Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e203339363030.roa
File: 3135392e3235332e352e302f32342d3234203d3e203339363030.roa (raw, json)
Hash identifier: oH5kyhvc3m5EWmm+WsUcwG47m0cgy7l7QOac+Ln9MgA=
Subject key identifier: C5:3B:CE:16:E1:FF:7D:8A:ED:74:A9:C8:3A:E5:CF:8D:E2:7A:5E:D3
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 0E2384E9006C7B9358F5286B25259B2406394B44
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e203339363030.roa
Signing time: Wed 18 Sep 2024 14:10:37 +0000
ROA not before: Wed 18 Sep 2024 14:05:37 +0000
ROA not after: Wed 17 Sep 2025 14:10:37 +0000
asID: 39600
IP address blocks: 159.253.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Sep 2024 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:23:84:e9:00:6c:7b:93:58:f5:28:6b:25:25:9b:24:06:39:4b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Sep 18 14:05:37 2024 GMT
Not After : Sep 17 14:10:37 2025 GMT
Subject: CN=C53BCE16E1FF7D8AED74A9C83AE5CF8DE27A5ED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:81:17:12:c0:b2:ed:f2:d7:6e:9d:ef:07:
2f:6e:e6:93:d9:3a:dd:62:92:0f:1f:d7:ff:66:b3:
0d:a8:e0:e8:c8:bb:a7:42:8b:a7:66:93:2e:dd:d2:
8e:79:7f:59:9c:28:70:79:53:9a:9d:59:ee:3b:5a:
52:e9:db:8d:f0:a3:0f:6b:82:4c:a8:aa:55:7b:a8:
65:2c:6b:83:a8:98:66:ad:8c:2d:f2:bc:fc:96:06:
c7:f8:e1:71:49:04:00:9f:9b:aa:da:06:db:10:3e:
7c:e8:c7:3e:4c:27:89:13:82:63:6d:c2:fd:3c:1a:
39:8e:44:9f:04:89:2a:6d:bd:2b:66:fe:b9:6b:18:
46:a3:53:52:fa:03:ac:18:7a:a3:64:77:51:5e:8a:
45:18:b7:8a:eb:fe:18:ba:5f:47:8b:71:39:ca:26:
ae:80:54:42:e7:36:c0:37:9c:90:25:d3:0f:a4:e6:
06:59:8b:93:e1:eb:d6:8a:69:74:cc:6e:76:e0:f9:
5e:b3:5a:24:2e:82:5b:91:9c:36:5f:a4:0d:03:4a:
a3:84:8e:f9:45:0a:dc:ab:43:35:4d:0c:6f:0f:de:
e6:40:72:9f:7d:c3:54:ac:ad:5f:11:8e:29:ae:fb:
10:03:7c:55:06:e7:46:40:1f:f5:ae:5f:9c:61:ff:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3B:CE:16:E1:FF:7D:8A:ED:74:A9:C8:3A:E5:CF:8D:E2:7A:5E:D3
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e203339363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.5.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a5:44:a9:8d:3e:bf:24:5e:64:07:e8:ff:3c:ae:d7:d1:b7:
1c:e9:32:b3:c2:35:f4:5d:00:bd:a9:b6:c5:fd:a9:56:c4:7f:
ee:f0:d4:a7:9b:a6:05:5f:c2:e4:e7:c1:b1:7b:b8:31:fa:e8:
a1:e8:41:69:9c:bb:06:15:24:9d:72:19:79:16:77:b1:a9:bc:
be:a1:57:1a:24:38:88:83:a1:43:61:39:e3:51:fb:5e:76:a0:
e4:74:b6:a8:06:b4:12:ee:57:fa:0f:99:a2:88:58:ca:68:fa:
c1:7e:08:bf:e7:77:0d:35:10:41:70:2e:fd:1a:44:f6:d2:fa:
b8:ed:87:09:bf:27:1e:fc:90:ea:dd:e0:ed:e2:ec:f0:ca:ae:
e8:01:74:61:0b:5a:17:07:91:ec:ed:db:e6:4f:92:39:bf:db:
a9:2d:fd:53:77:9a:54:25:de:55:42:99:35:30:61:91:c2:c3:
6b:ce:dc:4d:bf:47:c8:02:ef:c4:b8:26:6c:88:22:ef:43:8e:
97:cb:c1:cb:c3:e1:69:01:d0:87:77:53:3e:1d:c5:65:d9:d8:
b2:af:c1:dd:77:eb:63:43:3f:1a:b6:9c:51:01:06:49:20:17:
7f:5f:fb:02:f9:08:3c:94:de:50:b9:8d:96:6f:6d:c0:93:50:
c6:13:27:8d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDiOE6QBse5NY9ShrJSWbJAY5S0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi
NjJiYTc4NTAeFw0yNDA5MTgxNDA1MzdaFw0yNTA5MTcxNDEwMzdaMDMxMTAvBgNV
BAMTKEM1M0JDRTE2RTFGRjdEOEFFRDc0QTlDODNBRTVDRjhERTI3QTVFRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AYEXEsCy7fLXbp3vBy9u5pPZ
Ot1ikg8f1/9msw2o4OjIu6dCi6dmky7d0o55f1mcKHB5U5qdWe47WlLp243wow9r
gkyoqlV7qGUsa4OomGatjC3yvPyWBsf44XFJBACfm6raBtsQPnzoxz5MJ4kTgmNt
wv08GjmORJ8EiSptvStm/rlrGEajU1L6A6wYeqNkd1FeikUYt4rr/hi6X0eLcTnK
Jq6AVELnNsA3nJAl0w+k5gZZi5Ph69aKaXTMbnbg+V6zWiQugluRnDZfpA0DSqOE
jvlFCtyrQzVNDG8P3uZAcp99w1SsrV8Rjimu+xADfFUG50ZAH/WuX5xh/xhBAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUxTvOFuH/fYrtdKnIOuXPjeJ6XtMwHwYDVR0j
BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk
ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ
cnA0VS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2U1MTBlMTct
MzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZkZjUxLzAvMzEzNTM5MmUzMjM1MzMyZTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM2MzAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ/9
BTANBgkqhkiG9w0BAQsFAAOCAQEAOKVEqY0+vyReZAfo/zyu19G3HOkys8I19F0A
vam2xf2pVsR/7vDUp5umBV/C5OfBsXu4MfrooehBaZy7BhUknXIZeRZ3sam8vqFX
GiQ4iIOhQ2E541H7Xnag5HS2qAa0Eu5X+g+ZoohYymj6wX4Iv+d3DTUQQXAu/RpE
9tL6uO2HCb8nHvyQ6t3g7eLs8Mqu6AF0YQtaFweR7O3b5k+SOb/bqS39U3eaVCXe
VUKZNTBhkcLDa87cTb9HyALvxLgmbIgi70OOl8vBy8PhaQHQh3dTPh3FZdnYsq/B
3XfrY0M/GracUQEGSSAXf1/7AvkIPJTeULmNlm9twJNQxhMnjQ==
Generated at Sat Sep 28 02:00:29 2024 by rpki-client on console-ams.rpki-client.org