Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e20313938393830.roa
File: 3139332e3139342e31362e302f32342d3234203d3e20313938393830.roa (raw, json)
Hash identifier: e/1Zm07o/gRAcXZsV8DBiBhY9l4/2dSo6n7vdRgf4Qc=
Subject key identifier: CF:B9:69:5E:4F:19:45:25:36:51:67:D0:96:7B:01:7F:BB:2E:E8:BA
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 0449F839524F35A0FA3CAA02ABCE51638583DBB3
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e20313938393830.roa
Signing time: Fri 07 Jun 2024 21:42:22 +0000
ROA not before: Fri 07 Jun 2024 21:37:22 +0000
ROA not after: Fri 06 Jun 2025 21:42:22 +0000
asID: 198980
IP address blocks: 193.194.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 20:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:49:f8:39:52:4f:35:a0:fa:3c:aa:02:ab:ce:51:63:85:83:db:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Jun 7 21:37:22 2024 GMT
Not After : Jun 6 21:42:22 2025 GMT
Subject: CN=CFB9695E4F194525365167D0967B017FBB2EE8BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:25:d7:e3:fb:db:00:6d:c7:ed:c6:87:90:
cf:ca:53:b8:52:0c:1f:38:2a:1b:82:3b:a6:dc:43:
20:4b:d3:7a:55:98:94:c3:91:9c:31:e5:e5:85:8c:
05:2d:e9:8d:0f:bf:3d:4f:0d:60:07:4d:90:17:b8:
58:8d:f4:36:66:5e:77:a4:ea:86:bf:e9:93:df:8e:
0c:20:d0:dd:2b:10:eb:c3:95:12:96:00:7e:f3:1d:
98:96:63:c8:58:e4:5d:47:7b:f2:64:34:33:a8:5f:
17:95:2c:12:f2:e7:2a:20:ae:fe:d0:97:e3:55:6e:
33:87:e8:a8:d8:20:a5:eb:95:56:85:08:45:50:7c:
a8:b1:4e:2c:a1:1a:ff:8b:25:14:0d:d2:fa:a1:e5:
c1:71:6e:37:2b:e3:47:32:c8:8f:14:b9:3f:e0:eb:
8c:f1:e6:13:96:cd:43:9d:f6:53:82:33:65:f8:89:
4c:35:22:23:a3:7b:ec:d3:74:9d:f8:8b:4f:1d:e0:
f9:22:5d:7d:2b:bd:f1:95:74:cd:0e:bb:7f:f9:9b:
cf:dd:74:c5:c1:69:54:c6:a6:a2:a0:4c:b9:a4:cc:
36:dd:5c:f5:37:a9:f3:37:13:ee:60:b8:fc:2c:e2:
0d:e9:11:c7:f3:d6:a0:99:d2:32:8b:56:52:95:60:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B9:69:5E:4F:19:45:25:36:51:67:D0:96:7B:01:7F:BB:2E:E8:BA
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e20313938393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c9:6f:98:a0:b0:2c:68:ca:d0:72:bd:b0:3b:d5:68:e2:78:
9e:7d:ef:0a:7e:4e:89:b0:5a:1a:58:41:30:aa:11:7c:24:32:
fc:17:42:a4:7f:8a:2a:99:bd:ff:bf:39:ad:bd:96:70:cb:2b:
68:58:42:5e:5a:92:c1:03:3c:cd:1b:34:62:13:b8:db:6d:7a:
94:16:e1:50:04:e4:15:f1:9c:a6:87:bb:1c:b0:85:d5:d2:0f:
12:45:97:cc:39:3c:5d:8a:3e:7c:a5:bb:9e:48:44:e1:5f:a8:
4d:26:df:80:e3:d9:fe:35:ae:2e:11:10:ea:0f:05:76:31:af:
2d:4b:26:05:d9:0a:a8:70:47:48:97:e1:72:23:fb:95:21:f7:
05:b9:68:a3:41:8f:02:67:7d:c7:0a:4e:33:8d:2d:12:9f:92:
81:46:a5:af:29:8c:d1:89:bf:4b:24:e6:0f:94:8d:71:a5:eb:
d5:37:49:a7:01:d8:04:46:4a:09:65:d0:77:3c:11:9a:3a:a5:
01:ca:e5:b5:fb:01:39:7d:db:3b:74:e5:e1:f7:86:9c:97:15:
a7:11:63:ba:cc:9c:67:ea:6e:30:f9:4c:22:ab:3f:4d:66:cc:
54:d3:2e:83:1e:96:6c:2f:89:25:a9:d6:7d:5b:7d:d5:8c:97:
27:b6:0d:04
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUBEn4OVJPNaD6PKoCq85RY4WD27MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI5ZmUzOTcwMzQ5N2I4MDk0MTJhYTdkOWI1M2QxMGM1
YTBhODZiNDAeFw0yNDA2MDcyMTM3MjJaFw0yNTA2MDYyMTQyMjJaMDMxMTAvBgNV
BAMTKENGQjk2OTVFNEYxOTQ1MjUzNjUxNjdEMDk2N0IwMTdGQkIyRUU4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlWCXX4/vbAG3H7caHkM/KU7hS
DB84KhuCO6bcQyBL03pVmJTDkZwx5eWFjAUt6Y0Pvz1PDWAHTZAXuFiN9DZmXnek
6oa/6ZPfjgwg0N0rEOvDlRKWAH7zHZiWY8hY5F1He/JkNDOoXxeVLBLy5yogrv7Q
l+NVbjOH6KjYIKXrlVaFCEVQfKixTiyhGv+LJRQN0vqh5cFxbjcr40cyyI8UuT/g
64zx5hOWzUOd9lOCM2X4iUw1IiOje+zTdJ34i08d4PkiXX0rvfGVdM0Ou3/5m8/d
dMXBaVTGpqKgTLmkzDbdXPU3qfM3E+5guPws4g3pEcfz1qCZ0jKLVlKVYDBXAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUz7lpXk8ZRSU2UWfQlnsBf7su6LowHwYDVR0j
BBgwFoAUgp/jlwNJe4CUEqp9m1PRDFoKhrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmRlMmY2NGQtZjZlNS00N2UzLWE2ZmItNjg2ZDg4ZTcx
YWU5LzYvODI5RkUzOTcwMzQ5N0I4MDk0MTJBQTdEOUI1M0QxMEM1QTBBODZCNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dwX2psd05KZTRDVUVxcDltMVBSREZv
S2hyUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmRlMmY2NGQt
ZjZlNS00N2UzLWE2ZmItNjg2ZDg4ZTcxYWU5LzYvMzEzOTMzMmUzMTM5MzQyZTMx
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzOTM4MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBwhAwDQYJKoZIhvcNAQELBQADggEBAE3Jb5igsCxoytByvbA71WjieJ597wp+
TomwWhpYQTCqEXwkMvwXQqR/iiqZvf+/Oa29lnDLK2hYQl5aksEDPM0bNGITuNtt
epQW4VAE5BXxnKaHuxywhdXSDxJFl8w5PF2KPnylu55IROFfqE0m34Dj2f41ri4R
EOoPBXYxry1LJgXZCqhwR0iX4XIj+5Uh9wW5aKNBjwJnfccKTjONLRKfkoFGpa8p
jNGJv0sk5g+UjXGl69U3SacB2ARGSgll0Hc8EZo6pQHK5bX7ATl92zt05eH3hpyX
FacRY7rMnGfqbjD5TCKrP01mzFTTLoMelmwviSWp1n1bfdWMlye2DQQ=
Generated at Fri Jul 5 21:12:00 2024 by rpki-client on console-ams.rpki-client.org