Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31382e302f32342d3234203d3e2030.roa
File: 3139332e3139342e31382e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 7HMxqlX24l9HXmYrfSB+1poMvb7jwYtwQCqsZ4spHZY=
Subject key identifier: D0:3D:7A:3C:8A:F0:A0:40:32:08:D0:3A:4C:20:8E:D2:E0:E4:A9:3A
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 50E02CAEC3A6FE29B57839035DEE1FDE1AD37738
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31382e302f32342d3234203d3e2030.roa
Signing time: Fri 05 Jul 2024 22:32:42 +0000
ROA not before: Fri 05 Jul 2024 22:27:42 +0000
ROA not after: Fri 04 Jul 2025 22:32:42 +0000
asID: 0
IP address blocks: 193.194.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 19:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e0:2c:ae:c3:a6:fe:29:b5:78:39:03:5d:ee:1f:de:1a:d3:77:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Jul 5 22:27:42 2024 GMT
Not After : Jul 4 22:32:42 2025 GMT
Subject: CN=D03D7A3C8AF0A0403208D03A4C208ED2E0E4A93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:da:a7:2f:26:57:9c:65:d5:02:8a:b6:db:
df:82:5b:12:63:e6:24:21:65:ea:87:72:04:6d:61:
53:e3:42:50:50:0e:9b:01:3c:f0:f3:fc:6b:68:79:
f2:87:a3:fc:30:f2:6b:95:d0:69:33:52:6b:4c:9b:
64:da:b2:dc:d6:33:a0:63:a4:e8:15:8c:46:ec:f8:
92:7f:a5:0f:b2:7e:f4:2c:57:3e:95:cd:19:7b:40:
d3:b9:d8:e0:5d:bf:c2:27:03:08:e2:38:a4:0b:fa:
b5:49:f3:9b:c0:8d:01:5d:35:3d:88:5e:57:32:f0:
55:a4:d7:f1:ec:da:d3:0c:6d:2b:aa:95:ec:87:c4:
ce:73:8e:24:0f:76:35:7a:44:30:ab:96:0f:f5:b0:
11:22:86:57:58:60:e3:e5:64:5c:ac:8d:6a:c2:4a:
a4:7b:65:f0:18:67:72:18:b4:1b:d8:0d:ed:dd:36:
54:6d:5b:f6:18:01:d7:08:08:e6:6d:86:a3:e0:a7:
6e:72:4d:45:fe:f5:81:9f:36:a4:a3:e7:be:f6:31:
bc:00:ab:71:3a:ce:c3:24:61:41:85:11:4e:1b:1e:
12:a3:cc:68:f5:28:0c:f6:f7:74:18:4d:90:b9:bd:
dc:7f:06:ab:ef:72:da:e3:30:b3:55:51:f7:14:ad:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:7A:3C:8A:F0:A0:40:32:08:D0:3A:4C:20:8E:D2:E0:E4:A9:3A
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31382e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.18.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:04:cc:fa:5a:e4:75:14:ce:11:3a:fb:70:53:23:f9:96:91:
bf:bd:ee:54:e9:63:ed:df:fe:63:e6:7a:3e:ef:a1:94:b6:4a:
51:70:54:3b:7c:4b:aa:dc:6f:8a:0e:e9:58:e5:a4:6c:3b:fa:
65:57:49:35:1f:72:ee:8c:70:a9:88:0d:35:4b:0f:0b:21:0d:
0c:78:7f:0f:2c:2c:78:b1:23:ea:be:80:39:7e:c6:77:73:94:
b3:f5:72:aa:68:05:f7:00:02:63:1f:83:31:08:be:45:40:a8:
8b:71:7c:8f:53:10:32:75:14:a1:19:36:21:2a:5f:b4:33:ea:
89:31:35:54:9c:80:49:b8:98:d3:d2:83:f0:55:6a:0c:01:c8:
d3:3b:79:aa:8d:c9:dd:8c:46:66:fc:c0:fe:3e:2c:d2:b9:ea:
de:1b:5f:28:34:83:a7:2f:1a:6c:ef:7e:97:28:7b:fc:da:0b:
f9:1a:c4:b6:42:2b:37:16:74:0a:37:db:28:02:3e:cf:67:bb:
96:d8:8b:40:e6:19:9f:63:4f:16:aa:b8:19:f8:3a:d8:72:fe:
a4:73:48:f8:34:f8:13:29:50:ab:14:27:a7:57:69:52:a1:cc:
d5:16:be:a2:d1:c5:0b:c9:04:5e:db:a1:34:45:39:b6:46:1a:
42:71:b8:82
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUUOAsrsOm/im1eDkDXe4f3hrTdzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI5ZmUzOTcwMzQ5N2I4MDk0MTJhYTdkOWI1M2QxMGM1
YTBhODZiNDAeFw0yNDA3MDUyMjI3NDJaFw0yNTA3MDQyMjMyNDJaMDMxMTAvBgNV
BAMTKEQwM0Q3QTNDOEFGMEEwNDAzMjA4RDAzQTRDMjA4RUQyRTBFNEE5M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlNqnLyZXnGXVAoq229+CWxJj
5iQhZeqHcgRtYVPjQlBQDpsBPPDz/GtoefKHo/ww8muV0GkzUmtMm2TastzWM6Bj
pOgVjEbs+JJ/pQ+yfvQsVz6VzRl7QNO52OBdv8InAwjiOKQL+rVJ85vAjQFdNT2I
Xlcy8FWk1/Hs2tMMbSuqleyHxM5zjiQPdjV6RDCrlg/1sBEihldYYOPlZFysjWrC
SqR7ZfAYZ3IYtBvYDe3dNlRtW/YYAdcICOZthqPgp25yTUX+9YGfNqSj5772MbwA
q3E6zsMkYUGFEU4bHhKjzGj1KAz293QYTZC5vdx/BqvvctrjMLNVUfcUrdtPAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQU0D16PIrwoEAyCNA6TCCO0uDkqTowHwYDVR0j
BBgwFoAUgp/jlwNJe4CUEqp9m1PRDFoKhrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmRlMmY2NGQtZjZlNS00N2UzLWE2ZmItNjg2ZDg4ZTcx
YWU5LzYvODI5RkUzOTcwMzQ5N0I4MDk0MTJBQTdEOUI1M0QxMEM1QTBBODZCNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dwX2psd05KZTRDVUVxcDltMVBSREZv
S2hyUS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmRlMmY2NGQt
ZjZlNS00N2UzLWE2ZmItNjg2ZDg4ZTcxYWU5LzYvMzEzOTMzMmUzMTM5MzQyZTMx
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHCEjANBgkq
hkiG9w0BAQsFAAOCAQEACwTM+lrkdRTOETr7cFMj+ZaRv73uVOlj7d/+Y+Z6Pu+h
lLZKUXBUO3xLqtxvig7pWOWkbDv6ZVdJNR9y7oxwqYgNNUsPCyENDHh/DywseLEj
6r6AOX7Gd3OUs/VyqmgF9wACYx+DMQi+RUCoi3F8j1MQMnUUoRk2ISpftDPqiTE1
VJyASbiY09KD8FVqDAHI0zt5qo3J3YxGZvzA/j4s0rnq3htfKDSDpy8abO9+lyh7
/NoL+RrEtkIrNxZ0CjfbKAI+z2e7ltiLQOYZn2NPFqq4Gfg62HL+pHNI+DT4EylQ
qxQnp1dpUqHM1Ra+otHFC8kEXtuhNEU5tkYaQnG4gg==
-----END CERTIFICATE-----
Generated at Thu Jul 25 21:18:57 2024 by rpki-client on console-ams.rpki-client.org