Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20323132303237.roa
File: 3139332e3130392e3139372e302f32342d3234203d3e20323132303237.roa (raw, json)
Hash identifier: Syk3cmEZTE+XmXPWCtOc8P91a76Vz0ua8paVySUbwlk=
Subject key identifier: B1:2F:97:94:EA:8A:E3:82:D3:AF:26:22:A2:1B:EF:87:80:98:64:11
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 31B9EDAB4F6C894CE9511E3018C0C4C13A9F0C4A
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20323132303237.roa
Signing time: Wed 14 Feb 2024 07:44:24 +0000
ROA not before: Wed 14 Feb 2024 07:39:24 +0000
ROA not after: Wed 12 Feb 2025 07:44:24 +0000
asID: 212027
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b9:ed:ab:4f:6c:89:4c:e9:51:1e:30:18:c0:c4:c1:3a:9f:0c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Feb 14 07:39:24 2024 GMT
Not After : Feb 12 07:44:24 2025 GMT
Subject: CN=B12F9794EA8AE382D3AF2622A21BEF8780986411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:22:d5:6d:aa:cf:47:b8:d2:0c:85:1a:f5:7d:
ea:d8:20:27:ae:aa:6f:78:46:f4:9e:30:27:d8:a4:
83:6f:5e:ae:8a:23:36:b5:0f:4d:a6:1a:e4:89:24:
f0:20:22:01:09:c1:10:36:8c:19:d9:0c:e5:09:15:
1d:04:79:92:dd:e1:55:60:25:c6:98:3d:f6:a5:dd:
56:c3:04:de:50:b5:f2:b4:fa:f3:97:59:3a:fe:0c:
85:bb:96:bb:16:4f:f2:3c:b4:a9:5f:c3:f2:a5:99:
9e:af:fc:4c:58:c9:47:45:35:ba:5e:28:3f:ed:13:
e2:55:19:54:ce:cc:89:05:16:26:32:97:74:39:18:
21:51:10:ed:00:a5:73:26:e5:98:d7:79:4f:39:7e:
6e:83:98:52:f7:0f:dd:46:00:97:03:29:88:75:8e:
10:80:91:b8:ad:89:42:8e:b9:58:09:f3:92:5b:0b:
7f:e6:9a:89:76:c7:a6:f2:4a:9f:d5:d9:9b:21:d0:
c9:b6:cc:b3:7d:d3:5a:6c:47:45:7e:ab:2d:4a:d3:
6a:a4:d2:10:8c:be:01:cd:d1:78:66:c7:a9:75:21:
a9:a1:fc:ec:b3:f1:f8:3e:75:91:65:59:21:83:b2:
bb:66:d8:39:2c:76:1d:56:b6:be:3e:f4:c6:fc:5c:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2F:97:94:EA:8A:E3:82:D3:AF:26:22:A2:1B:EF:87:80:98:64:11
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20323132303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a6:7d:ab:95:ac:b9:f2:db:af:61:c0:c6:a7:f3:95:73:0d:
74:33:44:88:1d:08:ce:8b:6c:b9:0b:9e:d1:48:11:e6:6f:ab:
02:24:b0:e5:90:41:56:d3:b7:d3:17:50:1d:e8:19:67:e9:63:
ed:77:c2:da:48:fb:d0:09:12:8e:f5:b1:0e:26:3d:ee:5f:0e:
a9:3d:7e:44:7d:f1:cb:be:28:be:8d:a0:46:1f:6a:1b:08:1f:
9f:72:6e:a7:ff:ac:aa:45:be:3c:41:82:12:a9:4d:3c:68:b9:
b9:84:c3:b3:ca:2e:50:68:9c:af:93:d4:47:5d:4a:90:bf:d6:
73:6b:ed:d4:08:07:f9:a1:2d:d8:d9:15:30:03:c1:39:40:38:
21:e1:68:8f:94:3c:8f:42:e0:06:ce:39:87:c8:2b:70:55:74:
98:5a:49:f8:b3:11:2c:48:49:12:73:fa:69:4e:80:9d:3b:8e:
ed:1c:b3:ce:95:f1:e4:9d:2f:93:78:36:30:46:de:3a:e7:62:
66:8d:56:d3:89:a8:cb:fb:37:6a:86:b3:05:13:5f:2c:94:59:
77:dd:42:db:43:33:b9:c6:c7:92:4a:72:dc:6e:be:bd:ae:94:
88:2e:18:4c:c7:c6:3d:29:49:47:69:1c:00:99:e7:4c:2d:02:
c3:9f:8d:a4
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUMbntq09siUzpUR4wGMDEwTqfDEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDAyMTQwNzM5MjRaFw0yNTAyMTIwNzQ0MjRaMDMxMTAvBgNV
BAMTKEIxMkY5Nzk0RUE4QUUzODJEM0FGMjYyMkEyMUJFRjg3ODA5ODY0MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvItVtqs9HuNIMhRr1ferYICeu
qm94RvSeMCfYpINvXq6KIza1D02mGuSJJPAgIgEJwRA2jBnZDOUJFR0EeZLd4VVg
JcaYPfal3VbDBN5QtfK0+vOXWTr+DIW7lrsWT/I8tKlfw/KlmZ6v/ExYyUdFNbpe
KD/tE+JVGVTOzIkFFiYyl3Q5GCFREO0ApXMm5ZjXeU85fm6DmFL3D91GAJcDKYh1
jhCAkbitiUKOuVgJ85JbC3/mmol2x6bySp/V2Zsh0Mm2zLN901psR0V+qy1K02qk
0hCMvgHN0Xhmx6l1Iamh/Oyz8fg+dZFlWSGDsrtm2Dksdh1Wtr4+9Mb8XMlRAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUsS+XlOqK44LTryYiohvvh4CYZBEwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzOTMzMmUzMTMwMzkyZTMx
MzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMwMzIzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMFtxTANBgkqhkiG9w0BAQsFAAOCAQEAXKZ9q5WsufLbr2HAxqfzlXMNdDNE
iB0IzotsuQue0UgR5m+rAiSw5ZBBVtO30xdQHegZZ+lj7XfC2kj70AkSjvWxDiY9
7l8OqT1+RH3xy74ovo2gRh9qGwgfn3Jup/+sqkW+PEGCEqlNPGi5uYTDs8ouUGic
r5PUR11KkL/Wc2vt1AgH+aEt2NkVMAPBOUA4IeFoj5Q8j0LgBs45h8grcFV0mFpJ
+LMRLEhJEnP6aU6AnTuO7RyzzpXx5J0vk3g2MEbeOudiZo1W04moy/s3aoazBRNf
LJRZd91C20MzucbHkkpy3G6+va6UiC4YTMfGPSlJR2kcAJnnTC0Cw5+NpA==
Generated at Sat Mar 9 02:53:50 2024 by rpki-client on console-ams.rpki-client.org