Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3139332e332e3136352e302f32342d3234203d3e20323130353631.roa
File: 3139332e332e3136352e302f32342d3234203d3e20323130353631.roa (raw, json)
Hash identifier: MlHnpZrKFQJi3JLzHDgNgFF9PKHuCDCWUoIqsp5sW1Y=
Subject key identifier: A8:60:CC:EE:CF:16:99:F8:57:8B:65:34:3F:28:69:5F:C7:5D:B3:EF
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1925D05713B5AD5888BC18FB32707FF8A42F82EE
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3139332e332e3136352e302f32342d3234203d3e20323130353631.roa
Signing time: Sun 30 Jun 2024 12:15:19 +0000
ROA not before: Sun 30 Jun 2024 12:10:19 +0000
ROA not after: Sun 29 Jun 2025 12:15:19 +0000
asID: 210561
IP address blocks: 193.3.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jul 2024 17:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:25:d0:57:13:b5:ad:58:88:bc:18:fb:32:70:7f:f8:a4:2f:82:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:19 2024 GMT
Not After : Jun 29 12:15:19 2025 GMT
Subject: CN=A860CCEECF1699F8578B65343F28695FC75DB3EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:7e:3c:86:24:54:8f:22:01:91:32:27:56:
89:38:cd:43:b0:ce:33:a4:05:d5:ec:b9:38:37:18:
f1:c9:cd:9a:87:a6:41:48:22:4f:53:59:39:33:51:
f5:8b:3d:75:33:b9:ac:04:8a:03:fb:55:05:10:08:
79:32:2f:01:0d:42:13:1c:87:d6:7d:1a:62:28:88:
1c:96:25:cc:a9:28:1f:f8:6f:bb:cf:69:6f:ad:fb:
f4:37:33:28:60:c5:fe:3b:85:5e:5f:ae:8e:76:4e:
9d:5e:8b:0a:6d:f3:28:9a:45:db:f9:3d:c9:73:69:
23:cf:eb:77:60:8c:3e:86:94:ea:46:bf:88:d3:03:
fa:60:0a:65:ab:f5:53:82:52:37:81:2a:39:08:d1:
fc:a8:94:92:6d:af:4a:8c:c7:8f:c4:76:3c:93:12:
38:0e:f5:61:ce:ed:b5:08:6c:2a:d0:51:02:77:d0:
63:51:24:c3:50:fa:a9:62:69:b4:de:bf:0e:a9:20:
d6:2d:1d:4e:d8:44:cb:5c:45:73:a8:17:60:34:1b:
a8:3a:70:a9:b4:91:63:4e:9d:54:3d:6f:27:b1:5f:
70:86:e3:52:bb:da:fa:50:1f:54:f6:bc:9b:a0:51:
e8:01:a8:79:8e:d5:a0:33:e4:54:96:5c:d6:e5:5e:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:60:CC:EE:CF:16:99:F8:57:8B:65:34:3F:28:69:5F:C7:5D:B3:EF
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3139332e332e3136352e302f32342d3234203d3e20323130353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.165.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ed:94:80:ac:8a:86:b3:80:6d:c9:87:49:23:92:45:eb:7e:
ad:5c:34:70:a4:dc:be:86:24:3b:e3:d3:ab:1b:d1:20:ee:2f:
b9:25:bc:3b:41:9f:b8:66:76:75:f1:ff:d3:87:5d:b6:b4:65:
9c:da:94:e8:cf:0b:ec:16:b8:81:f3:06:74:3e:65:46:59:96:
fb:e6:40:af:74:ee:5a:02:9d:f2:0c:60:91:2f:ad:a1:bd:b2:
a4:a2:9f:34:a5:ec:14:3f:ef:48:c8:55:1b:92:06:92:5b:fc:
55:45:e7:25:d4:f5:27:f8:bd:0c:1c:f2:74:63:fc:96:b5:14:
7b:0d:d1:c6:69:2f:50:ff:f5:d7:0e:5a:c2:43:c5:3f:23:e6:
0a:e1:a5:4c:6a:25:79:fa:53:e8:d4:82:21:1e:8c:bb:b5:c7:
52:ae:f1:95:d1:e1:fd:5e:e8:63:5d:2e:4d:d4:d8:78:94:bd:
26:c0:65:da:44:f3:0e:ff:00:7d:a4:54:37:7d:f2:d2:42:76:
7e:0d:ec:9b:bc:92:ac:7d:61:63:f0:14:57:73:16:de:70:de:
65:bd:37:67:04:37:9a:a5:59:29:30:d4:7c:24:d8:2b:72:00:
9e:9f:ef:83:83:c2:b5:f9:1e:d4:ce:c6:f1:16:3c:8d:05:b3:
f6:f4:ce:9c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGSXQVxO1rViIvBj7MnB/+KQvgu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMTlaFw0yNTA2MjkxMjE1MTlaMDMxMTAvBgNV
BAMTKEE4NjBDQ0VFQ0YxNjk5Rjg1NzhCNjUzNDNGMjg2OTVGQzc1REIzRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgN348hiRUjyIBkTInVok4zUOw
zjOkBdXsuTg3GPHJzZqHpkFIIk9TWTkzUfWLPXUzuawEigP7VQUQCHkyLwENQhMc
h9Z9GmIoiByWJcypKB/4b7vPaW+t+/Q3Myhgxf47hV5fro52Tp1eiwpt8yiaRdv5
PclzaSPP63dgjD6GlOpGv4jTA/pgCmWr9VOCUjeBKjkI0fyolJJtr0qMx4/EdjyT
EjgO9WHO7bUIbCrQUQJ30GNRJMNQ+qliabTevw6pINYtHU7YRMtcRXOoF2A0G6g6
cKm0kWNOnVQ9byexX3CG41K72vpQH1T2vJugUegBqHmO1aAz5FSWXNblXrunAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUqGDM7s8WmfhXi2U0PyhpX8dds+8wHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzEzOTMzMmUzMzJlMzEzNjM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMwMzUzNjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wQOlMA0GCSqGSIb3DQEBCwUAA4IBAQBA7ZSArIqGs4BtyYdJI5JF636tXDRwpNy+
hiQ749OrG9Eg7i+5Jbw7QZ+4ZnZ18f/Th122tGWc2pTozwvsFriB8wZ0PmVGWZb7
5kCvdO5aAp3yDGCRL62hvbKkop80pewUP+9IyFUbkgaSW/xVRecl1PUn+L0MHPJ0
Y/yWtRR7DdHGaS9Q//XXDlrCQ8U/I+YK4aVMaiV5+lPo1IIhHoy7tcdSrvGV0eH9
XuhjXS5N1Nh4lL0mwGXaRPMO/wB9pFQ3ffLSQnZ+DeybvJKsfWFj8BRXcxbecN5l
vTdnBDeapVkpMNR8JNgrcgCen++Dg8K1+R7UzsbxFjyNBbP29M6c
-----END CERTIFICATE-----
Generated at Sun Jul 7 20:10:42 2024 by rpki-client on console-ams.rpki-client.org