Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135322e302f32342d3234203d3e203631333137.roa
File: 3139332e39332e3135322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 5Rh9b3c5qEHa6VysMrBXYr8A3xEWCEhuMBZ5R2zPiSg=
Subject key identifier: 43:56:6B:12:A9:11:B0:1B:06:00:9F:09:78:E2:C0:9B:2D:9B:36:03
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 56058BE482F21F0D2E44476B366DCBF2FB4DC876
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135322e302f32342d3234203d3e203631333137.roa
Signing time: Sat 21 Jan 2023 20:58:47 +0000
ROA not before: Sat 21 Jan 2023 20:53:47 +0000
ROA not after: Sat 20 Jan 2024 20:58:47 +0000
asID: 61317
IP address blocks: 193.93.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:05:8b:e4:82:f2:1f:0d:2e:44:47:6b:36:6d:cb:f2:fb:4d:c8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Jan 21 20:53:47 2023 GMT
Not After : Jan 20 20:58:47 2024 GMT
Subject: CN=43566B12A911B01B06009F0978E2C09B2D9B3603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:6c:6e:10:7d:20:0e:6e:ab:9c:80:40:e1:
e9:5d:e4:76:60:4f:a3:00:a8:04:4a:f6:05:33:59:
bc:f2:85:23:ec:e2:dd:a6:ee:61:35:9a:bc:d9:7e:
fc:c1:65:99:82:e2:fd:d7:99:e9:f1:0d:ad:29:4e:
4b:d1:9d:f8:23:49:30:6a:dd:0f:ce:50:8d:9c:0b:
86:bc:31:a8:80:e6:f5:05:77:ce:a0:b8:da:02:96:
07:1c:4b:87:75:b9:60:32:9f:f1:68:f4:cd:03:26:
60:48:b7:3a:1e:8c:93:3c:71:f1:b2:b3:78:1e:d3:
32:c1:ed:4f:e3:d5:0b:fc:2f:b2:54:cf:98:43:8a:
93:a4:c0:26:8d:8b:27:0c:de:6d:a7:60:a9:7f:fe:
64:60:55:5a:d3:9a:71:0b:d6:94:d4:73:9d:76:4b:
cb:9d:f4:46:27:00:e5:f5:9f:cc:da:a7:c2:11:93:
68:ed:08:8f:12:9d:ab:89:c4:0f:22:ff:51:bf:d1:
d5:c3:8e:72:00:2e:db:8a:fd:5d:e5:d6:49:4c:09:
e7:0c:95:b1:d5:70:7b:fe:09:20:aa:eb:e8:71:b5:
2a:f5:61:59:38:84:13:96:f5:69:1b:e6:4c:b5:2c:
d5:6c:4c:72:a8:6d:3c:92:b3:0d:5c:ae:cd:40:6a:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:56:6B:12:A9:11:B0:1B:06:00:9F:09:78:E2:C0:9B:2D:9B:36:03
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b7:f2:f5:60:3b:f5:b3:f0:4e:dd:9c:1c:36:81:ad:de:b2:
a9:ac:c6:ee:ac:93:8e:6c:e6:eb:a7:6b:ae:69:02:e8:64:d0:
e5:39:81:1d:7e:76:e3:e2:d2:5d:f5:ee:34:89:93:21:cf:5f:
ed:4e:97:32:35:46:19:52:47:90:f5:2f:d8:55:95:43:37:08:
52:21:2a:28:b0:17:d8:18:4b:66:45:e6:d3:2f:44:d2:99:85:
75:bb:cb:c2:18:52:94:d8:2f:75:98:0e:69:38:96:be:60:fd:
c9:51:d1:84:7c:f4:b0:5e:1a:ce:b1:9e:c5:0c:5d:19:1d:0f:
f9:cc:07:47:7c:87:84:13:71:f0:94:db:28:da:11:c2:15:41:
e9:0c:03:d1:d5:e7:d6:0e:1d:a5:51:27:99:c6:1e:66:eb:b1:
11:5c:7a:f5:1f:15:c7:0d:b1:31:c0:40:39:3f:15:38:d0:73:
8b:90:f4:8e:39:59:33:05:e5:42:52:f7:c9:c3:ca:d7:43:28:
cf:d5:7b:fd:fb:11:f9:03:42:3c:86:4e:d9:dd:5a:c6:ce:1e:
15:77:cb:ae:61:c8:c9:76:f8:d5:eb:ff:94:94:91:cd:98:03:
58:95:04:aa:f4:78:5a:60:4c:2b:ff:c3:d9:a9:b7:3d:8a:64:
28:42:50:a4
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVgWL5ILyHw0uREdrNm3L8vtNyHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx
NjJlMWFhZDAeFw0yMzAxMjEyMDUzNDdaFw0yNDAxMjAyMDU4NDdaMDMxMTAvBgNV
BAMTKDQzNTY2QjEyQTkxMUIwMUIwNjAwOUYwOTc4RTJDMDlCMkQ5QjM2MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUqGxuEH0gDm6rnIBA4eld5HZg
T6MAqARK9gUzWbzyhSPs4t2m7mE1mrzZfvzBZZmC4v3XmenxDa0pTkvRnfgjSTBq
3Q/OUI2cC4a8MaiA5vUFd86guNoClgccS4d1uWAyn/Fo9M0DJmBItzoejJM8cfGy
s3ge0zLB7U/j1Qv8L7JUz5hDipOkwCaNiycM3m2nYKl//mRgVVrTmnEL1pTUc512
S8ud9EYnAOX1n8zap8IRk2jtCI8SnauJxA8i/1G/0dXDjnIALtuK/V3l1klMCecM
lbHVcHv+CSCq6+hxtSr1YVk4hBOW9Wkb5ky1LNVsTHKobTySsw1crs1AasPLAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUQ1ZrEqkRsBsGAJ8JeOLAmy2bNgMwHwYDVR0j
BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0
OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ
dUdxMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQt
M2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0OTEyLzAvMzEzOTMzMmUzOTMzMmUzMTM1
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wV2YMA0GCSqGSIb3DQEBCwUAA4IBAQBut/L1YDv1s/BO3ZwcNoGt3rKprMburJOO
bObrp2uuaQLoZNDlOYEdfnbj4tJd9e40iZMhz1/tTpcyNUYZUkeQ9S/YVZVDNwhS
ISoosBfYGEtmRebTL0TSmYV1u8vCGFKU2C91mA5pOJa+YP3JUdGEfPSwXhrOsZ7F
DF0ZHQ/5zAdHfIeEE3HwlNso2hHCFUHpDAPR1efWDh2lUSeZxh5m67ERXHr1HxXH
DbExwEA5PxU40HOLkPSOOVkzBeVCUvfJw8rXQyjP1Xv9+xH5A0I8hk7Z3VrGzh4V
d8uuYcjJdvjV6/+UlJHNmANYlQSq9HhaYEwr/8PZqbc9imQoQlCk
Generated at Tue Nov 21 00:48:27 2023 by rpki-client on console-ams.rpki-client.org