Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e342e302f32342d3234203d3e20383334.roa
File: 3139332e3234362e342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: bhOMD4o6FBywk7/ZOf8vWy6AROtnbuHq7PogBr96wUM=
Subject key identifier: 1A:2C:A0:0B:F2:7C:66:AE:01:45:E0:3E:AD:CC:D8:38:20:4D:03:44
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 50218E36502FB53218E059856AC5C892823AC1B3
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e342e302f32342d3234203d3e20383334.roa
Signing time: Thu 20 Jun 2024 12:27:27 +0000
ROA not before: Thu 20 Jun 2024 12:22:27 +0000
ROA not after: Thu 19 Jun 2025 12:27:27 +0000
asID: 834
IP address blocks: 193.246.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 06:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:21:8e:36:50:2f:b5:32:18:e0:59:85:6a:c5:c8:92:82:3a:c1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Jun 20 12:22:27 2024 GMT
Not After : Jun 19 12:27:27 2025 GMT
Subject: CN=1A2CA00BF27C66AE0145E03EADCCD838204D0344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:76:c2:7c:d4:4d:84:73:3d:7e:09:90:6a:
63:52:8f:d5:08:16:4e:4a:68:75:10:39:f7:50:57:
78:9c:5e:f5:34:2a:ac:d9:e0:d9:a3:5b:c9:25:52:
66:b2:58:8a:37:b7:2d:fa:1e:45:a4:af:cb:7a:79:
c5:1b:f7:39:ab:d6:98:a9:40:2a:61:b2:bf:e8:b3:
47:65:4a:e6:5b:a5:62:01:71:8e:b3:38:ca:1f:d7:
77:44:a5:af:14:5b:3c:9d:48:66:55:2a:dc:0a:0d:
58:ea:07:6e:38:4c:94:af:e1:68:82:4a:69:6f:9e:
8c:dc:22:04:cd:f5:7c:26:c9:9d:de:cf:57:5c:dc:
3f:aa:7c:8e:f7:82:4d:e7:48:26:14:f4:21:ec:46:
17:ad:8e:7d:9d:e4:98:d7:78:58:f2:c1:77:77:d9:
9f:c4:d7:3a:a5:a6:11:04:e2:a6:fd:1c:ca:e0:d6:
46:29:0e:b1:7b:5d:99:88:29:13:ee:11:d6:1c:00:
56:04:53:4b:f1:bb:e9:63:31:78:a2:c7:ec:63:4f:
96:b4:d2:fd:41:84:b9:ce:4e:0c:67:14:09:07:9c:
2f:3d:60:78:23:4d:81:e3:e4:3a:c6:0d:96:a5:60:
d9:40:59:55:78:d1:e1:c2:33:7f:e9:f4:29:23:99:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:A0:0B:F2:7C:66:AE:01:45:E0:3E:AD:CC:D8:38:20:4D:03:44
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.4.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:04:e2:9e:a1:86:d4:e1:99:e4:aa:3b:91:a6:01:26:1b:da:
0f:8a:f0:47:60:9d:89:da:6b:ac:c7:36:80:ab:20:4d:ec:6a:
2d:13:c1:1c:0e:1a:3a:ec:38:ed:d0:85:38:78:fe:87:2a:88:
40:89:43:e8:a3:9e:8a:b6:69:d8:8a:45:c6:c8:9d:1f:8d:7e:
e4:ca:eb:ee:61:c3:92:50:09:f1:84:ad:e1:cb:f1:c7:9e:a5:
cc:4b:1d:92:85:b6:23:0a:24:84:38:f3:a9:e6:d9:41:ac:00:
3b:01:a7:5c:21:b8:cc:dc:08:a8:7c:32:22:4e:66:17:8b:a9:
4d:8c:d4:47:76:7f:e1:f3:e8:5a:e8:7b:d6:34:d9:59:9d:c0:
cc:4f:09:2e:d1:1c:c1:e5:4a:c8:90:ff:b0:17:33:ed:6c:48:
9e:61:bf:03:d1:33:95:1e:75:80:15:4a:9b:0d:03:d2:09:cd:
ef:b9:b2:cb:95:20:46:d7:5a:b8:d4:bf:8a:27:00:61:36:a9:
83:c0:76:df:c1:73:e8:cd:fb:2f:38:7f:cb:b3:b7:18:9e:83:
da:22:ff:bf:8c:be:f4:ff:21:02:ea:27:e7:12:9d:46:d6:df:
d8:9d:d8:15:25:e3:5f:84:fc:11:6f:55:68:dd:ec:25:cc:dc:
fc:0f:6c:5f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUUCGONlAvtTIY4FmFasXIkoI6wbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi
NDk0YTdiZjAeFw0yNDA2MjAxMjIyMjdaFw0yNTA2MTkxMjI3MjdaMDMxMTAvBgNV
BAMTKDFBMkNBMDBCRjI3QzY2QUUwMTQ1RTAzRUFEQ0NEODM4MjA0RDAzNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4HbCfNRNhHM9fgmQamNSj9UI
Fk5KaHUQOfdQV3icXvU0KqzZ4NmjW8klUmayWIo3ty36HkWkr8t6ecUb9zmr1pip
QCphsr/os0dlSuZbpWIBcY6zOMof13dEpa8UWzydSGZVKtwKDVjqB244TJSv4WiC
SmlvnozcIgTN9XwmyZ3ez1dc3D+qfI73gk3nSCYU9CHsRhetjn2d5JjXeFjywXd3
2Z/E1zqlphEE4qb9HMrg1kYpDrF7XZmIKRPuEdYcAFYEU0vxu+ljMXiix+xjT5a0
0v1BhLnOTgxnFAkHnC89YHgjTYHj5DrGDZalYNlAWVV40eHCM3/p9CkjmUCDAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUGiygC/J8Zq4BReA+rczYOCBNA0QwHwYDVR0j
BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0
ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT
VXA3OC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEt
YTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0ZjI4LzAvMzEzOTMzMmUzMjM0MzYyZTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfYEMA0G
CSqGSIb3DQEBCwUAA4IBAQC5BOKeoYbU4ZnkqjuRpgEmG9oPivBHYJ2J2musxzaA
qyBN7GotE8EcDho67Djt0IU4eP6HKohAiUPoo56KtmnYikXGyJ0fjX7kyuvuYcOS
UAnxhK3hy/HHnqXMSx2ShbYjCiSEOPOp5tlBrAA7AadcIbjM3AiofDIiTmYXi6lN
jNRHdn/h8+ha6HvWNNlZncDMTwku0RzB5UrIkP+wFzPtbEieYb8D0TOVHnWAFUqb
DQPSCc3vubLLlSBG11q41L+KJwBhNqmDwHbfwXPozfsvOH/Ls7cYnoPaIv+/jL70
/yEC6ifnEp1G1t/YndgVJeNfhPwRb1Vo3ewlzNz8D2xf
Generated at Wed Jun 26 11:54:52 2024 by rpki-client on console-fra.rpki-client.org