Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e203439333932.roa
File: 3134362e31392e32332e302f32342d3234203d3e203439333932.roa (raw, json)
Hash identifier: En8fQJu34Y6TA4PaKkD06SrCrYRKLHJPUoeKuRxRqDY=
Subject key identifier: 8D:AF:94:DE:0B:1F:A8:42:CC:6C:CA:74:21:D4:8C:EA:88:61:1D:D7
Certificate issuer: /CN=493377f0bd467548da4ccd542329a7156b8972a2
Certificate serial: 77E0394A22D8BE409AD3F647B6A155CF3F81E025
Authority key identifier: 49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e203439333932.roa
Signing time: Wed 22 Mar 2023 08:13:24 +0000
ROA not before: Wed 22 Mar 2023 08:08:24 +0000
ROA not after: Wed 20 Mar 2024 08:13:24 +0000
asID: 49392
IP address blocks: 146.19.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e0:39:4a:22:d8:be:40:9a:d3:f6:47:b6:a1:55:cf:3f:81:e0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493377f0bd467548da4ccd542329a7156b8972a2
Validity
Not Before: Mar 22 08:08:24 2023 GMT
Not After : Mar 20 08:13:24 2024 GMT
Subject: CN=8DAF94DE0B1FA842CC6CCA7421D48CEA88611DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:c5:67:e6:8c:9f:a9:5a:90:00:b3:dc:d3:
1c:71:04:a9:fc:40:95:39:7e:16:cc:76:6f:ab:a4:
4b:83:8b:69:f3:61:43:72:41:93:a3:cb:32:e6:2b:
ea:b2:56:05:8c:aa:56:25:83:e4:9f:20:d2:01:de:
59:90:5a:3f:57:0e:9d:33:e7:c2:74:39:8d:ac:ec:
ac:fa:8a:08:e7:6d:6a:fe:87:b0:6e:c4:05:9c:6f:
e9:92:c5:97:3b:b3:69:f6:b7:f7:99:86:af:ba:de:
d8:b8:ad:4a:ad:2c:5c:9a:6f:4a:23:ea:10:11:8e:
8d:98:1f:90:f9:37:11:f4:b3:4d:44:f8:af:f9:03:
8b:69:91:22:5c:7f:26:d4:c0:8d:0a:ba:ce:67:db:
89:6e:1b:14:73:bc:94:c8:31:e6:35:89:b7:61:3a:
1b:f6:1f:51:3d:62:e3:df:1d:07:3e:20:a1:e1:90:
ae:e8:2c:36:d5:fd:4b:d8:c4:50:65:4c:a2:1d:20:
37:0c:2b:69:05:6b:c4:6c:ea:c0:c9:ef:f7:95:0a:
f6:41:29:83:ee:8c:90:f8:8c:54:04:c4:e2:ed:51:
91:27:0f:cd:db:63:5e:13:eb:db:39:bb:29:c4:e8:
e6:e9:fe:2f:79:8f:dc:ed:cc:b8:56:97:43:fc:31:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:94:DE:0B:1F:A8:42:CC:6C:CA:74:21:D4:8C:EA:88:61:1D:D7
X509v3 Authority Key Identifier:
keyid:49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/493377F0BD467548DA4CCD542329A7156B8972A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e203439333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ca:62:5d:72:d5:5b:37:87:8a:5d:54:98:b6:c6:55:40:33:
a5:6f:fd:65:65:c2:65:15:fb:8b:03:56:d1:92:cf:60:8a:7a:
e8:9c:4f:66:38:ff:60:7f:0a:66:f7:5e:0d:21:e1:0f:70:c2:
27:3a:c2:0f:10:4b:d5:15:f6:70:74:3e:82:ef:c8:2f:15:84:
84:5a:cf:0e:24:91:27:13:7c:db:80:70:bd:4c:da:db:ab:8d:
16:b2:be:05:60:99:1a:d1:2a:a8:53:58:85:0b:2b:6f:08:48:
40:c1:e5:db:36:9f:5e:2a:4e:d9:dc:83:86:55:86:eb:54:51:
40:ce:68:cc:d8:76:f0:af:a5:e4:dc:ee:c5:1b:3c:1b:a0:cd:
4d:e1:ed:d9:fd:e7:24:15:cf:3f:de:cb:ce:92:ae:1b:38:40:
fe:f9:4c:36:87:42:b7:af:ab:f8:eb:08:a3:02:1f:e0:20:1c:
23:30:e5:72:bf:b6:4e:30:49:07:5d:65:f4:8d:93:2c:e1:dc:
4a:07:69:73:89:c2:b8:2e:e2:22:55:24:fd:6f:94:9e:a7:2f:
85:4f:a8:3d:90:4f:d0:4a:1e:22:85:33:d7:cb:ad:2a:12:05:
d3:54:aa:2f:ba:0f:49:98:d2:60:74:ca:81:89:25:89:e6:8f:
1c:f3:a7:95
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUd+A5SiLYvkCa0/ZHtqFVzz+B4CUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkzMzc3ZjBiZDQ2NzU0OGRhNGNjZDU0MjMyOWE3MTU2
Yjg5NzJhMjAeFw0yMzAzMjIwODA4MjRaFw0yNDAzMjAwODEzMjRaMDMxMTAvBgNV
BAMTKDhEQUY5NERFMEIxRkE4NDJDQzZDQ0E3NDIxRDQ4Q0VBODg2MTFERDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxsVn5oyfqVqQALPc0xxxBKn8
QJU5fhbMdm+rpEuDi2nzYUNyQZOjyzLmK+qyVgWMqlYlg+SfINIB3lmQWj9XDp0z
58J0OY2s7Kz6igjnbWr+h7BuxAWcb+mSxZc7s2n2t/eZhq+63ti4rUqtLFyab0oj
6hARjo2YH5D5NxH0s01E+K/5A4tpkSJcfybUwI0Kus5n24luGxRzvJTIMeY1ibdh
Ohv2H1E9YuPfHQc+IKHhkK7oLDbV/UvYxFBlTKIdIDcMK2kFa8Rs6sDJ7/eVCvZB
KYPujJD4jFQExOLtUZEnD83bY14T69s5uynE6Obp/i95j9ztzLhWl0P8MTDpAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUja+U3gsfqELMbMp0IdSM6ohhHdcwHwYDVR0j
BBgwFoAUSTN38L1GdUjaTM1UIymnFWuJcqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTIzZjc4MWYtNTE4NS00MzRmLTk0YTAtODY3MjM4ZmFi
MjAxLzAvNDkzMzc3RjBCRDQ2NzU0OERBNENDRDU0MjMyOUE3MTU2Qjg5NzJBMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NUTjM4TDFHZFVqYVRNMVVJeW1uRld1
SmNxSS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTIzZjc4MWYt
NTE4NS00MzRmLTk0YTAtODY3MjM4ZmFiMjAxLzAvMzEzNDM2MmUzMTM5MmUzMjMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzOTMzMzkzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIT
FzANBgkqhkiG9w0BAQsFAAOCAQEAYMpiXXLVWzeHil1UmLbGVUAzpW/9ZWXCZRX7
iwNW0ZLPYIp66JxPZjj/YH8KZvdeDSHhD3DCJzrCDxBL1RX2cHQ+gu/ILxWEhFrP
DiSRJxN824BwvUza26uNFrK+BWCZGtEqqFNYhQsrbwhIQMHl2zafXipO2dyDhlWG
61RRQM5ozNh28K+l5NzuxRs8G6DNTeHt2f3nJBXPP97LzpKuGzhA/vlMNodCt6+r
+OsIowIf4CAcIzDlcr+2TjBJB11l9I2TLOHcSgdpc4nCuC7iIlUk/W+UnqcvhU+o
PZBP0EoeIoUz18utKhIF01SqL7oPSZjSYHTKgYklieaPHPOnlQ==
Generated at Tue Oct 3 00:39:44 2023 by rpki-client on console-ams.rpki-client.org