Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20383334.roa
File: 3139332e3234362e3130322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ViuJf6qrnVaS8DLQ4PZ9t2zRHZYKbyEFP6uZP6Q6Psc=
Subject key identifier: AD:90:11:C9:92:99:AF:22:D6:B4:45:93:C9:30:AD:39:AF:9C:08:E2
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 1BBFF1B693A40EB39873DFBEEE16800D264AE879
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20383334.roa
Signing time: Wed 06 Nov 2024 00:02:28 +0000
ROA not before: Tue 05 Nov 2024 23:57:28 +0000
ROA not after: Wed 05 Nov 2025 00:02:28 +0000
asID: 834
IP address blocks: 193.246.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 12:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:bf:f1:b6:93:a4:0e:b3:98:73:df:be:ee:16:80:0d:26:4a:e8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Nov 5 23:57:28 2024 GMT
Not After : Nov 5 00:02:28 2025 GMT
Subject: CN=AD9011C99299AF22D6B44593C930AD39AF9C08E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:ec:70:6a:f9:c0:06:ad:a6:ea:6b:e7:ff:
7a:1f:15:fd:a6:57:36:1d:56:7e:db:15:7a:d5:0a:
82:04:4a:52:1b:36:db:66:61:6d:d7:ac:f8:a9:ee:
84:4d:9e:00:6b:27:85:49:25:b6:a6:d8:ab:92:0b:
e8:a4:72:6e:84:bc:1d:db:9a:9a:c3:a6:fb:f0:89:
10:02:b5:d2:af:86:53:4e:85:9f:76:02:68:7b:ba:
00:aa:75:5e:c9:45:5b:25:b4:ed:9f:8e:98:c1:18:
f6:97:e9:4f:dd:96:3c:68:75:b7:66:1c:c0:55:5e:
d1:a9:ee:2b:a9:1a:be:a7:52:ff:58:2c:92:a3:af:
7a:7f:a7:8a:32:f6:29:b7:54:1f:f6:8d:4d:bd:2e:
4e:40:cc:4e:c7:e2:1a:e5:ad:39:28:d4:ca:9e:96:
d6:01:d3:04:e2:78:79:63:e3:a2:5e:dd:63:51:c2:
04:1e:bf:74:c7:cb:9c:24:cb:f4:4c:27:2a:92:7b:
1a:ca:eb:0b:a2:cb:58:a3:f6:77:b8:5f:5c:8b:6e:
54:db:b7:78:5b:1b:18:f1:bc:33:c8:72:1e:dd:12:
16:77:75:31:e3:69:3c:be:63:fb:ce:e0:ba:3d:85:
22:20:7a:00:56:13:2f:e9:55:1a:61:ce:6e:6c:b4:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:11:C9:92:99:AF:22:D6:B4:45:93:C9:30:AD:39:AF:9C:08:E2
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e6:c8:00:8f:15:3f:4f:1a:5d:08:6b:cb:5a:ad:ca:57:be:
d3:6b:27:61:3e:00:03:fd:62:3d:b5:cd:f9:88:b9:b6:38:75:
d2:9c:63:44:79:a7:1d:74:7e:9a:2f:9a:34:73:72:e4:f2:51:
68:dd:03:d2:87:74:cf:6e:2c:ba:46:66:ac:57:7a:bd:78:b5:
18:94:61:48:ca:75:dd:a5:da:13:19:8f:9b:9c:4d:8e:7d:1c:
99:d5:90:58:b2:f3:d3:ad:1b:0e:df:cc:93:9f:93:28:0c:0f:
3f:e1:64:dc:b0:77:c6:c6:6f:c0:be:7b:fe:80:21:f4:b9:82:
33:14:6e:49:cd:6e:b4:1b:78:d6:c0:c7:69:93:d2:65:cc:24:
3d:76:8d:40:dd:d1:c8:96:5a:53:4b:05:24:2b:4b:b2:6a:e7:
62:3e:54:1d:29:a1:f2:09:0b:fd:3d:8e:b5:c8:72:d6:1a:ce:
7a:57:d1:98:c2:b0:65:72:e0:9a:32:0f:6e:ef:32:a5:da:71:
f1:75:f1:15:58:cb:f7:2e:76:60:ea:02:53:eb:c3:60:2f:01:
19:98:e2:e9:aa:a3:08:f9:28:c4:3c:f0:c3:53:9a:a6:bc:1f:
f2:7f:1f:a8:e6:8a:ac:de:ce:eb:d8:e4:5e:21:a3:43:e0:78:
77:2f:62:24
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUG7/xtpOkDrOYc9++7haADSZK6HkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi
NDk0YTdiZjAeFw0yNDExMDUyMzU3MjhaFw0yNTExMDUwMDAyMjhaMDMxMTAvBgNV
BAMTKEFEOTAxMUM5OTI5OUFGMjJENkI0NDU5M0M5MzBBRDM5QUY5QzA4RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwuxwavnABq2m6mvn/3ofFf2m
VzYdVn7bFXrVCoIESlIbNttmYW3XrPip7oRNngBrJ4VJJbam2KuSC+ikcm6EvB3b
mprDpvvwiRACtdKvhlNOhZ92Amh7ugCqdV7JRVsltO2fjpjBGPaX6U/dljxodbdm
HMBVXtGp7iupGr6nUv9YLJKjr3p/p4oy9im3VB/2jU29Lk5AzE7H4hrlrTko1Mqe
ltYB0wTieHlj46Je3WNRwgQev3THy5wky/RMJyqSexrK6wuiy1ij9ne4X1yLblTb
t3hbGxjxvDPIch7dEhZ3dTHjaTy+Y/vO4Lo9hSIgegBWEy/pVRphzm5stM9XAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUrZARyZKZryLWtEWTyTCtOa+cCOIwHwYDVR0j
BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0
ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT
VXA3OC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEt
YTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0ZjI4LzAvMzEzOTMzMmUzMjM0MzYyZTMx
MzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMH2
ZjANBgkqhkiG9w0BAQsFAAOCAQEAGubIAI8VP08aXQhry1qtyle+02snYT4AA/1i
PbXN+Yi5tjh10pxjRHmnHXR+mi+aNHNy5PJRaN0D0od0z24sukZmrFd6vXi1GJRh
SMp13aXaExmPm5xNjn0cmdWQWLLz060bDt/Mk5+TKAwPP+Fk3LB3xsZvwL57/oAh
9LmCMxRuSc1utBt41sDHaZPSZcwkPXaNQN3RyJZaU0sFJCtLsmrnYj5UHSmh8gkL
/T2Otchy1hrOelfRmMKwZXLgmjIPbu8ypdpx8XXxFVjL9y52YOoCU+vDYC8BGZji
6aqjCPkoxDzww1Oaprwf8n8fqOaKrN7O69jkXiGjQ+B4dy9iJA==
Generated at Fri Nov 15 14:01:50 2024 by rpki-client on console-fra.rpki-client.org