Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20383334.roa
File: 3139342e3135302e3231312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 40zVKu2xQ6hFLeZUAGshZYEwQnWaAvXhthizpK19HUw=
Subject key identifier: 35:CA:07:FF:B9:D8:BF:BD:4E:92:FF:79:70:2D:53:BC:A3:EC:5C:0C
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 7D5E3E13E8BDD6A4A03CF61212B1366996FC7434
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20383334.roa
Signing time: Tue 08 Aug 2023 10:00:04 +0000
ROA not before: Tue 08 Aug 2023 09:55:04 +0000
ROA not after: Tue 06 Aug 2024 10:00:04 +0000
asID: 834
IP address blocks: 194.150.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5e:3e:13:e8:bd:d6:a4:a0:3c:f6:12:12:b1:36:69:96:fc:74:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Aug 8 09:55:04 2023 GMT
Not After : Aug 6 10:00:04 2024 GMT
Subject: CN=35CA07FFB9D8BFBD4E92FF79702D53BCA3EC5C0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:80:a5:1c:aa:df:aa:d1:af:c3:c7:2f:5b:
b0:76:c1:64:7e:51:81:7d:47:17:af:a1:ee:16:e3:
47:15:11:4f:d6:51:41:c5:53:7d:e0:11:15:69:f8:
ec:41:23:0e:f4:fb:5f:8c:97:5a:da:cd:bd:f2:61:
ed:ba:66:93:6c:aa:fd:4a:7c:ad:95:90:9f:79:1b:
10:02:d1:cb:98:b3:54:e8:bc:ff:14:9f:7d:aa:b9:
f1:25:3d:a5:4e:7f:11:20:ac:52:ed:13:b3:0e:55:
10:9b:75:b7:65:8d:81:81:8d:19:06:be:d1:4d:42:
b1:d3:c1:1d:87:c5:03:83:96:91:7b:36:09:17:f8:
8f:38:9d:3e:8f:b5:99:09:e7:8d:eb:08:7e:b6:b3:
82:4c:e0:86:aa:34:8a:ba:26:4d:6a:c2:42:78:46:
f1:56:5d:d1:de:5a:05:6a:22:90:20:e0:7f:2f:f4:
f4:60:1a:78:b3:d8:16:00:2f:61:3e:82:29:a1:f4:
b2:d2:b4:4a:f0:2b:ad:e7:0f:77:19:4a:ae:2a:e6:
d2:98:23:e9:60:37:de:c5:db:a2:4e:2c:47:26:6b:
4b:c5:df:38:b1:b7:3c:2c:33:72:09:7e:bb:37:dd:
f4:89:4e:d1:88:d6:b7:f6:9c:79:85:ce:88:14:2f:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:07:FF:B9:D8:BF:BD:4E:92:FF:79:70:2D:53:BC:A3:EC:5C:0C
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.211.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:0a:32:20:c2:4d:8e:01:68:3c:e6:16:8f:4a:cf:c0:a5:0b:
e7:3f:00:08:6c:bd:63:65:30:6e:dc:9f:45:e7:09:e4:28:26:
a6:bc:85:23:0e:a0:af:0c:b5:1b:f6:ee:aa:00:42:8d:bb:a9:
b2:5c:51:78:cd:31:8d:f5:d1:d5:53:48:6a:7d:05:92:9e:25:
82:e0:3e:2f:0d:4e:bf:05:5e:4c:56:19:67:29:c8:95:c3:8a:
95:1d:f8:ad:84:a9:22:02:a2:18:5b:cd:dc:de:7d:03:fc:f3:
85:4f:ec:3d:55:06:51:37:f8:95:69:96:38:dc:7f:a0:e1:0b:
dc:79:3b:da:1a:81:e5:68:f0:b7:2e:dd:a2:fa:28:76:18:9d:
b1:46:90:7b:1c:82:fd:24:e7:ee:7f:aa:94:12:38:28:fb:5f:
1b:b0:d7:69:d5:1e:7c:f0:9e:e5:52:5d:51:58:c8:2e:45:90:
96:70:e2:2f:87:50:0b:bf:a2:08:14:42:b8:de:c2:11:06:4e:
fe:d7:b4:c9:ff:bd:8a:04:de:4a:4e:80:34:75:d9:6d:43:1b:
e6:1d:39:3a:ef:ce:74:a3:20:34:14:4a:bd:bd:90:25:21:e0:
f4:58:1a:a9:af:84:7f:a8:1e:3f:c3:c7:b0:65:d7:0f:c8:69:
57:00:d3:60
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfV4+E+i91qSgPPYSErE2aZb8dDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA4MDgwOTU1MDRaFw0yNDA4MDYxMDAwMDRaMDMxMTAvBgNV
BAMTKDM1Q0EwN0ZGQjlEOEJGQkQ0RTkyRkY3OTcwMkQ1M0JDQTNFQzVDMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4g4ClHKrfqtGvw8cvW7B2wWR+
UYF9Rxevoe4W40cVEU/WUUHFU33gERVp+OxBIw70+1+Ml1razb3yYe26ZpNsqv1K
fK2VkJ95GxAC0cuYs1TovP8Un32qufElPaVOfxEgrFLtE7MOVRCbdbdljYGBjRkG
vtFNQrHTwR2HxQODlpF7NgkX+I84nT6PtZkJ543rCH62s4JM4IaqNIq6Jk1qwkJ4
RvFWXdHeWgVqIpAg4H8v9PRgGniz2BYAL2E+gimh9LLStErwK63nD3cZSq4q5tKY
I+lgN97F26JOLEcma0vF3zixtzwsM3IJfrs33fSJTtGI1rf2nHmFzogUL/+nAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUNcoH/7nYv71Okv95cC1TvKPsXAwwHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzEzOTM0MmUzMTM1MzAyZTMy
MzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKW
0zANBgkqhkiG9w0BAQsFAAOCAQEAqgoyIMJNjgFoPOYWj0rPwKUL5z8ACGy9Y2Uw
btyfRecJ5CgmpryFIw6grwy1G/buqgBCjbupslxReM0xjfXR1VNIan0Fkp4lguA+
Lw1OvwVeTFYZZynIlcOKlR34rYSpIgKiGFvN3N59A/zzhU/sPVUGUTf4lWmWONx/
oOEL3Hk72hqB5Wjwty7dovoodhidsUaQexyC/STn7n+qlBI4KPtfG7DXadUefPCe
5VJdUVjILkWQlnDiL4dQC7+iCBRCuN7CEQZO/te0yf+9igTeSk6ANHXZbUMb5h05
Ou/OdKMgNBRKvb2QJSHg9Fgaqa+Ef6geP8PHsGXXD8hpVwDTYA==
Generated at Sat Aug 26 11:29:40 2023 by rpki-client on console-ams.rpki-client.org