Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20343030383636.roa
File: 3139332e39332e3135332e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: ABhRuChRPkgS5qMP28GBS8LQKBCkvbcKLUtgM8Q6mDk=
Subject key identifier: B3:E2:14:89:7B:3A:01:06:D8:FC:7B:85:D7:0A:B0:A3:93:3C:6F:2B
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 788EA6A74C8FD00E026D5AF72310A8206D90E811
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20343030383636.roa
Signing time: Tue 11 Jun 2024 09:54:33 +0000
ROA not before: Tue 11 Jun 2024 09:49:33 +0000
ROA not after: Tue 10 Jun 2025 09:54:33 +0000
asID: 400866
IP address blocks: 193.93.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8e:a6:a7:4c:8f:d0:0e:02:6d:5a:f7:23:10:a8:20:6d:90:e8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Jun 11 09:49:33 2024 GMT
Not After : Jun 10 09:54:33 2025 GMT
Subject: CN=B3E214897B3A0106D8FC7B85D70AB0A3933C6F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:d3:27:ce:67:e8:db:f7:52:cd:f0:0f:c6:
a4:1e:57:5c:6c:fc:01:bb:37:d9:ab:af:ca:7a:cc:
2b:ed:21:a0:cd:f5:1e:c3:3c:06:78:1a:d9:43:25:
75:39:69:69:e7:df:7c:da:44:eb:a2:40:7a:57:25:
cf:64:8c:40:4c:7a:e3:a8:b4:92:b6:1d:cb:8b:8e:
3f:bc:aa:49:35:3d:fb:81:4d:9d:d8:a1:60:2c:b6:
d7:47:12:81:82:75:99:29:3c:48:cb:d2:62:5c:35:
3b:f0:23:d6:40:30:ef:c8:7d:40:64:3d:0d:fe:2b:
88:46:8c:b3:83:f5:15:8f:ee:58:67:ea:50:59:55:
6d:b0:b5:ab:01:5e:8a:03:6b:1a:71:8f:0b:7f:ee:
e1:51:36:81:ca:2b:6c:f1:fd:10:e3:49:d0:78:1f:
dd:92:d4:c7:a6:3b:59:6b:8d:00:ad:fb:18:ef:75:
14:6e:88:79:07:51:65:cd:19:69:66:e4:1f:a0:38:
95:cb:75:f9:f1:27:a1:98:ff:38:cd:b3:b8:f5:f6:
65:b6:6d:f3:9b:10:61:4a:b3:42:28:34:84:ce:65:
91:56:cd:12:fe:6d:6a:88:23:d0:e1:f1:14:8c:c5:
ee:94:9c:3a:48:b9:bd:da:bb:f8:a6:4e:cf:1b:71:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E2:14:89:7B:3A:01:06:D8:FC:7B:85:D7:0A:B0:A3:93:3C:6F:2B
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.153.0/24
Signature Algorithm: sha256WithRSAEncryption
46:51:a5:ea:d7:c6:4b:8f:8d:ac:5f:f5:f1:c7:ee:b2:65:ac:
77:11:92:d0:91:df:68:54:06:ca:48:83:94:f2:18:92:d6:9a:
8b:74:54:5f:48:02:09:4c:7e:c9:b3:75:e7:4d:e9:b5:20:d6:
48:e8:5e:2a:e6:27:30:10:4f:0d:3d:92:68:7a:99:07:01:86:
f5:a4:54:b4:b0:62:b2:80:02:d0:a9:07:08:82:a1:dd:0f:35:
28:62:9b:bf:e6:4d:a1:93:68:03:79:1e:b8:84:2c:a8:ca:ca:
42:8a:a2:f3:7c:8e:08:cb:eb:73:92:5f:7e:2a:be:00:51:df:
e7:75:0c:f8:b2:44:31:2e:5c:17:3d:0b:79:21:3c:89:f8:bb:
b3:20:00:b4:9c:6a:5a:2f:cf:b8:a2:23:7b:9a:9a:f7:41:56:
25:f0:0b:cf:25:a0:a6:82:43:ba:a3:f8:7d:b2:4b:43:a9:fa:
d7:d3:d7:71:d6:f7:1b:9b:c9:c0:83:47:76:3e:3c:fa:49:0b:
cf:24:66:ae:d9:b9:d6:40:89:ae:01:31:93:8c:01:c3:ca:b2:
82:85:bb:29:a7:78:2a:2e:59:2a:6b:95:e9:fa:2d:61:8d:2f:
1c:ca:3e:ae:7f:1b:93:62:aa:58:4c:07:69:9c:1f:25:88:0b:
b3:64:2a:53
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUeI6mp0yP0A4CbVr3IxCoIG2Q6BEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx
NjJlMWFhZDAeFw0yNDA2MTEwOTQ5MzNaFw0yNTA2MTAwOTU0MzNaMDMxMTAvBgNV
BAMTKEIzRTIxNDg5N0IzQTAxMDZEOEZDN0I4NUQ3MEFCMEEzOTMzQzZGMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBNMnzmfo2/dSzfAPxqQeV1xs
/AG7N9mrr8p6zCvtIaDN9R7DPAZ4GtlDJXU5aWnn33zaROuiQHpXJc9kjEBMeuOo
tJK2HcuLjj+8qkk1PfuBTZ3YoWAsttdHEoGCdZkpPEjL0mJcNTvwI9ZAMO/IfUBk
PQ3+K4hGjLOD9RWP7lhn6lBZVW2wtasBXooDaxpxjwt/7uFRNoHKK2zx/RDjSdB4
H92S1MemO1lrjQCt+xjvdRRuiHkHUWXNGWlm5B+gOJXLdfnxJ6GY/zjNs7j19mW2
bfObEGFKs0IoNITOZZFWzRL+bWqII9Dh8RSMxe6UnDpIub3au/imTs8bceB3AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUs+IUiXs6AQbY/HuF1wqwo5M8byswHwYDVR0j
BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0
OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ
dUdxMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQt
M2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0OTEyLzAvMzEzOTMzMmUzOTMzMmUzMTM1
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzODM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBXZkwDQYJKoZIhvcNAQELBQADggEBAEZRperXxkuPjaxf9fHH7rJlrHcRktCR
32hUBspIg5TyGJLWmot0VF9IAglMfsmzdedN6bUg1kjoXirmJzAQTw09kmh6mQcB
hvWkVLSwYrKAAtCpBwiCod0PNShim7/mTaGTaAN5HriELKjKykKKovN8jgjL63OS
X34qvgBR3+d1DPiyRDEuXBc9C3khPIn4u7MgALScalovz7iiI3uamvdBViXwC88l
oKaCQ7qj+H2yS0Op+tfT13HW9xubycCDR3Y+PPpJC88kZq7ZudZAia4BMZOMAcPK
soKFuymneCouWSprlen6LWGNLxzKPq5/G5NiqlhMB2mcHyWIC7NkKlM=
-----END CERTIFICATE-----
Generated at Thu Jul 11 02:22:05 2024 by rpki-client on console-fra.rpki-client.org