Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e3132372e302f32342d3234203d3e203331313033.roa
File: 38372e3131382e3132372e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: zf43iXyjYQ6MyTYTz0lTqXP80DaXXwohtp4RdkibRZw=
Subject key identifier: 7A:88:AA:90:9C:21:36:F0:3C:66:DA:4D:31:81:A1:09:57:B9:35:66
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 20F273AE5AF0C477DD0EAC3AB2CB58FC4E85DD8F
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e3132372e302f32342d3234203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:30 +0000
ROA not before: Fri 31 May 2024 09:30:30 +0000
ROA not after: Fri 30 May 2025 09:35:30 +0000
asID: 31103
IP address blocks: 87.118.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 13:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f2:73:ae:5a:f0:c4:77:dd:0e:ac:3a:b2:cb:58:fc:4e:85:dd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:30 2024 GMT
Not After : May 30 09:35:30 2025 GMT
Subject: CN=7A88AA909C2136F03C66DA4D3181A10957B93566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:d7:23:47:98:06:86:1b:13:9a:1e:bc:83:
6a:9d:e8:dd:83:58:29:f8:6c:92:37:af:2a:e6:22:
7f:1a:62:43:d4:9b:93:21:8b:c4:a3:e4:d7:f4:85:
53:8c:17:b0:4e:28:f0:83:5b:9f:0d:81:e2:a6:50:
c8:9e:bb:af:57:67:1e:c9:aa:f9:e6:42:f6:f8:a3:
b2:e5:be:4d:2c:18:8a:50:f6:e7:07:ac:d7:63:df:
b4:64:f5:fc:bf:0e:ee:b5:22:09:d1:de:4e:d3:ab:
32:0c:5b:29:e6:a1:d2:b0:a1:66:6a:5c:c8:fa:fe:
25:3e:60:1e:ee:34:0e:c8:79:a9:a6:4f:23:d2:97:
a1:9e:ea:4f:76:d4:b4:a1:79:14:2a:5f:40:8c:bd:
30:0e:e3:d6:fd:f4:e3:9f:45:33:ef:41:80:1d:4b:
b1:2c:bb:22:02:a3:67:c5:44:61:9c:90:a8:a5:b5:
33:2a:dd:66:d7:b2:9d:55:68:e1:19:54:42:c9:ef:
7e:8a:20:7c:45:3a:17:46:c8:4a:76:62:dc:68:b6:
5f:db:52:6e:0e:e5:4e:1f:14:fa:b7:24:8e:e7:4e:
ee:44:76:ab:c0:8d:7a:19:f2:67:d5:c7:0a:d1:e9:
be:6e:7c:fe:5e:55:2e:bb:48:ed:b2:77:e7:c8:3e:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:88:AA:90:9C:21:36:F0:3C:66:DA:4D:31:81:A1:09:57:B9:35:66
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e3132372e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.127.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ef:37:6d:90:60:06:7c:ea:d9:2a:d9:cb:2e:ab:00:ad:49:
87:e6:e2:1d:2a:11:66:8d:94:c1:68:dc:c2:b0:32:17:28:63:
61:fe:d7:2e:4f:b8:54:cd:e3:9b:be:56:f5:33:5c:6a:26:14:
04:5f:ec:e1:69:e9:9f:b0:c4:c5:42:14:31:5a:f6:a4:9a:c3:
73:09:6a:1e:df:88:f2:d5:1c:2c:21:f3:90:1f:1b:b9:88:5c:
13:5c:d0:cb:15:1c:d8:e9:66:4b:16:6d:5c:7b:b5:2c:73:42:
49:ba:11:59:ad:a4:f2:7c:ea:aa:c3:69:dc:d3:04:bc:d6:48:
d3:58:6c:26:44:fb:e0:af:e6:f0:65:1b:95:a6:c2:bc:e4:b8:
44:d4:1c:1e:89:b8:bb:fd:e6:87:64:16:e5:4d:b5:a3:44:e8:
58:97:5b:c2:cd:dd:9c:f0:e6:5b:3a:12:73:37:ed:7b:d5:05:
d0:6d:af:c2:d6:07:61:40:72:7c:f0:05:5e:ea:9f:f7:d5:ac:
b1:ad:c9:24:f8:48:c4:99:3d:cf:0c:97:5f:78:ce:78:3c:7f:
17:af:c9:46:f1:ff:6a:b7:2b:59:77:7f:af:5b:11:4f:62:04:
7c:1a:35:8f:ca:fb:c7:d8:e0:aa:82:2b:b5:d7:d9:b6:9b:da:
84:36:b0:14
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIPJzrlrwxHfdDqw6sstY/E6F3Y8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNDA1MzEwOTMwMzBaFw0yNTA1MzAwOTM1MzBaMDMxMTAvBgNV
BAMTKDdBODhBQTkwOUMyMTM2RjAzQzY2REE0RDMxODFBMTA5NTdCOTM1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XtcjR5gGhhsTmh68g2qd6N2D
WCn4bJI3ryrmIn8aYkPUm5Mhi8Sj5Nf0hVOMF7BOKPCDW58NgeKmUMieu69XZx7J
qvnmQvb4o7Llvk0sGIpQ9ucHrNdj37Rk9fy/Du61IgnR3k7TqzIMWynmodKwoWZq
XMj6/iU+YB7uNA7IeammTyPSl6Ge6k921LSheRQqX0CMvTAO49b99OOfRTPvQYAd
S7EsuyICo2fFRGGckKiltTMq3WbXsp1VaOEZVELJ736KIHxFOhdGyEp2Ytxotl/b
Um4O5U4fFPq3JI7nTu5EdqvAjXoZ8mfVxwrR6b5ufP5eVS67SO2yd+fIPmifAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUeoiqkJwhNvA8ZtpNMYGhCVe5NWYwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzgzNzJlMzEzMTM4MmUzMTMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMxMzEzMDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
V3Z/MA0GCSqGSIb3DQEBCwUAA4IBAQAW7zdtkGAGfOrZKtnLLqsArUmH5uIdKhFm
jZTBaNzCsDIXKGNh/tcuT7hUzeObvlb1M1xqJhQEX+zhaemfsMTFQhQxWvakmsNz
CWoe34jy1RwsIfOQHxu5iFwTXNDLFRzY6WZLFm1ce7Usc0JJuhFZraTyfOqqw2nc
0wS81kjTWGwmRPvgr+bwZRuVpsK85LhE1Bweibi7/eaHZBblTbWjROhYl1vCzd2c
8OZbOhJzN+171QXQba/C1gdhQHJ88AVe6p/31ayxrckk+EjEmT3PDJdfeM54PH8X
r8lG8f9qtytZd3+vWxFPYgR8GjWPyvvH2OCqgiu119m2m9qENrAU
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org