Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20323130313232.roa
File: 3139332e33372e3233392e302f32342d3234203d3e20323130313232.roa (raw, json)
Hash identifier: PT74KYAMbWQF3SoLIskiuzzQeqC16J148M2HIIMnHeY=
Subject key identifier: C4:FA:79:85:3F:16:F3:36:BC:A3:2E:38:78:6C:10:8B:59:D8:71:64
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0177838DADAB7BE65D6005C2FB7E291443F75D52
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20323130313232.roa
Signing time: Wed 22 Mar 2023 18:07:48 +0000
ROA not before: Wed 22 Mar 2023 18:02:48 +0000
ROA not after: Wed 20 Mar 2024 18:07:48 +0000
asID: 210122
IP address blocks: 193.37.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:77:83:8d:ad:ab:7b:e6:5d:60:05:c2:fb:7e:29:14:43:f7:5d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 22 18:02:48 2023 GMT
Not After : Mar 20 18:07:48 2024 GMT
Subject: CN=C4FA79853F16F336BCA32E38786C108B59D87164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:48:1d:99:87:a8:bb:da:f8:5d:24:d2:12:
7b:68:4f:81:b6:38:ca:59:e3:f5:bc:83:6d:a1:05:
0b:a1:15:2b:9e:9e:ea:a3:67:e4:b8:5b:65:44:e3:
3e:7d:73:6a:fe:a5:38:8a:e1:20:97:74:3b:04:5a:
a8:40:7e:38:2a:9f:53:c0:b3:84:e1:d9:a3:36:a8:
24:cb:86:98:18:75:0d:b8:91:ff:72:13:58:4f:a5:
a7:45:ae:99:4d:12:2a:55:ee:c9:45:b2:9e:87:61:
6a:2b:46:0e:1d:03:db:52:f8:db:2f:52:01:c6:ed:
d0:2a:09:ee:96:77:21:7b:48:84:55:e1:b8:58:26:
29:10:e8:86:1d:5d:96:27:a4:15:0f:2a:b6:73:28:
77:37:54:40:e8:6f:b9:2c:fc:6a:ba:d3:80:cd:b1:
70:0c:6f:a8:67:06:be:62:40:e2:65:19:96:6e:3c:
83:c3:ae:2b:b4:1b:d1:9d:b3:ce:06:31:7c:07:1b:
9d:89:47:e8:93:fb:57:cc:0a:69:c8:24:d7:73:8e:
6a:60:9d:ba:29:d6:3a:cc:fe:8e:68:2c:74:58:67:
26:4b:44:1d:11:8a:4f:80:ca:43:ee:1a:50:3d:bf:
a5:b0:da:9a:45:16:bf:b2:ee:4d:62:83:c0:80:43:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:79:85:3F:16:F3:36:BC:A3:2E:38:78:6C:10:8B:59:D8:71:64
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20323130313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.239.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3f:53:f5:60:ed:ee:c4:58:fc:51:fb:60:0a:79:24:e7:e6:
e8:1b:6e:0c:4b:9e:ec:c9:95:e3:df:fa:4c:ff:8e:27:f7:82:
4d:31:a7:76:16:1b:10:40:3f:dd:45:f5:f0:f8:48:3b:eb:98:
91:07:51:47:8a:d0:a3:40:0c:d7:14:38:97:13:b5:66:c8:3c:
97:11:2f:9e:23:58:0f:59:f1:04:29:3b:83:b4:dd:a6:99:ab:
e7:e5:34:bf:80:d9:17:e4:19:6e:8f:bd:86:d6:e5:7b:98:33:
72:a8:ac:93:40:53:a8:32:29:98:1d:0d:7e:ef:90:22:ef:4b:
f6:57:bb:c6:4b:5f:e6:32:5d:db:dc:1b:5a:b5:36:06:c8:b8:
c2:40:be:97:db:e3:fd:f9:6d:90:5e:05:09:d9:e7:1a:63:80:
52:fd:48:de:a6:43:c6:2f:c4:3d:4a:e0:81:a9:34:46:f0:8d:
59:26:bc:2d:e4:76:97:d5:b9:83:43:08:69:9a:d7:91:89:55:
f4:d2:c7:75:21:fa:80:c0:45:96:d0:86:70:57:73:7a:74:32:
5a:30:3e:4f:6d:d5:85:2b:61:77:82:d6:d1:a6:e4:d3:fb:7d:
ed:bb:22:ad:0d:bd:d1:48:21:94:dc:a6:a1:69:4b:4f:97:d2:
f0:03:ad:00
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUAXeDja2re+ZdYAXC+34pFEP3XVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yMzAzMjIxODAyNDhaFw0yNDAzMjAxODA3NDhaMDMxMTAvBgNV
BAMTKEM0RkE3OTg1M0YxNkYzMzZCQ0EzMkUzODc4NkMxMDhCNTlEODcxNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmEgdmYeou9r4XSTSEntoT4G2
OMpZ4/W8g22hBQuhFSuenuqjZ+S4W2VE4z59c2r+pTiK4SCXdDsEWqhAfjgqn1PA
s4Th2aM2qCTLhpgYdQ24kf9yE1hPpadFrplNEipV7slFsp6HYWorRg4dA9tS+Nsv
UgHG7dAqCe6WdyF7SIRV4bhYJikQ6IYdXZYnpBUPKrZzKHc3VEDob7ks/Gq604DN
sXAMb6hnBr5iQOJlGZZuPIPDriu0G9Gds84GMXwHG52JR+iT+1fMCmnIJNdzjmpg
nbop1jrM/o5oLHRYZyZLRB0Rik+AykPuGlA9v6Ww2ppFFr+y7k1ig8CAQ88TAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUxPp5hT8W8za8oy44eGwQi1nYcWQwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzOTMzMmUzMzM3MmUzMjMz
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzAzMTMyMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBJe8wDQYJKoZIhvcNAQELBQADggEBACc/U/Vg7e7EWPxR+2AKeSTn5ugbbgxL
nuzJlePf+kz/jif3gk0xp3YWGxBAP91F9fD4SDvrmJEHUUeK0KNADNcUOJcTtWbI
PJcRL54jWA9Z8QQpO4O03aaZq+flNL+A2RfkGW6PvYbW5XuYM3KorJNAU6gyKZgd
DX7vkCLvS/ZXu8ZLX+YyXdvcG1q1NgbIuMJAvpfb4/35bZBeBQnZ5xpjgFL9SN6m
Q8YvxD1K4IGpNEbwjVkmvC3kdpfVuYNDCGma15GJVfTSx3Uh+oDARZbQhnBXc3p0
MlowPk9t1YUrYXeC1tGm5NP7fe27Iq0NvdFIIZTcpqFpS0+X0vADrQA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org