Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139342e3136392e3231372e302f32342d3234203d3e203230343733.roa
File: 3139342e3136392e3231372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: qY31Bb3JNmgBlsO4fNBLlq5pMdQ+dWFC+9SPt5vkZ44=
Subject key identifier: 56:AE:0E:1B:FD:A4:21:EB:F9:EC:54:9A:DB:5F:79:CD:9F:47:CE:3C
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 5C72C43766091EB3875C6EC5B929804814B955EF
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139342e3136392e3231372e302f32342d3234203d3e203230343733.roa
Signing time: Wed 02 Oct 2024 07:46:55 +0000
ROA not before: Wed 02 Oct 2024 07:41:55 +0000
ROA not after: Wed 01 Oct 2025 07:46:55 +0000
asID: 20473
IP address blocks: 194.169.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 10:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:72:c4:37:66:09:1e:b3:87:5c:6e:c5:b9:29:80:48:14:b9:55:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Oct 2 07:41:55 2024 GMT
Not After : Oct 1 07:46:55 2025 GMT
Subject: CN=56AE0E1BFDA421EBF9EC549ADB5F79CD9F47CE3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:25:bf:04:b4:76:bd:2e:16:f2:e9:ca:af:
c8:ca:f8:74:69:d4:08:3d:65:0c:09:e0:90:55:99:
5c:7c:a5:3c:32:2e:a5:14:1c:c3:1a:91:a7:27:e3:
2c:bb:ea:a5:88:98:68:24:50:dd:23:ae:da:38:d6:
59:59:49:e6:ba:67:32:92:64:5d:25:10:77:b3:00:
ad:b0:8c:20:25:da:d4:f6:7c:de:03:14:9b:6d:70:
e3:dd:ee:b4:1f:ec:df:2a:22:93:60:bb:23:a9:e2:
1d:07:b2:e8:21:96:ce:2c:2f:ea:4a:b6:40:38:b2:
30:7c:58:70:bc:4d:21:ea:1b:a9:d9:23:c0:ee:52:
12:fe:3a:dc:46:1c:0d:d6:b9:06:d6:77:bc:e2:dc:
7a:9e:dd:49:a5:b9:da:34:e3:42:2c:bc:a4:51:5c:
4f:4d:34:5f:01:b9:85:96:9a:06:0a:bb:6c:2e:49:
d3:9b:19:9c:91:05:8f:0d:b4:6d:71:53:ff:42:dc:
9b:f4:a0:d8:ce:26:14:42:1a:15:4f:b6:69:a9:35:
9c:45:56:67:87:48:88:b3:0d:ae:76:ae:8a:55:82:
1d:ff:6b:8f:2b:5e:34:a3:5a:6b:ac:02:16:df:cd:
75:df:67:76:ef:b3:25:48:9c:38:b8:57:c0:40:6e:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AE:0E:1B:FD:A4:21:EB:F9:EC:54:9A:DB:5F:79:CD:9F:47:CE:3C
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139342e3136392e3231372e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b5:13:68:7f:ea:dd:0f:db:23:7c:c0:d3:e2:97:63:a0:63:
cc:a3:a0:65:47:2d:1b:6d:63:0b:ce:64:73:57:0f:82:25:7a:
88:91:c4:c8:43:64:72:9f:5f:c7:e7:81:5c:8e:66:11:73:af:
1f:aa:6e:f9:36:90:a1:48:c4:c2:77:0c:f7:b1:f4:70:26:3b:
38:e5:c0:7f:31:3a:ed:b2:3f:da:74:91:09:db:2c:b1:d5:6e:
6e:a4:b1:25:d2:6c:87:39:ac:b8:7f:0c:4b:c9:81:2a:f8:6d:
f1:95:fd:24:32:91:96:1d:54:fd:af:ca:ef:44:49:68:dc:a0:
d4:4d:40:1b:16:0c:93:9b:34:34:6e:2b:6c:05:c5:f9:14:59:
55:cc:ed:f6:4b:27:90:45:5d:48:2f:05:d1:43:c7:6f:69:d2:
08:f7:fe:ad:a3:c0:6d:00:04:d5:61:73:46:b1:2c:94:80:59:
9b:21:69:67:c3:2a:45:a0:7d:7c:93:af:3e:b7:91:e3:52:22:
9c:6c:a8:4f:b9:6b:4b:10:52:37:cd:ee:f6:9b:1f:f1:e2:8d:
a1:2f:d0:e3:b8:76:e7:27:0c:11:7c:6a:6e:c6:73:48:e9:01:
68:69:fd:e4:2a:62:e8:5b:e5:a2:ee:94:ad:c3:b6:f5:66:71:
4c:74:85:f8
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXHLEN2YJHrOHXG7FuSmASBS5Ve8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDEwMDIwNzQxNTVaFw0yNTEwMDEwNzQ2NTVaMDMxMTAvBgNV
BAMTKDU2QUUwRTFCRkRBNDIxRUJGOUVDNTQ5QURCNUY3OUNEOUY0N0NFM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtCW/BLR2vS4W8unKr8jK+HRp
1Ag9ZQwJ4JBVmVx8pTwyLqUUHMMakacn4yy76qWImGgkUN0jrto41llZSea6ZzKS
ZF0lEHezAK2wjCAl2tT2fN4DFJttcOPd7rQf7N8qIpNguyOp4h0Hsughls4sL+pK
tkA4sjB8WHC8TSHqG6nZI8DuUhL+OtxGHA3WuQbWd7zi3Hqe3Umludo040IsvKRR
XE9NNF8BuYWWmgYKu2wuSdObGZyRBY8NtG1xU/9C3Jv0oNjOJhRCGhVPtmmpNZxF
VmeHSIizDa52ropVgh3/a48rXjSjWmusAhbfzXXfZ3bvsyVInDi4V8BAbr3LAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUVq4OG/2kIev57FSa2195zZ9HzjwwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzOTM0MmUzMTM2MzkyZTMy
MzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCqdkwDQYJKoZIhvcNAQELBQADggEBAEO1E2h/6t0P2yN8wNPil2OgY8yjoGVH
LRttYwvOZHNXD4IleoiRxMhDZHKfX8fngVyOZhFzrx+qbvk2kKFIxMJ3DPex9HAm
OzjlwH8xOu2yP9p0kQnbLLHVbm6ksSXSbIc5rLh/DEvJgSr4bfGV/SQykZYdVP2v
yu9ESWjcoNRNQBsWDJObNDRuK2wFxfkUWVXM7fZLJ5BFXUgvBdFDx29p0gj3/q2j
wG0ABNVhc0axLJSAWZshaWfDKkWgfXyTrz63keNSIpxsqE+5a0sQUjfN7vabH/Hi
jaEv0OO4ducnDBF8am7Gc0jpAWhp/eQqYuhb5aLulK3DtvVmcUx0hfg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:10 2025 by rpki-client