Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e3132362e302f32342d3234203d3e203331313033.roa
File: 38372e3131382e3132362e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: xwtclI+fjmOh5Quj6Qr1QYgSJxmFUu7Y+kYYcWHiHPE=
Subject key identifier: C3:43:B6:20:DE:40:E2:BD:5B:31:5E:D8:6C:E3:0A:AE:A4:2F:C7:D6
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 1ED811249FBBB61C2A8D98087400F48EB9E28BAF
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e3132362e302f32342d3234203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:30 +0000
ROA not before: Fri 31 May 2024 09:30:30 +0000
ROA not after: Fri 30 May 2025 09:35:30 +0000
asID: 31103
IP address blocks: 87.118.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 13:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d8:11:24:9f:bb:b6:1c:2a:8d:98:08:74:00:f4:8e:b9:e2:8b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:30 2024 GMT
Not After : May 30 09:35:30 2025 GMT
Subject: CN=C343B620DE40E2BD5B315ED86CE30AAEA42FC7D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:49:1b:fe:50:e2:24:bd:a4:6b:72:d1:3c:9b:
e4:32:d2:48:2e:02:b8:a3:c9:fe:4c:69:83:01:01:
f1:0b:cf:69:7c:d2:9e:28:18:34:e6:9d:eb:0d:f2:
dd:c4:c3:44:0e:4f:f3:00:7c:05:e5:c4:a9:1c:bd:
64:a0:ab:bb:e1:30:eb:91:e2:22:9d:e4:9e:16:78:
7a:64:4f:c1:b5:03:6c:bb:e8:b4:63:85:fb:ca:50:
92:18:9a:63:c4:16:6f:d4:a4:7a:81:ed:ba:27:9a:
62:47:86:4b:be:a1:17:1f:05:9f:4d:e7:e7:80:44:
cb:6b:36:c5:44:86:11:c7:17:df:6e:79:e0:5e:5b:
bd:2f:82:ee:19:66:f9:e1:4c:50:50:d3:e6:34:23:
a2:c5:7d:c1:e3:8e:b4:22:d6:ae:46:a1:59:b1:71:
97:36:c0:32:4e:cb:02:da:e8:e9:78:e5:86:8a:31:
a8:7f:71:0f:49:81:1a:53:83:b2:81:11:81:4a:aa:
bc:f0:4b:11:5c:a2:5a:2c:04:7d:ef:89:99:b5:e9:
bb:9a:28:23:5f:fb:f7:58:f5:06:a9:5a:cd:8f:66:
f2:54:35:82:c0:7a:70:ff:cf:82:24:8f:10:12:6d:
6b:8e:61:6c:f7:4e:45:32:02:e0:e8:76:a8:58:7c:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:43:B6:20:DE:40:E2:BD:5B:31:5E:D8:6C:E3:0A:AE:A4:2F:C7:D6
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e3132362e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.126.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c5:0a:d1:b3:20:3b:36:90:4f:22:c3:3c:2f:54:d8:4e:0c:
a5:c4:19:ea:d7:16:dd:16:4b:c8:6d:a3:97:f7:a0:c5:c4:14:
5f:c9:3a:11:62:0b:1b:16:b6:98:0d:b0:19:f0:52:e9:21:81:
73:7a:43:2b:59:4b:f7:e9:6f:49:02:a9:56:47:74:ec:09:9b:
f6:98:b6:99:ae:f7:06:f2:f1:6f:33:58:ad:59:9e:39:01:a7:
28:5d:75:86:47:c1:a7:82:4b:40:db:46:a0:69:06:7c:9a:59:
af:3c:0a:d2:4d:47:3c:bd:09:a0:a0:67:c1:4c:4f:3e:4d:94:
8a:af:70:51:a1:3a:00:fe:2e:6c:5e:eb:72:07:0b:ff:5b:3b:
20:81:94:ed:f5:48:6c:a4:87:5e:ec:90:09:df:bc:2f:c7:cb:
1c:10:ae:28:f9:5c:47:87:c8:a2:f8:88:02:17:95:5d:b6:30:
dc:4e:ff:69:e2:14:04:91:94:3b:95:81:d1:4b:80:73:06:80:
8b:ff:96:e4:31:0e:8d:3b:31:31:ff:9e:24:03:ab:2b:0f:72:
9e:05:21:0d:56:55:d8:97:f6:e1:02:12:8b:d0:7f:54:a9:a2:
97:32:bd:ba:0a:80:31:c0:b8:68:c1:8f:8d:ad:0f:89:ea:02:
31:f2:18:0d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHtgRJJ+7thwqjZgIdAD0jrnii68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNDA1MzEwOTMwMzBaFw0yNTA1MzAwOTM1MzBaMDMxMTAvBgNV
BAMTKEMzNDNCNjIwREU0MEUyQkQ1QjMxNUVEODZDRTMwQUFFQTQyRkM3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSRv+UOIkvaRrctE8m+Qy0kgu
Arijyf5MaYMBAfELz2l80p4oGDTmnesN8t3Ew0QOT/MAfAXlxKkcvWSgq7vhMOuR
4iKd5J4WeHpkT8G1A2y76LRjhfvKUJIYmmPEFm/UpHqB7bonmmJHhku+oRcfBZ9N
5+eARMtrNsVEhhHHF99ueeBeW70vgu4ZZvnhTFBQ0+Y0I6LFfcHjjrQi1q5GoVmx
cZc2wDJOywLa6Ol45YaKMah/cQ9JgRpTg7KBEYFKqrzwSxFcolosBH3viZm16bua
KCNf+/dY9QapWs2PZvJUNYLAenD/z4IkjxASbWuOYWz3TkUyAuDodqhYfLcBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUw0O2IN5A4r1bMV7YbOMKrqQvx9YwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzgzNzJlMzEzMTM4MmUzMTMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMxMzEzMDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
V3Z+MA0GCSqGSIb3DQEBCwUAA4IBAQBHxQrRsyA7NpBPIsM8L1TYTgylxBnq1xbd
FkvIbaOX96DFxBRfyToRYgsbFraYDbAZ8FLpIYFzekMrWUv36W9JAqlWR3TsCZv2
mLaZrvcG8vFvM1itWZ45AacoXXWGR8GngktA20agaQZ8mlmvPArSTUc8vQmgoGfB
TE8+TZSKr3BRoToA/i5sXutyBwv/WzsggZTt9UhspIde7JAJ37wvx8scEK4o+VxH
h8ii+IgCF5VdtjDcTv9p4hQEkZQ7lYHRS4BzBoCL/5bkMQ6NOzEx/54kA6srD3Ke
BSENVlXYl/bhAhKL0H9UqaKXMr26CoAxwLhowY+NrQ+J6gIx8hgN
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org