Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e203631313335.roa
File: 3139332e3234362e3130322e302f32342d3234203d3e203631313335.roa (raw, json)
Hash identifier: Qeep2sGOy49IIDdn6AnLdVtvA+Hh5ml4HtpX+ZFl+8E=
Subject key identifier: 4A:9B:08:5B:51:AC:7C:0D:9D:9E:08:59:EC:0C:35:BB:9F:67:7A:50
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 2913AD7A80F844827617AF5CF6D38E0572993D23
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e203631313335.roa
Signing time: Thu 28 Dec 2023 02:48:52 +0000
ROA not before: Thu 28 Dec 2023 02:43:52 +0000
ROA not after: Thu 26 Dec 2024 02:48:52 +0000
asID: 61135
IP address blocks: 193.246.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:13:ad:7a:80:f8:44:82:76:17:af:5c:f6:d3:8e:05:72:99:3d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Dec 28 02:43:52 2023 GMT
Not After : Dec 26 02:48:52 2024 GMT
Subject: CN=4A9B085B51AC7C0D9D9E0859EC0C35BB9F677A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:8e:b5:e6:b6:75:d4:a9:20:09:a1:31:de:
08:f2:c4:b7:4c:d4:47:2e:ab:08:8c:97:2e:20:53:
1a:73:26:39:78:7d:cf:a9:64:b3:cb:bd:9d:d2:0c:
c6:ca:cc:8d:77:78:7e:14:75:3f:8a:b1:46:4e:be:
4c:56:a7:05:08:7e:3f:ad:89:67:8e:64:90:b5:ef:
25:f9:11:66:a7:a7:cc:6c:78:23:f5:8e:b0:e2:66:
27:cf:f6:20:5a:6f:34:89:40:d2:e7:fe:eb:be:d9:
ea:c3:fa:01:5d:21:63:5a:b8:11:70:7f:42:1f:09:
a8:e4:7e:05:fb:89:ec:fa:62:ba:0e:f3:bc:b1:0e:
53:72:ad:d8:7d:38:f8:ba:f8:4b:27:ba:ba:3a:4d:
04:60:5f:25:30:6a:12:de:05:6d:a5:40:a3:a1:bb:
fd:2e:5d:28:da:4d:0a:06:1f:56:1c:c9:84:09:96:
d1:4e:1b:5d:9c:a4:af:d6:dc:f5:f7:01:7e:5a:a8:
5e:72:8e:57:9c:0e:5a:c7:ce:5f:c4:c3:87:fd:99:
9f:ac:4e:0b:4d:5a:88:3c:b4:81:9f:dd:15:fe:ff:
ee:8c:19:e0:fb:a5:3a:de:c3:b7:55:fe:5c:ea:d4:
b9:e2:4a:c9:c0:e5:ca:30:23:7a:c8:12:eb:df:29:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:08:5B:51:AC:7C:0D:9D:9E:08:59:EC:0C:35:BB:9F:67:7A:50
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e203631313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.102.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5f:23:7f:00:34:c1:e7:19:ff:66:4c:82:01:3b:04:ea:57:
16:5f:9f:51:55:cc:98:d4:22:ac:cb:20:cb:52:e2:d5:81:0d:
42:b2:66:19:2a:a6:f5:bc:a3:63:56:44:b6:5a:e0:51:14:48:
a1:ea:cc:7c:66:1e:2b:11:1b:26:46:c6:c7:3b:f5:b6:76:db:
2d:d1:7e:19:15:8c:62:65:4a:02:15:75:60:07:bd:f2:1b:6f:
1e:60:a8:48:84:45:4d:26:6a:6f:94:fd:18:10:1e:b7:b1:55:
14:f1:ce:31:55:a6:1f:da:4f:74:fe:a0:bb:c6:3e:8b:b0:0f:
83:c8:3d:84:4a:c9:e2:f1:5f:d3:cb:e0:d6:da:2c:2a:ff:c0:
ce:79:08:27:ec:77:90:77:ff:b8:e0:32:ba:de:67:e0:6a:27:
56:c3:38:82:7d:48:e3:17:29:91:71:e5:2a:2b:8b:59:8a:58:
83:75:1e:8e:b9:90:67:3b:ad:8e:57:bf:a7:39:38:6f:c0:29:
a9:ce:ae:f2:1c:fd:81:cf:88:49:c4:57:57:fa:4b:92:c1:88:
02:9a:ab:67:1e:ea:87:d3:ea:d0:a9:77:68:39:54:00:a9:7c:
29:fa:23:8f:e5:56:e4:8a:96:c1:79:67:54:bb:6b:51:79:ec:
5d:73:c8:72
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUKROteoD4RIJ2F69c9tOOBXKZPSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi
NDk0YTdiZjAeFw0yMzEyMjgwMjQzNTJaFw0yNDEyMjYwMjQ4NTJaMDMxMTAvBgNV
BAMTKDRBOUIwODVCNTFBQzdDMEQ5RDlFMDg1OUVDMEMzNUJCOUY2NzdBNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUY615rZ11KkgCaEx3gjyxLdM
1EcuqwiMly4gUxpzJjl4fc+pZLPLvZ3SDMbKzI13eH4UdT+KsUZOvkxWpwUIfj+t
iWeOZJC17yX5EWanp8xseCP1jrDiZifP9iBabzSJQNLn/uu+2erD+gFdIWNauBFw
f0IfCajkfgX7iez6YroO87yxDlNyrdh9OPi6+Esnuro6TQRgXyUwahLeBW2lQKOh
u/0uXSjaTQoGH1YcyYQJltFOG12cpK/W3PX3AX5aqF5yjlecDlrHzl/Ew4f9mZ+s
TgtNWog8tIGf3RX+/+6MGeD7pTrew7dV/lzq1LniSsnA5cowI3rIEuvfKdQpAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUSpsIW1GsfA2dnghZ7Aw1u59nelAwHwYDVR0j
BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0
ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT
VXA3OC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEt
YTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0ZjI4LzAvMzEzOTMzMmUzMjM0MzYyZTMx
MzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMTMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADB9mYwDQYJKoZIhvcNAQELBQADggEBAEBfI38ANMHnGf9mTIIBOwTqVxZfn1FV
zJjUIqzLIMtS4tWBDUKyZhkqpvW8o2NWRLZa4FEUSKHqzHxmHisRGyZGxsc79bZ2
2y3RfhkVjGJlSgIVdWAHvfIbbx5gqEiERU0mam+U/RgQHrexVRTxzjFVph/aT3T+
oLvGPouwD4PIPYRKyeLxX9PL4NbaLCr/wM55CCfsd5B3/7jgMrreZ+BqJ1bDOIJ9
SOMXKZFx5Sori1mKWIN1Ho65kGc7rY5Xv6c5OG/AKanOrvIc/YHPiEnEV1f6S5LB
iAKaq2ce6ofT6tCpd2g5VACpfCn6I4/lVuSKlsF5Z1S7a1F57F1zyHI=
Generated at Sun Jan 28 01:08:59 2024 by rpki-client on console-ams.rpki-client.org