Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e322e302f32342d3234203d3e2037303239.roa
File: 3135392e3235332e322e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: 06YhWlLn9Bia6LLu4E/ZThjfCzPz3wOpUD4XQlAHXh4=
Subject key identifier: 3A:DC:88:8B:B2:C7:30:86:3D:91:1D:93:83:DC:7F:CA:0A:0A:56:C2
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 4922CA1E60E2C5990ECE7DF6789D95A26A295EC8
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e322e302f32342d3234203d3e2037303239.roa
Signing time: Tue 13 Aug 2024 13:37:45 +0000
ROA not before: Tue 13 Aug 2024 13:32:45 +0000
ROA not after: Tue 12 Aug 2025 13:37:45 +0000
asID: 7029
IP address blocks: 159.253.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 19:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:22:ca:1e:60:e2:c5:99:0e:ce:7d:f6:78:9d:95:a2:6a:29:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Aug 13 13:32:45 2024 GMT
Not After : Aug 12 13:37:45 2025 GMT
Subject: CN=3ADC888BB2C730863D911D9383DC7FCA0A0A56C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:e1:c3:46:4f:ed:c1:b6:b8:b6:7e:fe:c1:
61:04:f3:23:79:27:25:7a:6f:c3:a5:e0:b5:d7:7c:
37:9c:44:0a:c5:6e:94:67:94:46:12:e7:39:91:30:
7e:53:25:c6:55:df:53:43:aa:b4:12:54:ea:26:27:
df:e3:04:04:50:61:36:f0:0c:95:7e:8a:ca:87:60:
ef:e4:3f:d4:c8:e5:6d:08:db:29:c2:90:90:2c:8d:
98:a6:c0:82:1b:f5:05:a4:8b:f5:da:36:94:aa:e3:
b9:93:f4:21:06:fc:ce:2b:2c:d8:94:8c:d8:a4:b0:
a2:b1:18:7a:2b:0b:1f:39:01:bf:46:d7:18:d0:ec:
21:86:71:2b:f0:0b:83:6e:01:41:f6:3e:ae:aa:2b:
2e:14:57:5c:ff:a1:14:55:ca:2f:31:c3:52:2d:07:
95:e3:33:d1:ee:1d:b1:f1:2b:14:39:f9:c2:94:32:
90:a3:0d:10:a7:9a:c1:b8:9a:27:3f:e9:dc:95:b2:
f9:28:5e:c6:52:53:8a:66:b8:2c:72:4d:d4:14:65:
c0:fd:3d:4f:1f:b4:33:c2:b0:2d:e6:c2:80:ac:67:
1b:77:48:0f:d4:4e:b4:b7:e8:d4:a7:2e:c2:91:e7:
84:f4:53:04:9e:8c:7b:2b:cc:05:64:f6:ff:41:35:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DC:88:8B:B2:C7:30:86:3D:91:1D:93:83:DC:7F:CA:0A:0A:56:C2
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e322e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.2.0/24
Signature Algorithm: sha256WithRSAEncryption
25:13:13:81:99:8b:82:27:cf:bc:f0:5d:fc:12:d7:31:66:9d:
0b:5c:5b:b3:71:68:4a:fc:12:1b:23:b2:9c:2d:02:e8:ce:a3:
08:66:d8:0c:f4:b1:24:38:05:ba:2b:14:e4:13:15:6b:81:01:
3a:ec:6b:c5:8d:15:4c:70:68:42:a5:f5:2a:04:d9:6a:5a:8d:
cf:f3:af:48:a9:0b:36:12:ac:fb:ae:d1:c4:8d:41:47:4a:67:
0b:0c:94:77:9f:91:08:23:b4:37:6d:e1:78:13:2f:36:4a:1c:
29:2a:cf:d6:65:64:18:d3:39:73:44:38:7f:d6:af:fd:df:b2:
09:fa:af:cb:af:54:a4:42:00:78:22:31:8d:43:63:14:d3:37:
46:bd:29:8e:54:5a:e4:87:60:08:79:31:57:f7:d8:4f:5a:66:
60:20:ef:4d:1a:2c:8b:f8:60:24:78:a5:ba:b4:c1:c7:67:c2:
13:e8:6a:22:7e:7c:2a:c2:b4:73:ff:ac:a9:04:c7:52:8e:20:
e6:81:d6:f7:93:e7:dd:5f:c0:69:72:50:e8:33:bb:62:dd:9f:
1a:84:09:9c:14:4b:75:9e:b4:03:4b:09:9c:75:4a:91:8b:d1:
e8:1e:fb:1b:12:6e:d4:08:af:57:a5:e6:25:f5:aa:a1:0c:6d:
82:04:11:d0
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUSSLKHmDixZkOzn32eJ2VomopXsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi
NjJiYTc4NTAeFw0yNDA4MTMxMzMyNDVaFw0yNTA4MTIxMzM3NDVaMDMxMTAvBgNV
BAMTKDNBREM4ODhCQjJDNzMwODYzRDkxMUQ5MzgzREM3RkNBMEEwQTU2QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSEeHDRk/twba4tn7+wWEE8yN5
JyV6b8Ol4LXXfDecRArFbpRnlEYS5zmRMH5TJcZV31NDqrQSVOomJ9/jBARQYTbw
DJV+isqHYO/kP9TI5W0I2ynCkJAsjZimwIIb9QWki/XaNpSq47mT9CEG/M4rLNiU
jNiksKKxGHorCx85Ab9G1xjQ7CGGcSvwC4NuAUH2Pq6qKy4UV1z/oRRVyi8xw1It
B5XjM9HuHbHxKxQ5+cKUMpCjDRCnmsG4mic/6dyVsvkoXsZSU4pmuCxyTdQUZcD9
PU8ftDPCsC3mwoCsZxt3SA/UTrS36NSnLsKR54T0UwSejHsrzAVk9v9BNZ/DAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUOtyIi7LHMIY9kR2Tg9x/ygoKVsIwHwYDVR0j
BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk
ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ
cnA0VS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2U1MTBlMTct
MzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZkZjUxLzAvMzEzNTM5MmUzMjM1MzMyZTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMyMzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACf/QIw
DQYJKoZIhvcNAQELBQADggEBACUTE4GZi4Inz7zwXfwS1zFmnQtcW7NxaEr8Ehsj
spwtAujOowhm2Az0sSQ4BborFOQTFWuBATrsa8WNFUxwaEKl9SoE2Wpajc/zr0ip
CzYSrPuu0cSNQUdKZwsMlHefkQgjtDdt4XgTLzZKHCkqz9ZlZBjTOXNEOH/Wr/3f
sgn6r8uvVKRCAHgiMY1DYxTTN0a9KY5UWuSHYAh5MVf32E9aZmAg700aLIv4YCR4
pbq0wcdnwhPoaiJ+fCrCtHP/rKkEx1KOIOaB1veT591fwGlyUOgzu2LdnxqECZwU
S3WetANLCZx1SpGL0ege+xsSbtQIr1el5iX1qqEMbYIEEdA=
-----END CERTIFICATE-----
Generated at Tue Aug 13 20:45:21 2024 by rpki-client on console-fra.rpki-client.org