Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3231322e3130322e3131342e302f32342d3234203d3e20383334.roa
File: 3231322e3130322e3131342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VltLtRrUuDymvRhwLc3MdM7lwbX0kIVgqUedsw15qqQ=
Subject key identifier: 7A:14:78:16:2F:88:EC:99:66:5F:3D:0F:2B:C0:EC:8A:40:0D:EB:19
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 761C376E9DAEFDB9DE8E259F838AFA671EA8A735
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3231322e3130322e3131342e302f32342d3234203d3e20383334.roa
Signing time: Fri 21 Jun 2024 00:01:10 +0000
ROA not before: Thu 20 Jun 2024 23:56:10 +0000
ROA not after: Fri 20 Jun 2025 00:01:10 +0000
asID: 834
IP address blocks: 212.102.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 06:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1c:37:6e:9d:ae:fd:b9:de:8e:25:9f:83:8a:fa:67:1e:a8:a7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jun 20 23:56:10 2024 GMT
Not After : Jun 20 00:01:10 2025 GMT
Subject: CN=7A1478162F88EC99665F3D0F2BC0EC8A400DEB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:79:53:a2:04:a4:06:54:f1:2e:8d:17:a0:
2a:b5:3c:a7:0a:0a:c0:55:67:87:9b:c1:ff:74:5e:
3e:6e:06:60:c3:5f:a6:82:e6:15:d1:78:97:10:90:
d7:e6:db:46:17:fe:aa:e0:38:d2:aa:6f:61:e6:b5:
6b:7f:b3:8b:62:ae:4c:a3:44:54:46:b0:44:b0:b9:
ed:22:ed:c4:18:6b:86:0b:71:05:95:6d:3b:2c:e7:
61:0a:9b:6b:44:3f:4c:09:b2:37:4f:04:27:48:df:
f5:b0:6a:a6:c9:2b:0a:0c:f2:10:82:ef:92:83:c1:
ac:6a:b7:b4:5a:ab:cf:e7:c1:a1:c3:16:11:c9:e8:
68:fe:60:15:2b:c5:8f:89:a9:41:29:66:c3:aa:f1:
00:fa:68:c1:4c:9d:97:f4:ae:41:2e:d4:46:10:d2:
c4:ab:5b:fe:cc:56:83:52:bc:61:4c:ea:ce:e7:f6:
09:9f:27:26:bf:5d:f5:a7:ad:90:88:04:d0:3e:b8:
7f:1b:92:6d:d1:a2:5e:d5:ab:a0:cc:8e:99:f5:e5:
3c:8b:84:0c:5b:e6:e5:54:6c:a5:91:ba:ce:ab:77:
a5:e6:fb:7d:20:05:e9:80:a8:85:89:3b:74:94:ad:
19:df:b3:67:e2:29:c4:81:ba:07:82:c8:95:d0:38:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:14:78:16:2F:88:EC:99:66:5F:3D:0F:2B:C0:EC:8A:40:0D:EB:19
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3231322e3130322e3131342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.114.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c7:0b:35:e8:db:e0:c7:56:19:54:c4:ce:6e:e8:bb:cb:4b:
0e:ec:4f:60:fa:21:e0:ba:e4:4b:61:7a:3e:94:b9:74:f2:21:
47:08:12:26:b3:0c:40:ec:a6:f3:7c:f7:bd:e1:ff:35:ee:44:
ed:0b:5a:d7:5f:10:29:bc:80:67:c4:c2:a6:8d:da:36:66:ad:
ac:dd:f3:fc:f5:f1:ff:43:07:4a:0a:01:98:99:41:b7:d9:35:
40:5e:53:3b:7c:18:85:6e:d3:d9:33:36:54:0f:b4:c2:8f:42:
96:9c:fb:a5:82:48:2a:56:7f:20:df:a8:10:43:59:50:3c:c3:
d9:44:fb:ea:99:6e:6c:d9:86:48:c6:3d:5d:cd:c0:a5:b9:f5:
d1:14:74:7a:cf:1a:8e:07:86:26:54:27:dc:cc:2c:14:fe:3d:
d6:19:e3:42:69:96:8e:46:b9:b3:15:0c:1a:46:0c:a7:04:47:
17:a0:bd:3c:38:61:48:ee:d8:36:dc:a2:8b:ff:45:b1:d7:21:
f1:f3:2a:b2:d6:52:80:90:97:f0:53:53:44:94:4a:92:93:97:
08:5d:bb:b2:13:81:f1:82:b4:1f:16:db:01:6d:54:41:f1:ba:
42:b4:99:6f:e1:40:0e:ca:b9:ae:2c:ec:97:30:9d:5a:42:ef:
8d:33:2a:41
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdhw3bp2u/bnejiWfg4r6Zx6opzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yNDA2MjAyMzU2MTBaFw0yNTA2MjAwMDAxMTBaMDMxMTAvBgNV
BAMTKDdBMTQ3ODE2MkY4OEVDOTk2NjVGM0QwRjJCQzBFQzhBNDAwREVCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChX3lTogSkBlTxLo0XoCq1PKcK
CsBVZ4ebwf90Xj5uBmDDX6aC5hXReJcQkNfm20YX/qrgONKqb2HmtWt/s4tirkyj
RFRGsESwue0i7cQYa4YLcQWVbTss52EKm2tEP0wJsjdPBCdI3/WwaqbJKwoM8hCC
75KDwaxqt7Raq8/nwaHDFhHJ6Gj+YBUrxY+JqUEpZsOq8QD6aMFMnZf0rkEu1EYQ
0sSrW/7MVoNSvGFM6s7n9gmfJya/XfWnrZCIBNA+uH8bkm3Rol7Vq6DMjpn15TyL
hAxb5uVUbKWRus6rd6Xm+30gBemAqIWJO3SUrRnfs2fiKcSBugeCyJXQOKcZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUehR4Fi+I7JlmXz0PK8DsikAN6xkwHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzIzMTMyMmUzMTMwMzIyZTMx
MzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRm
cjANBgkqhkiG9w0BAQsFAAOCAQEAgMcLNejb4MdWGVTEzm7ou8tLDuxPYPoh4Lrk
S2F6PpS5dPIhRwgSJrMMQOym83z3veH/Ne5E7Qta118QKbyAZ8TCpo3aNmatrN3z
/PXx/0MHSgoBmJlBt9k1QF5TO3wYhW7T2TM2VA+0wo9Clpz7pYJIKlZ/IN+oEENZ
UDzD2UT76plubNmGSMY9Xc3Apbn10RR0es8ajgeGJlQn3MwsFP491hnjQmmWjka5
sxUMGkYMpwRHF6C9PDhhSO7YNtyii/9Fsdch8fMqstZSgJCX8FNTRJRKkpOXCF27
shOB8YK0HxbbAW1UQfG6QrSZb+FADsq5rizslzCdWkLvjTMqQQ==
-----END CERTIFICATE-----
Generated at Tue Jun 25 12:08:09 2024 by rpki-client on console-fra.rpki-client.org