Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139332e302f32342d3234203d3e203136323736.roa
File: 3139332e3130392e3139332e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: 8Usg6fDz8rFY+IyJTtz9MdVT5diiHpkLAA/FpfrBQcQ=
Subject key identifier: 89:CD:F4:35:9B:1C:BD:87:E8:E8:45:C3:8E:2B:0F:0B:F0:DE:E7:8B
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 1834B0BC8B9E1C64109142CCB8391AAD4E6E2DA7
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139332e302f32342d3234203d3e203136323736.roa
Signing time: Thu 28 Nov 2024 12:15:36 +0000
ROA not before: Thu 28 Nov 2024 12:10:36 +0000
ROA not after: Thu 27 Nov 2025 12:15:36 +0000
asID: 16276
IP address blocks: 193.109.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:34:b0:bc:8b:9e:1c:64:10:91:42:cc:b8:39:1a:ad:4e:6e:2d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 28 12:10:36 2024 GMT
Not After : Nov 27 12:15:36 2025 GMT
Subject: CN=89CDF4359B1CBD87E8E845C38E2B0F0BF0DEE78B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:fa:5c:3f:4b:27:2e:63:5d:96:3d:dc:0c:
02:38:1e:44:48:bb:85:70:f1:de:28:08:16:e0:b5:
bd:7b:f9:1a:55:30:7d:28:c4:67:d5:35:62:a4:b7:
57:85:38:15:f5:19:a8:f4:81:15:ad:87:f7:14:81:
fe:9b:a7:6c:e4:41:d5:57:28:ca:ae:f8:20:cc:80:
b2:6c:7c:65:76:35:1c:9e:0b:7e:33:ad:19:cd:c3:
d4:fc:e1:74:0c:05:d9:b1:e3:4a:26:63:fd:8b:5a:
2e:92:b2:3e:8a:da:37:d5:8f:2b:c6:04:79:ad:a2:
09:4c:7b:c6:1b:8c:4a:7d:6f:b9:f3:a2:a8:15:1a:
38:9a:e0:c0:80:39:c3:8a:3f:71:b2:7d:a3:d4:8e:
83:06:38:d7:23:bf:36:79:08:02:7e:ae:f1:28:43:
ec:aa:3d:a2:ad:fa:7d:96:0a:c3:fc:e6:c8:8c:af:
a9:99:8a:b6:7c:86:a7:10:fd:05:c6:7f:a8:bb:34:
55:cb:b7:c1:86:0f:af:5e:f1:f9:07:15:13:c6:1a:
f8:15:fa:19:3a:1a:29:7c:35:21:c8:f0:f3:70:a5:
c5:ed:83:b6:5d:99:8a:70:15:e8:5e:23:8e:ab:da:
13:2b:7b:44:d2:92:b6:05:e3:b1:fc:7a:99:a2:89:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CD:F4:35:9B:1C:BD:87:E8:E8:45:C3:8E:2B:0F:0B:F0:DE:E7:8B
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139332e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.193.0/24
Signature Algorithm: sha256WithRSAEncryption
14:59:db:11:c1:a2:fc:be:f8:e7:fe:44:31:bc:8d:1e:10:45:
ff:76:f2:5d:b5:c1:b7:ea:94:06:c7:c6:59:44:87:4f:e0:7d:
38:26:9d:25:44:d2:85:a6:d5:e2:9f:b8:0d:92:b3:80:61:74:
2c:40:ec:39:4a:82:2c:58:a7:54:c2:e0:ab:95:73:15:b8:df:
27:43:46:2a:2b:c6:57:af:bc:8d:0a:a2:91:3d:e9:b0:af:c8:
b4:65:ed:b1:3d:d8:ef:23:9b:21:6d:ad:8e:5e:a5:c6:31:06:
e0:10:40:a2:77:da:30:a2:95:cc:14:1b:67:62:1d:45:ec:82:
f5:32:74:db:c8:00:bc:a8:5c:f5:2a:09:2d:a2:b1:97:65:af:
ce:42:f1:ec:6b:12:36:ea:ff:4a:1f:d1:75:47:ee:73:24:48:
c6:d4:4e:77:de:82:3a:e7:e7:2a:a6:4b:92:18:34:8d:17:9b:
51:b5:18:a0:a3:07:db:6f:5d:cd:73:f6:7a:93:ea:67:f6:6a:
f2:9b:65:72:ad:a3:09:98:1a:36:26:1d:24:bf:25:4b:f8:e1:
5c:bf:fe:2f:b4:bc:61:4c:a9:b0:e4:28:4a:77:48:24:71:2e:
d5:a7:d8:05:db:46:24:c2:ed:a2:1f:99:23:b0:6a:d6:c2:94:
3b:3f:84:75
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUGDSwvIueHGQQkULMuDkarU5uLacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDExMjgxMjEwMzZaFw0yNTExMjcxMjE1MzZaMDMxMTAvBgNV
BAMTKDg5Q0RGNDM1OUIxQ0JEODdFOEU4NDVDMzhFMkIwRjBCRjBERUU3OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd1fpcP0snLmNdlj3cDAI4HkRI
u4Vw8d4oCBbgtb17+RpVMH0oxGfVNWKkt1eFOBX1Gaj0gRWth/cUgf6bp2zkQdVX
KMqu+CDMgLJsfGV2NRyeC34zrRnNw9T84XQMBdmx40omY/2LWi6Ssj6K2jfVjyvG
BHmtoglMe8YbjEp9b7nzoqgVGjia4MCAOcOKP3GyfaPUjoMGONcjvzZ5CAJ+rvEo
Q+yqPaKt+n2WCsP85siMr6mZirZ8hqcQ/QXGf6i7NFXLt8GGD69e8fkHFRPGGvgV
+hk6Gil8NSHI8PNwpcXtg7ZdmYpwFeheI46r2hMre0TSkrYF47H8epmiiaEVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUic30NZscvYfo6EXDjisPC/De54swHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzOTMzMmUzMTMwMzkyZTMx
MzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBbcEwDQYJKoZIhvcNAQELBQADggEBABRZ2xHBovy++Of+RDG8jR4QRf928l21
wbfqlAbHxllEh0/gfTgmnSVE0oWm1eKfuA2Ss4BhdCxA7DlKgixYp1TC4KuVcxW4
3ydDRiorxlevvI0KopE96bCvyLRl7bE92O8jmyFtrY5epcYxBuAQQKJ32jCilcwU
G2diHUXsgvUydNvIALyoXPUqCS2isZdlr85C8exrEjbq/0of0XVH7nMkSMbUTnfe
gjrn5yqmS5IYNI0Xm1G1GKCjB9tvXc1z9nqT6mf2avKbZXKtowmYGjYmHSS/JUv4
4Vy//i+0vGFMqbDkKEp3SCRxLtWn2AXbRiTC7aIfmSOwatbClDs/hHU=
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:50:13 2025 by rpki-client