Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20383334.roa
File: 3139332e3130392e3139372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: g5s4vCVMifePT2cqRpQm9CEF9AHiwk1PijwtUXgc8qs=
Subject key identifier: 8C:45:E3:6C:24:84:73:13:FD:03:EA:7D:62:50:18:05:69:F8:12:60
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 3D3A3A04FE7C6D307F469187E69093FE0759E8AC
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20383334.roa
Signing time: Thu 14 Mar 2024 07:36:54 +0000
ROA not before: Thu 14 Mar 2024 07:31:54 +0000
ROA not after: Thu 13 Mar 2025 07:36:54 +0000
asID: 834
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 15:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3a:3a:04:fe:7c:6d:30:7f:46:91:87:e6:90:93:fe:07:59:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Mar 14 07:31:54 2024 GMT
Not After : Mar 13 07:36:54 2025 GMT
Subject: CN=8C45E36C24847313FD03EA7D6250180569F81260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:c8:df:64:86:5b:7d:88:19:c5:36:58:5f:
a4:7b:e1:ff:e7:31:fd:2e:69:11:4b:ce:d8:7c:1b:
f6:29:b7:65:73:75:1e:86:ca:47:cb:4c:5b:2b:43:
a9:7a:7b:7b:f6:83:02:15:dd:67:71:5b:bc:38:af:
63:99:1d:07:4e:d9:4c:12:bb:52:53:c7:63:3e:e8:
cd:41:06:6f:67:24:7a:2d:a4:a1:88:f8:ea:02:9d:
ce:4b:6e:60:f1:ab:b3:e3:da:65:3f:6f:0d:a5:5b:
0f:f6:33:b1:5f:70:61:3a:de:6c:e7:9e:e9:62:f9:
ff:85:4d:bc:42:16:b3:d4:54:05:52:21:52:c5:cf:
99:48:b5:99:df:36:00:df:75:6d:b4:d6:8a:26:d2:
39:71:3e:9f:f3:2b:3f:c5:aa:e1:69:78:ea:df:59:
a3:40:34:1a:3a:1c:7d:78:81:a4:46:cd:a4:6f:c2:
c5:cb:00:85:47:75:02:f2:79:b4:1f:23:3f:fe:4e:
54:cf:d0:20:68:3a:b4:f7:b4:32:a2:c0:df:c7:63:
c6:12:a1:1b:82:e3:db:34:fb:0a:be:f3:38:d1:ca:
a0:4f:af:be:4b:db:9c:97:d5:b2:46:e4:65:7d:5d:
8a:7f:4a:a2:4e:20:85:8a:1c:c9:c0:2d:8a:85:3b:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:45:E3:6C:24:84:73:13:FD:03:EA:7D:62:50:18:05:69:F8:12:60
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:96:e7:83:6c:40:34:f3:05:c5:d5:71:38:6a:4a:b4:c6:0f:
8d:cd:ee:8a:10:75:f7:7f:e4:de:97:57:b7:5b:b9:e4:df:e6:
35:2d:f0:00:c0:48:9b:b8:f0:ec:2c:e2:13:d7:f5:4a:4f:02:
79:a4:bb:2f:55:7d:26:2d:c3:53:55:14:55:80:33:85:40:7f:
cf:d9:4a:ba:e6:8c:91:8e:8d:04:37:1e:a6:3d:ed:1e:99:e0:
cf:ea:45:88:d6:30:f9:ad:d3:17:1a:3e:12:b0:77:37:ed:2e:
59:ba:8c:18:2e:6b:b8:f5:9a:fe:14:18:ac:e3:5d:03:5a:62:
50:61:fc:2f:0d:6a:27:c7:c9:17:54:2b:6f:be:4e:b7:91:43:
b6:14:f4:3d:ba:cf:54:62:24:00:0f:60:d7:8f:2d:87:c8:ba:
f0:1d:13:66:30:0a:86:d9:0c:d6:b9:6f:47:92:16:46:cc:1d:
c0:8c:f0:b0:2c:08:2b:46:46:48:d4:52:0d:6a:18:e0:5d:d2:
87:6f:6a:65:df:fc:30:19:17:3b:44:a4:e0:03:a0:85:4d:11:
a7:3d:a2:d9:f3:40:db:03:2a:75:10:84:d8:46:01:83:cd:13:
bb:1a:df:d1:d5:7a:87:61:63:a6:dc:ca:50:4c:d8:cc:10:8d:
a4:a7:62:49
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUPTo6BP58bTB/RpGH5pCT/gdZ6KwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDAzMTQwNzMxNTRaFw0yNTAzMTMwNzM2NTRaMDMxMTAvBgNV
BAMTKDhDNDVFMzZDMjQ4NDczMTNGRDAzRUE3RDYyNTAxODA1NjlGODEyNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQJcjfZIZbfYgZxTZYX6R74f/n
Mf0uaRFLzth8G/Ypt2VzdR6GykfLTFsrQ6l6e3v2gwIV3WdxW7w4r2OZHQdO2UwS
u1JTx2M+6M1BBm9nJHotpKGI+OoCnc5LbmDxq7Pj2mU/bw2lWw/2M7FfcGE63mzn
nuli+f+FTbxCFrPUVAVSIVLFz5lItZnfNgDfdW201oom0jlxPp/zKz/FquFpeOrf
WaNANBo6HH14gaRGzaRvwsXLAIVHdQLyebQfIz/+TlTP0CBoOrT3tDKiwN/HY8YS
oRuC49s0+wq+8zjRyqBPr75L25yX1bJG5GV9XYp/SqJOIIWKHMnALYqFOxStAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUjEXjbCSEcxP9A+p9YlAYBWn4EmAwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzOTMzMmUzMTMwMzkyZTMx
MzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFt
xTANBgkqhkiG9w0BAQsFAAOCAQEAL5bng2xANPMFxdVxOGpKtMYPjc3uihB193/k
3pdXt1u55N/mNS3wAMBIm7jw7CziE9f1Sk8CeaS7L1V9Ji3DU1UUVYAzhUB/z9lK
uuaMkY6NBDcepj3tHpngz+pFiNYw+a3TFxo+ErB3N+0uWbqMGC5ruPWa/hQYrONd
A1piUGH8Lw1qJ8fJF1Qrb75Ot5FDthT0PbrPVGIkAA9g148th8i68B0TZjAKhtkM
1rlvR5IWRswdwIzwsCwIK0ZGSNRSDWoY4F3Sh29qZd/8MBkXO0Sk4AOghU0Rpz2i
2fNA2wMqdRCE2EYBg80Tuxrf0dV6h2FjptzKUEzYzBCNpKdiSQ==
Generated at Sun Mar 17 15:56:51 2024 by rpki-client on console-ams.rpki-client.org