Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3139332e33352e3232362e302f32342d3234203d3e20383334.roa
File: 3139332e33352e3232362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: woIuxIZt+OHJ/flKHx2mpLoD6fXXOR3luREZjYvSElU=
Subject key identifier: 84:3A:35:FD:DA:25:3C:F4:F8:D5:81:86:90:57:82:31:F5:0C:F1:43
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 3715AD83A32A5C9ED62AA3CEBDCEAB7DD8491B8C
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3139332e33352e3232362e302f32342d3234203d3e20383334.roa
Signing time: Thu 13 Jun 2024 00:04:37 +0000
ROA not before: Wed 12 Jun 2024 23:59:37 +0000
ROA not after: Thu 12 Jun 2025 00:04:37 +0000
asID: 834
IP address blocks: 193.35.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 10:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:15:ad:83:a3:2a:5c:9e:d6:2a:a3:ce:bd:ce:ab:7d:d8:49:1b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jun 12 23:59:37 2024 GMT
Not After : Jun 12 00:04:37 2025 GMT
Subject: CN=843A35FDDA253CF4F8D5818690578231F50CF143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b0:47:39:fc:4e:45:9e:e8:80:0b:ef:4c:00:
07:47:26:9a:a0:6e:f2:f4:37:07:9d:52:19:0c:9c:
a3:8c:f4:b2:e1:45:d3:53:c3:1f:46:a1:3e:3a:f9:
39:8a:f4:66:80:ff:9c:c1:4b:a1:74:86:a1:3e:82:
fd:1c:b0:cb:7b:cf:02:89:6c:2a:3b:02:cf:6d:e2:
8e:9b:44:31:2a:ec:f1:c6:45:44:ea:f8:f4:e4:ad:
01:7e:d0:2c:c0:2f:af:1d:25:fb:2f:91:b2:88:08:
80:04:86:91:2a:e7:19:69:74:d0:a1:07:d8:13:17:
63:5b:0b:b6:30:d9:bb:4a:ed:05:ed:53:0e:23:6b:
51:26:b7:c4:1d:8a:53:23:73:dd:86:47:e7:de:94:
3a:9f:8e:b2:5a:c8:90:f4:9b:ad:63:41:4a:f9:c4:
94:95:a4:63:f4:bc:56:c4:f5:77:ee:55:cf:ab:af:
3f:73:65:64:4c:cf:df:39:91:5e:3e:66:5f:20:d0:
f5:36:6a:67:f0:46:cd:e2:55:0b:d6:93:c8:74:54:
b0:ae:b2:af:68:cf:71:3d:08:1b:b1:ce:b5:c3:2c:
53:46:95:78:e4:ab:6e:1f:11:25:75:13:72:f8:55:
69:fc:5f:40:a0:30:82:8c:ca:d4:aa:4c:c9:32:2b:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3A:35:FD:DA:25:3C:F4:F8:D5:81:86:90:57:82:31:F5:0C:F1:43
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3139332e33352e3232362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.226.0/24
Signature Algorithm: sha256WithRSAEncryption
82:0b:12:45:34:52:3c:8b:0b:d5:72:b8:27:61:53:91:cf:d3:
29:ce:a8:59:43:6c:75:f3:b2:1d:ef:04:c2:b1:21:8b:c8:d5:
74:c6:03:8f:67:3d:46:f9:af:cf:c2:9f:ca:a9:10:ae:39:24:
d1:da:5c:a7:4d:19:64:58:c3:f4:63:58:71:1a:6a:bb:a7:10:
92:28:4b:dd:a4:c3:4e:d6:07:32:dd:7c:22:41:f8:4a:a6:77:
26:4b:a1:94:a1:c2:ce:37:40:94:4c:2e:d7:e0:81:ad:a0:e1:
ba:5d:6b:ee:94:86:83:b2:ac:5a:84:dd:bb:d6:9c:5b:a6:41:
0b:53:18:51:26:3d:d7:69:66:61:90:12:7c:ea:22:ff:d5:23:
9c:23:24:57:b4:f6:a0:cd:a9:33:90:0c:cb:bc:4f:ab:66:8e:
51:a6:a3:7f:1a:b8:8a:39:b2:48:2a:d9:1e:76:01:7a:65:bf:
30:e2:d6:40:1b:9e:c6:72:e2:3e:00:a9:91:3d:5c:46:49:08:
f8:ca:15:66:66:b4:1a:2b:05:61:e3:80:18:9b:17:4f:d1:f9:
7e:28:ea:f5:1d:fe:a5:7d:94:af:8d:0c:c3:c4:c9:6f:32:82:
d2:34:77:4f:83:9c:5c:87:9d:b4:4d:49:6c:6d:6d:8a:a4:06:
c7:98:e2:96
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUNxWtg6MqXJ7WKqPOvc6rfdhJG4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNDA2MTIyMzU5MzdaFw0yNTA2MTIwMDA0MzdaMDMxMTAvBgNV
BAMTKDg0M0EzNUZEREEyNTNDRjRGOEQ1ODE4NjkwNTc4MjMxRjUwQ0YxNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDisEc5/E5FnuiAC+9MAAdHJpqg
bvL0NwedUhkMnKOM9LLhRdNTwx9GoT46+TmK9GaA/5zBS6F0hqE+gv0csMt7zwKJ
bCo7As9t4o6bRDEq7PHGRUTq+PTkrQF+0CzAL68dJfsvkbKICIAEhpEq5xlpdNCh
B9gTF2NbC7Yw2btK7QXtUw4ja1Emt8QdilMjc92GR+felDqfjrJayJD0m61jQUr5
xJSVpGP0vFbE9XfuVc+rrz9zZWRMz985kV4+Zl8g0PU2amfwRs3iVQvWk8h0VLCu
sq9oz3E9CBuxzrXDLFNGlXjkq24fESV1E3L4VWn8X0CgMIKMytSqTMkyK9R1AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUhDo1/dolPPT41YGGkFeCMfUM8UMwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzOTMzMmUzMzM1MmUzMjMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBI+Iw
DQYJKoZIhvcNAQELBQADggEBAIILEkU0UjyLC9VyuCdhU5HP0ynOqFlDbHXzsh3v
BMKxIYvI1XTGA49nPUb5r8/Cn8qpEK45JNHaXKdNGWRYw/RjWHEaarunEJIoS92k
w07WBzLdfCJB+EqmdyZLoZShws43QJRMLtfgga2g4bpda+6UhoOyrFqE3bvWnFum
QQtTGFEmPddpZmGQEnzqIv/VI5wjJFe09qDNqTOQDMu8T6tmjlGmo38auIo5skgq
2R52AXplvzDi1kAbnsZy4j4AqZE9XEZJCPjKFWZmtBorBWHjgBibF0/R+X4o6vUd
/qV9lK+NDMPEyW8ygtI0d0+DnFyHnbRNSWxtbYqkBseY4pY=
Generated at Sat Jun 15 13:43:37 2024 by rpki-client on console-fra.rpki-client.org