Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130332e302f32342d3234203d3e20323135393338.roa
File: 3139332e3230302e3130332e302f32342d3234203d3e20323135393338.roa (raw, json)
Hash identifier: nv9bKcxMAjbL1AekzCcbkgdV3c8gPHxEeQjOAPa+UME=
Subject key identifier: C2:01:CE:2A:19:8F:D4:BF:EF:26:6D:A4:97:E2:F9:A1:84:7A:94:88
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 0E13F44C179EB783254565A04361668F6AE79A2E
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130332e302f32342d3234203d3e20323135393338.roa
Signing time: Tue 12 Mar 2024 06:16:52 +0000
ROA not before: Tue 12 Mar 2024 06:11:52 +0000
ROA not after: Tue 11 Mar 2025 06:16:52 +0000
asID: 215938
IP address blocks: 193.200.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:13:f4:4c:17:9e:b7:83:25:45:65:a0:43:61:66:8f:6a:e7:9a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Mar 12 06:11:52 2024 GMT
Not After : Mar 11 06:16:52 2025 GMT
Subject: CN=C201CE2A198FD4BFEF266DA497E2F9A1847A9488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:69:47:22:02:01:ac:1c:9f:ac:b8:36:2d:
1c:ec:12:1f:7c:58:34:32:fa:5c:21:08:1c:77:36:
5b:9e:c0:c4:8e:be:87:b0:42:17:97:2b:9b:43:5b:
11:99:a1:04:8c:b6:db:5e:c9:5f:3f:00:0c:81:de:
26:22:70:c7:ba:ba:13:86:c6:e1:79:ae:73:43:c3:
30:79:a2:81:00:33:4c:dc:32:27:fc:6d:68:cb:32:
16:c9:37:91:b8:03:6d:f4:00:27:76:21:1a:5e:ce:
4a:50:41:10:ad:3a:66:13:e6:47:20:b2:4f:92:b0:
79:7e:25:7a:e0:1a:fc:51:a1:03:fe:02:9b:ef:e2:
95:49:03:f3:0d:47:b1:0b:20:34:cc:64:50:55:4b:
ec:9a:f1:66:4d:00:78:8b:e5:f0:7c:63:56:c4:8d:
22:0e:4e:c1:43:de:cb:7b:81:ca:ff:69:b9:02:96:
a6:a6:14:66:79:e4:8c:cc:74:9e:db:a4:c7:7f:9a:
84:81:31:b6:05:fe:c9:a6:8d:25:21:37:23:c0:03:
44:e7:0a:10:3a:7c:7d:f1:17:96:b3:40:e0:2c:31:
ca:89:2f:88:da:24:46:9a:09:07:2a:37:a5:05:e5:
41:d0:fc:37:f6:d1:bc:9d:6b:02:10:5b:a5:f6:c4:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:01:CE:2A:19:8F:D4:BF:EF:26:6D:A4:97:E2:F9:A1:84:7A:94:88
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230302e3130332e302f32342d3234203d3e20323135393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.103.0/24
Signature Algorithm: sha256WithRSAEncryption
62:4d:7b:eb:2e:c2:7b:02:f7:63:bc:ed:0f:d9:e3:e2:1d:6c:
2f:08:3e:d1:13:53:47:e3:d1:98:20:82:d7:f9:de:c1:34:46:
16:62:b5:bd:c4:80:fd:8e:d8:d8:c7:f5:d7:61:1d:b0:3c:6d:
b6:67:81:c3:09:49:7d:7a:62:ac:cb:f9:34:30:9d:7d:11:6b:
95:be:b3:06:d7:8c:48:00:e8:35:78:4a:45:25:d2:4d:45:84:
ce:71:68:7a:b0:e5:ad:4f:95:e3:99:2b:26:fa:08:f2:fa:76:
59:9b:a2:a9:90:85:de:24:bc:63:e4:5f:96:0c:6a:4a:1a:31:
6f:9c:dc:a7:4d:2b:4b:f0:55:a5:15:11:c4:09:e2:69:a0:62:
fb:8f:f1:8d:ec:3d:47:01:6e:19:07:ef:f4:dc:b5:df:65:dc:
1e:8c:47:8d:49:13:ea:3c:8f:ae:ab:17:9f:98:03:b6:9c:70:
07:81:71:2f:26:df:ed:94:af:03:37:64:dc:ab:7a:ab:1a:89:
d3:30:a6:14:62:e0:92:84:1a:d7:ee:1b:c0:ec:c6:7e:bb:8d:
a4:7f:ef:04:58:5c:61:1b:66:0e:64:42:a0:fd:fb:ae:18:c9:
97:84:2f:f0:f2:49:33:6e:19:39:42:60:db:32:b9:0a:52:4b:
fb:4a:de:ad
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUDhP0TBeet4MlRWWgQ2Fmj2rnmi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUxMWY2ZDdkZWY0YzBmZmI2ZTJiM2IzZjBjNDQ1NWRj
ZDE0YzE2MDAeFw0yNDAzMTIwNjExNTJaFw0yNTAzMTEwNjE2NTJaMDMxMTAvBgNV
BAMTKEMyMDFDRTJBMTk4RkQ0QkZFRjI2NkRBNDk3RTJGOUExODQ3QTk0ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3WlHIgIBrByfrLg2LRzsEh98
WDQy+lwhCBx3NluewMSOvoewQheXK5tDWxGZoQSMttteyV8/AAyB3iYicMe6uhOG
xuF5rnNDwzB5ooEAM0zcMif8bWjLMhbJN5G4A230ACd2IRpezkpQQRCtOmYT5kcg
sk+SsHl+JXrgGvxRoQP+Apvv4pVJA/MNR7ELIDTMZFBVS+ya8WZNAHiL5fB8Y1bE
jSIOTsFD3st7gcr/abkClqamFGZ55IzMdJ7bpMd/moSBMbYF/smmjSUhNyPAA0Tn
ChA6fH3xF5azQOAsMcqJL4jaJEaaCQcqN6UF5UHQ/Df20bydawIQW6X2xC+/AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUwgHOKhmP1L/vJm2kl+L5oYR6lIgwHwYDVR0j
BBgwFoAUVRH21970wP+24rOz8MRFXc0UwWAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA4YmM0OWQtMDMzOC00YjVmLTgyMDQtMDAwNGE2NjEw
NWM5LzAvNTUxMUY2RDdERUY0QzBGRkI2RTJCM0IzRjBDNDQ1NURDRDE0QzE2MC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZSSDIxOTcwd1AtMjRyT3o4TVJGWGMw
VXdXQS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDA4YmM0OWQt
MDMzOC00YjVmLTgyMDQtMDAwNGE2NjEwNWM5LzAvMzEzOTMzMmUzMjMwMzAyZTMx
MzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTM5MzMzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMHIZzANBgkqhkiG9w0BAQsFAAOCAQEAYk176y7CewL3Y7ztD9nj4h1sLwg+
0RNTR+PRmCCC1/newTRGFmK1vcSA/Y7Y2Mf112EdsDxttmeBwwlJfXpirMv5NDCd
fRFrlb6zBteMSADoNXhKRSXSTUWEznFoerDlrU+V45krJvoI8vp2WZuiqZCF3iS8
Y+RflgxqShoxb5zcp00rS/BVpRURxAniaaBi+4/xjew9RwFuGQfv9Ny132XcHoxH
jUkT6jyPrqsXn5gDtpxwB4FxLybf7ZSvAzdk3Kt6qxqJ0zCmFGLgkoQa1+4bwOzG
fruNpH/vBFhcYRtmDmRCoP37rhjJl4Qv8PJJM24ZOUJg2zK5ClJL+0rerQ==
Generated at Wed Apr 3 03:45:04 2024 by rpki-client on console-fra.rpki-client.org