Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/3139332e31372e322e302f32342d3234203d3e20323135383238.roa
File: 3139332e31372e322e302f32342d3234203d3e20323135383238.roa (raw, json)
Hash identifier: 2LjC/OUAUIGd1CPRyeZs6TYbaNhKhR/T3DEZ28RA4FI=
Subject key identifier: C0:72:0F:64:1F:3F:24:59:15:A7:58:69:21:2E:35:2F:F2:5D:AB:E7
Certificate issuer: /CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Certificate serial: 708838E1E15DB5F8F4EB81877DCDF9E4AD3725FA
Authority key identifier: 07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/3139332e31372e322e302f32342d3234203d3e20323135383238.roa
Signing time: Thu 02 May 2024 09:31:24 +0000
ROA not before: Thu 02 May 2024 09:26:24 +0000
ROA not after: Thu 01 May 2025 09:31:24 +0000
asID: 215828
IP address blocks: 193.17.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 20:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:88:38:e1:e1:5d:b5:f8:f4:eb:81:87:7d:cd:f9:e4:ad:37:25:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Validity
Not Before: May 2 09:26:24 2024 GMT
Not After : May 1 09:31:24 2025 GMT
Subject: CN=C0720F641F3F245915A75869212E352FF25DABE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:2c:f4:fd:91:32:44:2d:ec:d7:65:a4:01:
ac:43:56:5f:8f:f4:bb:c8:cc:07:e3:fb:37:e0:04:
df:77:59:e9:75:b9:22:d1:9e:0c:f3:0f:9b:08:89:
9f:cb:ce:ff:90:1b:11:06:d7:a4:0c:e4:41:d4:2b:
18:78:0e:cd:15:b7:92:0f:c4:8e:5d:9a:36:9f:34:
61:e8:d5:97:63:11:4b:a0:7c:20:b6:b8:01:2e:30:
02:21:50:5a:38:13:bc:0b:9d:70:48:e7:85:43:fb:
fc:cb:77:37:97:56:97:a0:5c:13:2d:3e:5d:9e:83:
64:cd:2b:9d:7e:54:bf:55:3e:0e:cf:57:ba:00:7b:
06:f5:f8:a1:c2:1a:27:4d:e2:c6:81:df:e0:c3:8e:
e9:c1:f3:00:20:92:e3:a1:2e:54:03:56:6d:d2:86:
12:27:8f:cd:64:3b:0c:67:7b:61:23:78:93:c0:6b:
c4:32:89:34:4a:c8:7b:3d:d8:13:47:75:57:8f:e0:
21:1e:0e:d3:04:c3:0f:05:4c:5d:68:fe:14:f1:8d:
b8:eb:d2:37:7d:5b:d2:f8:9a:83:50:79:cc:45:92:
91:f1:f9:6e:a2:c8:00:b3:fa:61:cd:dc:0f:f2:3f:
e9:7e:8d:13:0a:67:6b:43:1e:55:aa:4f:06:8b:c6:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:72:0F:64:1F:3F:24:59:15:A7:58:69:21:2E:35:2F:F2:5D:AB:E7
X509v3 Authority Key Identifier:
keyid:07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/3139332e31372e322e302f32342d3234203d3e20323135383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d0:d7:b2:ea:0d:0a:2d:8d:9e:79:81:c9:33:5a:e5:de:54:
0d:cb:28:0f:11:90:26:d4:84:f9:3b:f6:da:f0:3b:79:64:46:
69:d7:e6:ac:a4:eb:c3:44:84:71:09:50:ac:71:9e:32:32:09:
b3:0e:c6:65:e2:97:09:a3:3c:0b:58:d4:c9:d8:e5:c0:87:26:
17:df:f3:df:28:25:e1:f2:32:74:27:67:4a:34:5c:5a:fa:62:
50:36:e3:f4:21:cb:86:68:af:ac:39:b5:e6:23:28:68:1c:e3:
41:fd:4e:47:eb:df:f5:89:32:7f:55:fe:83:36:d7:b3:4c:bb:
fd:af:de:9a:84:0c:aa:49:d3:fd:ee:ac:6b:28:42:79:01:24:
55:00:bf:d2:d9:2a:56:dc:e2:7c:fb:18:ee:a9:3e:21:00:e0:
21:fd:bd:d9:61:eb:1e:b8:70:df:0b:db:0b:33:63:ba:04:1a:
e2:b0:88:b1:70:21:cf:9e:a3:6b:4a:17:1f:59:70:05:49:89:
40:43:1e:5c:e4:67:9f:38:bb:a7:ae:15:8e:0e:86:ac:31:bd:
a6:40:fe:15:2d:16:03:b9:ee:fa:92:cf:27:07:5c:9d:65:0f:
b1:87:aa:58:64:33:8a:cb:f6:0b:77:7f:64:a7:c8:e2:9a:62:
3a:36:a2:eb
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUcIg44eFdtfj064GHfc355K03JfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdkMzYyYmRkN2NhNmU4MGUyYzI0NDQzNzU5N2JkNDdl
ZjdhNGZkZTAeFw0yNDA1MDIwOTI2MjRaFw0yNTA1MDEwOTMxMjRaMDMxMTAvBgNV
BAMTKEMwNzIwRjY0MUYzRjI0NTkxNUE3NTg2OTIxMkUzNTJGRjI1REFCRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ISz0/ZEyRC3s12WkAaxDVl+P
9LvIzAfj+zfgBN93Wel1uSLRngzzD5sIiZ/Lzv+QGxEG16QM5EHUKxh4Ds0Vt5IP
xI5dmjafNGHo1ZdjEUugfCC2uAEuMAIhUFo4E7wLnXBI54VD+/zLdzeXVpegXBMt
Pl2eg2TNK51+VL9VPg7PV7oAewb1+KHCGidN4saB3+DDjunB8wAgkuOhLlQDVm3S
hhInj81kOwxne2EjeJPAa8QyiTRKyHs92BNHdVeP4CEeDtMEww8FTF1o/hTxjbjr
0jd9W9L4moNQecxFkpHx+W6iyACz+mHN3A/yP+l+jRMKZ2tDHlWqTwaLxuT1AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUwHIPZB8/JFkVp1hpIS41L/Jdq+cwHwYDVR0j
BBgwFoAUB9NivdfKboDiwkRDdZe9R+96T94wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjFhNzk3ZjktM2MxMC00NTM2LWFhNjQtMDljYTJkOTU0
NWM4LzAvMDdEMzYyQkREN0NBNkU4MEUyQzI0NDQzNzU5N0JENDdFRjdBNEZERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I5Tml2ZGZLYm9EaXdrUkRkWmU5Ui05
NlQ5NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjFhNzk3Zjkt
M2MxMC00NTM2LWFhNjQtMDljYTJkOTU0NWM4LzAvMzEzOTMzMmUzMTM3MmUzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTM4MzIzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMER
AjANBgkqhkiG9w0BAQsFAAOCAQEAjtDXsuoNCi2NnnmByTNa5d5UDcsoDxGQJtSE
+Tv22vA7eWRGadfmrKTrw0SEcQlQrHGeMjIJsw7GZeKXCaM8C1jUydjlwIcmF9/z
3ygl4fIydCdnSjRcWvpiUDbj9CHLhmivrDm15iMoaBzjQf1OR+vf9Ykyf1X+gzbX
s0y7/a/emoQMqknT/e6sayhCeQEkVQC/0tkqVtzifPsY7qk+IQDgIf292WHrHrhw
3wvbCzNjugQa4rCIsXAhz56ja0oXH1lwBUmJQEMeXORnnzi7p64Vjg6GrDG9pkD+
FS0WA7nu+pLPJwdcnWUPsYeqWGQzisv2C3d/ZKfI4ppiOjai6w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org