Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139382e302f32342d3234203d3e20383334.roa
File: 3139332e3130392e3139382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: q8JLgcUgWltK6asJuHAFzJfF/+4e3znwsUvX+vjncI4=
Subject key identifier: 72:6B:D4:AC:82:61:0B:78:8A:DC:BA:AD:F9:DF:6D:0C:8D:8B:65:9B
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 7FE9A1245718BAFB350FC5BDF8ABE57A9731C656
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139382e302f32342d3234203d3e20383334.roa
Signing time: Fri 10 Nov 2023 13:32:25 +0000
ROA not before: Fri 10 Nov 2023 13:27:25 +0000
ROA not after: Fri 08 Nov 2024 13:32:25 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e9:a1:24:57:18:ba:fb:35:0f:c5:bd:f8:ab:e5:7a:97:31:c6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 10 13:27:25 2023 GMT
Not After : Nov 8 13:32:25 2024 GMT
Subject: CN=726BD4AC82610B788ADCBAADF9DF6D0C8D8B659B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:9a:d2:83:70:00:87:b8:ba:92:68:dc:4e:
90:52:2e:35:87:e8:71:10:d2:e1:7b:84:03:bc:a6:
9c:de:c0:b1:94:ef:c0:a4:ae:a9:81:02:ce:86:33:
64:9b:de:73:c6:95:56:bd:f4:3d:5e:fe:ba:a6:ed:
e4:f9:7e:9c:3f:63:8b:e8:30:68:0d:3f:91:fd:be:
b1:12:20:47:7e:36:39:a1:38:90:a4:95:7e:e0:80:
92:b9:30:da:2a:79:96:95:00:25:17:9d:ec:a9:5d:
b0:cc:01:7d:95:b5:7d:69:45:39:9e:3e:02:95:1a:
71:26:4d:3a:82:89:03:aa:9f:c3:52:ff:67:2f:51:
92:59:56:14:80:3f:58:59:37:b4:36:64:e3:a6:aa:
c4:3f:2e:6a:7d:c7:9b:ed:d2:ba:4e:bd:7b:4b:54:
a2:c0:f0:52:99:4e:f4:b4:43:24:79:b7:75:05:79:
22:37:d4:f4:71:ae:d2:43:80:ab:e9:4e:5b:09:8f:
a0:df:7b:9a:67:20:9e:8a:e9:38:84:1e:ca:14:5d:
a5:b5:a9:03:73:ae:6f:42:55:8f:c4:23:4e:92:40:
71:3c:41:82:ea:82:9d:f3:b7:05:55:b7:67:f6:eb:
19:15:66:87:4e:09:2d:9d:7a:de:db:df:a8:7d:ab:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6B:D4:AC:82:61:0B:78:8A:DC:BA:AD:F9:DF:6D:0C:8D:8B:65:9B
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b0:36:03:9d:26:c5:bd:dd:2e:e1:d5:a5:ad:53:98:02:06:
a7:05:0c:85:44:04:54:7a:de:f0:04:d0:6c:2d:63:dd:31:0e:
8a:d5:17:39:f4:28:4e:78:12:f6:74:5e:55:34:3d:b5:59:0c:
2c:7f:82:02:f1:9d:31:d3:b6:fa:a7:fd:b0:5b:bc:5e:79:b1:
80:59:48:a2:a9:2a:3b:60:ed:db:7a:cb:e9:ea:2d:7c:00:41:
01:a5:f9:22:21:3c:fb:70:2f:2f:c8:51:c6:e7:48:90:90:64:
d1:5a:2c:5f:03:74:0f:5f:b6:82:3c:5d:d5:46:8b:b6:30:17:
bf:f1:ef:1e:3f:95:b5:a1:a4:03:3a:8b:4d:35:74:37:99:ef:
b9:ca:26:2d:35:d5:3f:f4:e2:9c:8f:2b:d2:62:8d:72:b6:5e:
09:81:33:98:45:8c:d3:27:aa:f5:9a:1d:f0:57:a5:18:d6:cc:
91:1f:05:fb:cb:e4:9e:81:6c:2d:be:df:03:4a:2f:8f:2f:88:
96:62:d2:d6:3e:d1:1b:89:c8:b4:24:4a:b1:90:88:72:08:c2:
dd:4a:80:01:e2:c8:8d:4d:0e:aa:06:fb:fd:84:fa:45:81:52:
fb:24:d8:e5:f4:7b:03:f7:02:0c:02:6a:8f:ff:d0:8a:61:3e:
eb:af:c2:d6
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUf+mhJFcYuvs1D8W9+KvlepcxxlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yMzExMTAxMzI3MjVaFw0yNDExMDgxMzMyMjVaMDMxMTAvBgNV
BAMTKDcyNkJENEFDODI2MTBCNzg4QURDQkFBREY5REY2RDBDOEQ4QjY1OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg0JrSg3AAh7i6kmjcTpBSLjWH
6HEQ0uF7hAO8ppzewLGU78CkrqmBAs6GM2Sb3nPGlVa99D1e/rqm7eT5fpw/Y4vo
MGgNP5H9vrESIEd+NjmhOJCklX7ggJK5MNoqeZaVACUXneypXbDMAX2VtX1pRTme
PgKVGnEmTTqCiQOqn8NS/2cvUZJZVhSAP1hZN7Q2ZOOmqsQ/Lmp9x5vt0rpOvXtL
VKLA8FKZTvS0QyR5t3UFeSI31PRxrtJDgKvpTlsJj6Dfe5pnIJ6K6TiEHsoUXaW1
qQNzrm9CVY/EI06SQHE8QYLqgp3ztwVVt2f26xkVZodOCS2det7b36h9q1ZfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUcmvUrIJhC3iK3Lqt+d9tDI2LZZswHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzOTMzMmUzMTMwMzkyZTMx
MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFt
xjANBgkqhkiG9w0BAQsFAAOCAQEARrA2A50mxb3dLuHVpa1TmAIGpwUMhUQEVHre
8ATQbC1j3TEOitUXOfQoTngS9nReVTQ9tVkMLH+CAvGdMdO2+qf9sFu8XnmxgFlI
oqkqO2Dt23rL6eotfABBAaX5IiE8+3AvL8hRxudIkJBk0VosXwN0D1+2gjxd1UaL
tjAXv/HvHj+VtaGkAzqLTTV0N5nvucomLTXVP/TinI8r0mKNcrZeCYEzmEWM0yeq
9Zod8FelGNbMkR8F+8vknoFsLb7fA0ovjy+IlmLS1j7RG4nItCRKsZCIcgjC3UqA
AeLIjU0Oqgb7/YT6RYFS+yTY5fR7A/cCDAJqj//QimE+66/C1g==
Generated at Mon Nov 13 06:53:16 2023 by rpki-client on console-ams.rpki-client.org