Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139362e302f32342d3234203d3e20383334.roa
File: 3139332e3130392e3139362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: IFLu6Lkv9XG2yXf6Zl3kd0geG7PY4MmNaQCW37pcjLE=
Subject key identifier: 6F:30:E0:EC:CE:68:68:2E:C5:40:C6:34:0D:83:B4:A4:E0:79:41:DD
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 340C6B2E209D338BE8937CF0D0518BA6DCFFBD1B
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139362e302f32342d3234203d3e20383334.roa
Signing time: Fri 06 Sep 2024 00:00:28 +0000
ROA not before: Thu 05 Sep 2024 23:55:28 +0000
ROA not after: Fri 05 Sep 2025 00:00:28 +0000
asID: 834
IP address blocks: 193.109.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 15:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0c:6b:2e:20:9d:33:8b:e8:93:7c:f0:d0:51:8b:a6:dc:ff:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Sep 5 23:55:28 2024 GMT
Not After : Sep 5 00:00:28 2025 GMT
Subject: CN=6F30E0ECCE68682EC540C6340D83B4A4E07941DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:0a:46:43:0e:2b:ad:49:23:bd:44:c0:da:
0a:b0:02:c5:71:18:a3:c6:55:68:0c:49:bf:11:99:
87:b9:85:c9:5f:c5:4b:f4:7c:fd:88:cd:04:ad:58:
13:a5:a5:e0:f3:73:9c:30:81:a1:a1:18:8b:7e:34:
d1:c5:22:d3:6f:46:7d:a1:35:8a:f6:b9:cf:a7:1e:
19:7f:12:46:a9:4a:19:c4:03:78:08:fa:8e:e3:27:
08:8e:5f:de:0a:bd:53:e2:65:23:5f:e8:62:9d:cb:
ac:ba:bb:f9:e4:a2:bb:68:cd:2b:a6:73:9c:6a:95:
03:b6:01:dc:76:53:df:e6:6d:dd:44:a8:9e:aa:8a:
d2:67:20:35:e2:6c:9d:3f:cc:4d:59:e5:4d:2e:d7:
6b:f4:6b:c8:4c:24:01:f2:f1:44:ab:fb:41:be:29:
83:15:e4:22:9b:7f:16:b4:75:21:61:db:42:46:10:
4b:27:1d:de:3e:01:62:94:08:cf:97:21:38:d8:a0:
7f:67:16:22:ee:7b:b9:2b:b8:d1:80:65:4c:30:90:
09:41:15:84:2a:d3:77:70:40:bc:b6:e0:42:fa:75:
44:da:43:42:ad:fd:f7:54:a5:cf:14:b1:f7:14:03:
e0:61:b5:48:58:ee:0b:70:c8:45:6c:d0:fb:8a:fd:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:30:E0:EC:CE:68:68:2E:C5:40:C6:34:0D:83:B4:A4:E0:79:41:DD
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:10:b7:cd:d7:02:ff:ec:8b:62:2e:b9:3a:3b:45:53:00:b3:
38:86:ee:8e:2f:4b:c2:9f:73:b2:7d:2d:16:b8:5b:2c:cf:bd:
12:30:7c:f7:0a:f9:26:e7:9d:35:3a:d4:e2:9c:a7:12:e2:62:
ec:f1:75:84:1f:9d:69:09:71:32:d3:d5:5b:ca:9c:2c:ef:b6:
f7:35:45:45:96:a5:39:14:a0:02:01:29:02:a8:b8:80:1f:21:
f3:cd:0d:e8:3f:d5:ff:fa:2c:c1:ac:02:56:87:d1:98:65:55:
6c:a7:18:ba:7f:bf:d7:10:56:ab:73:26:b4:72:8f:f3:19:57:
c2:22:6a:c1:2b:26:04:d6:e2:68:d8:21:e7:fc:e3:f6:ee:e5:
be:80:e0:6b:91:d0:80:17:8f:79:48:b4:e5:c4:af:b4:37:ab:
41:13:a7:78:eb:b5:aa:5f:6c:5c:cc:7b:23:c5:d2:4a:1d:35:
ef:63:62:43:ab:2d:40:d4:9b:f7:09:79:4f:7d:5c:26:59:37:
69:fa:b0:1c:e5:0a:da:52:5b:35:6b:03:17:e3:d4:72:fc:04:
50:68:c5:52:91:10:96:87:a8:23:e5:b5:02:11:06:d1:6b:d5:
eb:5a:61:37:e6:d9:25:03:84:43:a5:90:bd:58:8f:54:dd:aa:
23:f8:f4:26
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNAxrLiCdM4vok3zw0FGLptz/vRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDA5MDUyMzU1MjhaFw0yNTA5MDUwMDAwMjhaMDMxMTAvBgNV
BAMTKDZGMzBFMEVDQ0U2ODY4MkVDNTQwQzYzNDBEODNCNEE0RTA3OTQxREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJApGQw4rrUkjvUTA2gqwAsVx
GKPGVWgMSb8RmYe5hclfxUv0fP2IzQStWBOlpeDzc5wwgaGhGIt+NNHFItNvRn2h
NYr2uc+nHhl/EkapShnEA3gI+o7jJwiOX94KvVPiZSNf6GKdy6y6u/nkortozSum
c5xqlQO2Adx2U9/mbd1EqJ6qitJnIDXibJ0/zE1Z5U0u12v0a8hMJAHy8USr+0G+
KYMV5CKbfxa0dSFh20JGEEsnHd4+AWKUCM+XITjYoH9nFiLue7kruNGAZUwwkAlB
FYQq03dwQLy24EL6dUTaQ0Kt/fdUpc8UsfcUA+BhtUhY7gtwyEVs0PuK/VjzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUbzDg7M5oaC7FQMY0DYO0pOB5Qd0wHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzOTMzMmUzMTMwMzkyZTMx
MzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFt
xDANBgkqhkiG9w0BAQsFAAOCAQEAfhC3zdcC/+yLYi65OjtFUwCzOIbuji9Lwp9z
sn0tFrhbLM+9EjB89wr5JuedNTrU4pynEuJi7PF1hB+daQlxMtPVW8qcLO+29zVF
RZalORSgAgEpAqi4gB8h880N6D/V//oswawCVofRmGVVbKcYun+/1xBWq3MmtHKP
8xlXwiJqwSsmBNbiaNgh5/zj9u7lvoDga5HQgBePeUi05cSvtDerQROneOu1ql9s
XMx7I8XSSh0172NiQ6stQNSb9wl5T31cJlk3afqwHOUK2lJbNWsDF+PUcvwEUGjF
UpEQloeoI+W1AhEG0WvV61phN+bZJQOEQ6WQvViPVN2qI/j0Jg==
-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:14 2024 by rpki-client on console-fra.rpki-client.org