44:cc:28:e5:79:1d:76:43:fe:3e:ff:
2a:e4:7a:c5:2b:f6:30:4f:76:01:9e:06:6b:29:02:a9:76:f8:
b1:f1:91:a3:47:63:5f:dd:81:3d:46:32:4d:e7:5b:4a:6f:83:
29:43:71:a5:32:69:d1:fc:4e:52:52:34:18:8f:97:ee:21:2b:
cd:84:a7:d2:c7:09:c3:4e:43:8e:56:bd:e6:f7:70:a4:bf:cc:
ea:72:ed:a3:59:ec:a1:5f:22:d7:49:38:af:b9:eb:46:1c:90:
33:3a:48:f4:d4:2b:30:a0:dc:a4:2e:ee:b9:49:b7:75:5f:20:
89:6a:15:e9:ba:82:eb:ca:53:25:89:2f:14:ff:88:c3:6f:51:
5c:4d:10:c6:22:eb:48:a0:a5:a7:80:0a:03:c2:60:ef:60:38:
61:e7:cb:97:cb:70:d4:7d:59:3a:4c:21:c4:5b:53:dc:4a:36:
01:7d:81:6c:b9:bc:45:5c:93:0d:53:01:63:7c:a0:2e:e0:68:
b6:d5:0b:c3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPxyoiq1FKgNndlBPqPM2kD6mZ6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWM0MjhjOGVlZDI0MTg1N2Y3M2QwZjNkNDgzYWJlY2Iy
NDA1MTlkMDAeFw0yMzExMTQwODI5MjZaFw0yNDExMTIwODM0MjZaMDMxMTAvBgNV
BAMTKDg0QUM2RUFEMkMwOEUwOUNFNEI2QjRERTYyRTQ0NkQ4Njg3QzZEREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ3e5yP4V12+jnr9B2jf+/2y6W
SjfoYnzwB4CTfNz40bLRSJjFay/gp4wPKl5WlDBpXW97HbU0LsI0puF8NVimc/0n
N52nUNS1F5zZl4NO5kH2DWkghXJVUgz2FECNm34z8dFEuQtfUmDHfspVJeifmHKP
hfqS4DosQfG5WNM7TBZDt0UO0l2juj5CzC+6RF1g4W9gHuKwhd6OvfduYnNXOrqV
2q08n0ck1rMfloer1tFhyLUMuCrwhGTsASBs3T3vVjWmThOan0bI3Sf5dM8RyQdM
0EqzzTTPmeL55TzqwREzCWpz6cPf6Us5XTx8gSuxULid1AuoRV1RpoJN8o0jAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUhKxurSwI4JzktrTeYuRG2Gh8bd8wHwYDVR0j
BBgwFoAUrEKMju0kGFf3PQ89SDq+yyQFGdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTMwOWJkY2UtNzBlMy00NmFlLThmMDUtMGMzYWRhOGY4
YTQyLzAvQUM0MjhDOEVFRDI0MTg1N0Y3M0QwRjNENDgzQUJFQ0IyNDA1MTlEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JFS01qdTBrR0ZmM1BRODlTRHEteXlR
RkdkQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTMwOWJkY2Ut
NzBlMy00NmFlLThmMDUtMGMzYWRhOGY4YTQyLzAvMzEzOTM1MmUzMTM5MzEyZTM0
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
w78xMA0GCSqGSIb3DQEBCwUAA4IBAQBzOvk4IlUY31mH55esbULUmr6K79Ko8cUn
6vNcgtBKgp4oCOH/EbkliFYU9lR/ANUtFpMipye7jhTDr9VjRMwo5XkddkP+Pv8q
5HrFK/YwT3YBngZrKQKpdvix8ZGjR2Nf3YE9RjJN51tKb4MpQ3GlMmnR/E5SUjQY
j5fuISvNhKfSxwnDTkOOVr3m93Ckv8zqcu2jWeyhXyLXSTivuetGHJAzOkj01Csw
oNykLu65Sbd1XyCJahXpuoLrylMliS8U/4jDb1FcTRDGIutIoKWngAoDwmDvYDhh
58uXy3DUfVk6TCHEW1PcSjYBfYFsubxFXJMNUwFjfKAu4Gi21QvD
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org