Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e2039303039.roa
File: 3134362e31392e3231362e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: e8eabUXTyqjB8iI9sr/KJbOydioNUoMB2cw8QZLAsUU=
Subject key identifier: EE:64:2F:53:A5:AB:54:5C:1A:09:36:2D:FB:1B:E1:44:41:89:99:22
Certificate issuer: /CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
Certificate serial: 74F411BD72F6165BB8BE2835E8D7D92C2F7B81E7
Authority key identifier: 8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e2039303039.roa
Signing time: Sat 26 Aug 2023 13:34:04 +0000
ROA not before: Sat 26 Aug 2023 13:29:04 +0000
ROA not after: Sat 24 Aug 2024 13:34:04 +0000
asID: 9009
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f4:11:bd:72:f6:16:5b:b8:be:28:35:e8:d7:d9:2c:2f:7b:81:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
Validity
Not Before: Aug 26 13:29:04 2023 GMT
Not After : Aug 24 13:34:04 2024 GMT
Subject: CN=EE642F53A5AB545C1A09362DFB1BE14441899922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:57:28:93:88:2b:61:b0:ee:a9:42:3f:5d:
54:f2:a9:c6:11:16:27:83:72:0a:46:bf:00:e6:2b:
1f:88:2b:35:57:45:2c:7f:e9:82:0b:ca:37:69:5c:
91:af:8f:07:ba:a4:ba:da:9b:3b:38:b1:09:91:6c:
05:bc:23:f0:35:fa:18:4b:79:35:52:60:94:6b:f4:
db:ca:f6:2c:10:72:48:43:28:7b:09:f5:5d:4c:34:
ad:9f:0b:54:86:dc:a7:92:59:38:09:73:6b:3b:0c:
94:a6:1d:a1:ed:49:2f:07:9c:9d:a7:1b:1f:98:e8:
63:d0:fc:18:f1:aa:ac:e2:0b:fa:d6:f7:40:97:ab:
1d:ef:f5:e4:f8:a7:4e:19:a1:4e:6f:ea:06:3a:49:
e6:67:6a:21:bb:8a:f9:75:ea:3d:71:03:cb:24:4f:
57:5f:b1:76:91:2f:9a:cb:2d:d1:a0:23:f0:26:6e:
1a:45:f9:29:24:12:3c:2f:d3:ee:0e:2f:ce:8e:2a:
2f:fa:0b:95:14:37:6f:df:f9:99:5e:11:74:8b:43:
ad:22:aa:9b:62:70:e4:be:3d:34:8a:83:2a:e4:d6:
29:8b:68:c0:df:95:20:87:19:0d:03:20:55:07:33:
19:59:63:ae:17:fe:67:68:00:16:28:76:ed:89:89:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:64:2F:53:A5:AB:54:5C:1A:09:36:2D:FB:1B:E1:44:41:89:99:22
X509v3 Authority Key Identifier:
keyid:8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:39:ef:33:b0:4b:7c:6d:b3:30:34:7e:ec:30:81:86:41:fd:
56:49:86:de:65:dc:a9:92:1a:2f:46:35:4e:c1:21:af:1b:bb:
69:f4:9b:7b:54:3b:d9:d7:00:08:c5:35:31:7c:c4:d2:a8:af:
08:4c:aa:ec:2e:ac:7a:ee:5e:c1:5a:8e:60:7b:8c:98:df:5e:
99:f8:71:03:a6:c9:23:d4:b8:16:49:05:11:b5:08:f0:fc:ec:
9c:da:ac:ec:d3:b9:4d:f6:bd:57:aa:74:2a:64:5d:74:2c:30:
7f:d1:e9:3a:62:4a:5d:ef:9d:82:2e:4c:31:69:3e:d2:07:be:
e7:8f:72:01:7c:af:f5:cb:46:1c:0e:2b:70:5f:71:d6:51:5e:
b1:c7:36:7a:63:12:db:91:79:60:a1:f7:80:3a:7f:5b:31:02:
9b:93:f5:60:7b:c4:21:53:48:04:8f:b3:6a:30:ad:25:e3:6b:
4f:b4:6d:de:06:a7:28:50:5e:81:fb:7b:87:99:5f:8a:94:3b:
d3:44:78:5a:6e:d5:72:20:16:46:13:a8:c5:02:59:4d:14:3d:
77:58:6c:18:67:0d:7f:75:43:a5:cf:94:26:c9:25:8f:1d:46:
17:ef:32:8a:13:c5:fa:13:3b:a0:69:20:61:4f:23:fd:35:a4:
6e:51:17:34
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdPQRvXL2Flu4vig16NfZLC97gecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGE5MDY4YTU3MDg5OGE4ZmM0ZWFmOWI1ZGJjYjk1ZGI4
MWE5YTg0MDAeFw0yMzA4MjYxMzI5MDRaFw0yNDA4MjQxMzM0MDRaMDMxMTAvBgNV
BAMTKEVFNjQyRjUzQTVBQjU0NUMxQTA5MzYyREZCMUJFMTQ0NDE4OTk5MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHlcok4grYbDuqUI/XVTyqcYR
FieDcgpGvwDmKx+IKzVXRSx/6YILyjdpXJGvjwe6pLramzs4sQmRbAW8I/A1+hhL
eTVSYJRr9NvK9iwQckhDKHsJ9V1MNK2fC1SG3KeSWTgJc2s7DJSmHaHtSS8HnJ2n
Gx+Y6GPQ/BjxqqziC/rW90CXqx3v9eT4p04ZoU5v6gY6SeZnaiG7ivl16j1xA8sk
T1dfsXaRL5rLLdGgI/AmbhpF+SkkEjwv0+4OL86OKi/6C5UUN2/f+ZleEXSLQ60i
qpticOS+PTSKgyrk1imLaMDflSCHGQ0DIFUHMxlZY64X/mdoABYodu2JidxZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU7mQvU6WrVFwaCTYt+xvhREGJmSIwHwYDVR0j
BBgwFoAUipBopXCJio/E6vm128uV24GpqEAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjQzNGJmZWItZjg0YS00OGE0LThiYWMtYzNhNThmNDNi
Y2U1LzAvOEE5MDY4QTU3MDg5OEE4RkM0RUFGOUI1REJDQjk1REI4MUE5QTg0MC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lwQm9wWENKaW9fRTZ2bTEyOHVWMjRH
cHFFQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjQzNGJmZWIt
Zjg0YS00OGE0LThiYWMtYzNhNThmNDNiY2U1LzAvMzEzNDM2MmUzMTM5MmUzMjMx
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIT
2DANBgkqhkiG9w0BAQsFAAOCAQEAPznvM7BLfG2zMDR+7DCBhkH9VkmG3mXcqZIa
L0Y1TsEhrxu7afSbe1Q72dcACMU1MXzE0qivCEyq7C6seu5ewVqOYHuMmN9emfhx
A6bJI9S4FkkFEbUI8PzsnNqs7NO5Tfa9V6p0KmRddCwwf9HpOmJKXe+dgi5MMWk+
0ge+549yAXyv9ctGHA4rcF9x1lFescc2emMS25F5YKH3gDp/WzECm5P1YHvEIVNI
BI+zajCtJeNrT7Rt3ganKFBegft7h5lfipQ700R4Wm7VciAWRhOoxQJZTRQ9d1hs
GGcNf3VDpc+UJskljx1GF+8yihPF+hM7oGkgYU8j/TWkblEXNA==
Generated at Tue Oct 24 13:43:16 2023 by rpki-client on console-fra.rpki-client.org