Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e312e302f32342d3234203d3e203136323736.roa
File: 3135392e3235332e312e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: gKJOWoOh6906GfQIcdk4GlE7eNV1irMzlRIqXA+nadQ=
Subject key identifier: 55:46:14:27:3C:17:47:A1:79:E2:E8:BA:25:CF:24:17:1F:B3:5C:24
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 7ABE0F7EFD6CE63050824EFDF25E8A667F926C5A
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e312e302f32342d3234203d3e203136323736.roa
Signing time: Thu 03 Oct 2024 09:23:05 +0000
ROA not before: Thu 03 Oct 2024 09:18:05 +0000
ROA not after: Thu 02 Oct 2025 09:23:05 +0000
asID: 16276
IP address blocks: 159.253.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 09:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:be:0f:7e:fd:6c:e6:30:50:82:4e:fd:f2:5e:8a:66:7f:92:6c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Oct 3 09:18:05 2024 GMT
Not After : Oct 2 09:23:05 2025 GMT
Subject: CN=554614273C1747A179E2E8BA25CF24171FB35C24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:3d:26:28:eb:4a:b8:09:69:70:b5:f1:2b:
3f:16:eb:9f:d4:57:61:2b:d4:53:68:7e:65:57:ad:
f2:b0:11:a2:c1:14:cf:e9:82:67:81:bf:80:af:47:
63:19:7e:49:7e:16:44:81:5c:14:0a:0c:09:d0:c9:
5c:5a:4a:c4:3b:60:3a:60:e6:ea:aa:3d:97:86:db:
59:a2:b8:e4:c6:0e:85:a7:fe:5e:69:85:a3:59:cf:
c4:14:8f:2a:61:3b:4f:eb:8e:0b:ae:5f:ea:4e:06:
8c:cc:0f:0e:32:45:a1:f0:38:66:88:ec:f2:1c:32:
cc:31:7a:b0:52:8f:9c:7a:a4:59:9f:ca:f7:bf:4e:
32:cf:d5:57:7d:3b:c0:d9:3c:77:26:13:c0:25:c8:
35:49:20:21:3c:8e:53:17:69:ee:b3:a7:32:f4:e3:
a3:46:50:9a:e8:54:e5:13:65:45:47:c5:b1:11:f2:
32:28:28:fe:9f:c4:32:3c:41:04:c6:1b:a9:bf:9f:
39:c1:fd:c6:58:74:1e:87:9b:09:1d:5a:ec:09:9f:
77:b4:83:db:ff:a1:18:40:ee:74:04:67:63:fd:17:
1d:50:4c:08:eb:4f:4f:12:77:a2:30:fc:83:a1:b4:
62:a2:1a:f2:5d:54:53:aa:ea:48:21:64:54:b8:09:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:14:27:3C:17:47:A1:79:E2:E8:BA:25:CF:24:17:1F:B3:5C:24
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e312e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
70:24:11:d2:a9:c0:09:18:12:e1:de:ae:99:23:f4:16:e5:b2:
b7:81:c1:ad:e3:be:40:3d:2f:8e:78:29:22:af:2b:7f:d7:75:
85:8d:f8:a4:ad:d9:d0:36:a3:59:23:c9:05:b6:ac:5e:74:da:
78:d4:03:58:75:59:a2:73:ec:9b:ed:3c:d5:43:41:69:b3:17:
3e:22:23:09:e7:a2:66:69:0a:d0:a6:95:5d:d2:ca:aa:f7:3c:
98:8d:52:99:5a:ea:bb:63:01:b4:69:3f:91:9b:6c:77:ce:f3:
dd:56:11:cb:d6:bd:10:74:d6:ac:64:02:67:f6:18:e3:41:9c:
b3:37:59:f2:d3:64:63:75:62:0e:a7:aa:fe:56:ec:99:10:6f:
52:f5:e0:5a:a9:b9:09:8a:a2:51:a6:f6:ea:2c:3b:2d:04:43:
7b:9a:57:e7:19:ba:e8:b4:84:c0:71:3c:bc:30:da:e2:ec:8e:
eb:fb:23:e6:91:7e:96:57:4b:06:87:55:dd:62:5a:d0:d7:c7:
d3:5b:56:92:f7:c4:b7:c4:2a:45:01:37:9d:57:3f:62:37:1c:
74:3a:18:c2:25:b6:f9:ef:4c:fc:89:a4:1f:46:2f:c7:2e:2b:
8f:88:2a:fb:75:3f:66:a2:0c:b5:9b:5c:9d:a7:fd:3f:c4:90:
1c:77:97:ef
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUer4Pfv1s5jBQgk798l6KZn+SbFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi
NjJiYTc4NTAeFw0yNDEwMDMwOTE4MDVaFw0yNTEwMDIwOTIzMDVaMDMxMTAvBgNV
BAMTKDU1NDYxNDI3M0MxNzQ3QTE3OUUyRThCQTI1Q0YyNDE3MUZCMzVDMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/j0mKOtKuAlpcLXxKz8W65/U
V2Er1FNofmVXrfKwEaLBFM/pgmeBv4CvR2MZfkl+FkSBXBQKDAnQyVxaSsQ7YDpg
5uqqPZeG21miuOTGDoWn/l5phaNZz8QUjyphO0/rjguuX+pOBozMDw4yRaHwOGaI
7PIcMswxerBSj5x6pFmfyve/TjLP1Vd9O8DZPHcmE8AlyDVJICE8jlMXae6zpzL0
46NGUJroVOUTZUVHxbER8jIoKP6fxDI8QQTGG6m/nznB/cZYdB6HmwkdWuwJn3e0
g9v/oRhA7nQEZ2P9Fx1QTAjrT08Sd6Iw/IOhtGKiGvJdVFOq6kghZFS4CUyrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUVUYUJzwXR6F54ui6Jc8kFx+zXCQwHwYDVR0j
BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk
ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ
cnA0VS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2U1MTBlMTct
MzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZkZjUxLzAvMzEzNTM5MmUzMjM1MzMyZTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjMyMzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ/9
ATANBgkqhkiG9w0BAQsFAAOCAQEAcCQR0qnACRgS4d6umSP0FuWyt4HBreO+QD0v
jngpIq8rf9d1hY34pK3Z0DajWSPJBbasXnTaeNQDWHVZonPsm+081UNBabMXPiIj
CeeiZmkK0KaVXdLKqvc8mI1SmVrqu2MBtGk/kZtsd87z3VYRy9a9EHTWrGQCZ/YY
40GcszdZ8tNkY3ViDqeq/lbsmRBvUvXgWqm5CYqiUab26iw7LQRDe5pX5xm66LSE
wHE8vDDa4uyO6/sj5pF+lldLBodV3WJa0NfH01tWkvfEt8QqRQE3nVc/YjccdDoY
wiW2+e9M/ImkH0Yvxy4rj4gq+3U/ZqIMtZtcnaf9P8SQHHeX7w==
-----END CERTIFICATE-----
Generated at Mon Nov 18 12:16:05 2024 by rpki-client on console-fra.rpki-client.org