Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e38362e302f32342d3234203d3e203331313033.roa
File: 38372e3131382e38362e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: RGSok/xdUB+UetiseMy+i7phT8Zp1Nyk493f24ojsAI=
Subject key identifier: 78:CF:80:55:5A:8D:18:60:A4:05:95:AC:F1:FB:B6:A5:A2:CD:D1:DE
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 6C7B03B55F1B1118ADE75922A4658D4365344364
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e38362e302f32342d3234203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:30 +0000
ROA not before: Fri 31 May 2024 09:30:30 +0000
ROA not after: Fri 30 May 2025 09:35:30 +0000
asID: 31103
IP address blocks: 87.118.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 13:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:7b:03:b5:5f:1b:11:18:ad:e7:59:22:a4:65:8d:43:65:34:43:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:30 2024 GMT
Not After : May 30 09:35:30 2025 GMT
Subject: CN=78CF80555A8D1860A40595ACF1FBB6A5A2CDD1DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:71:85:9c:b3:3a:f9:82:8f:d8:80:da:4b:
ca:ec:37:06:ed:21:96:42:95:34:5a:1a:48:79:01:
37:ff:e0:a7:83:6f:ce:e3:f6:23:b6:bd:d8:a9:e3:
d6:b2:b9:f6:3e:47:15:37:64:0c:f3:bc:ae:2e:79:
84:7f:5f:9d:bf:01:39:b6:0c:54:7b:4b:f7:d7:6b:
d7:25:4e:6e:09:17:b1:11:92:0b:9f:b3:7e:a1:f7:
a0:8e:d6:40:86:40:b1:da:ac:5a:2d:91:af:1c:bd:
b7:3f:c4:76:c5:85:d7:75:85:a1:4c:45:28:9a:47:
50:b6:77:a3:35:c0:0d:39:b5:11:71:22:4b:3c:37:
6d:3d:a4:52:93:dc:99:d9:4c:a2:e9:7e:c2:c5:1a:
af:02:37:f2:9d:c4:40:10:3a:ea:c2:bc:88:6d:0c:
73:6b:df:f9:20:08:41:2e:2e:7a:b0:3b:9b:bf:3c:
c0:c6:06:09:91:56:71:4a:5b:25:90:06:cf:30:d9:
25:86:8e:86:8e:25:70:f9:d0:fb:9c:86:0a:83:dc:
e8:13:63:c6:3c:10:88:24:47:47:71:d3:b0:e5:58:
95:c3:d8:e1:68:10:f7:06:3a:94:de:1a:d4:94:8b:
55:d9:04:f6:65:29:05:c2:d6:2c:53:f7:b7:a1:d4:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CF:80:55:5A:8D:18:60:A4:05:95:AC:F1:FB:B6:A5:A2:CD:D1:DE
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e38362e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bf:1f:43:a6:1d:89:c2:c1:11:31:ff:42:c2:ea:fa:35:9a:
6b:74:dd:f6:22:fa:6d:e2:b3:a9:b4:6f:56:8b:3a:23:89:13:
5e:cc:c7:a7:ed:8b:ea:5d:10:ab:c6:02:f2:db:22:57:f0:56:
92:36:99:66:7b:b5:e3:34:80:60:2f:a3:a4:e0:80:1c:2f:12:
56:3c:99:aa:28:8d:f5:af:4a:07:9a:08:1a:17:7d:0b:63:76:
21:b5:46:e2:2e:3b:1f:0b:ee:1f:aa:5f:02:16:cb:f5:ad:98:
6c:cb:46:13:fd:5d:f5:0b:4c:1e:a2:34:f2:5f:c5:a0:f5:51:
3e:ad:51:37:fc:6b:76:66:fb:8b:c0:79:df:f2:cf:b1:32:0b:
70:bb:5a:99:9f:d0:d5:9d:68:3d:66:b8:4a:ef:f2:f9:7b:5e:
e4:e3:40:a7:58:1d:7e:af:5c:0f:6c:32:d7:3b:2b:6c:7d:54:
4f:0d:3c:3f:ba:4a:82:65:92:69:4e:6c:85:9e:db:7f:2b:cd:
a3:cc:06:2e:12:af:5f:97:c5:05:c6:d4:31:18:04:d7:b7:1e:
3f:9c:a9:8b:27:0f:65:bf:b6:15:f8:5a:42:96:40:96:fb:eb:
da:43:2f:26:16:11:43:79:dc:f9:e7:75:9b:21:d6:44:30:b6:
91:79:e5:4e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbHsDtV8bERit51kipGWNQ2U0Q2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNDA1MzEwOTMwMzBaFw0yNTA1MzAwOTM1MzBaMDMxMTAvBgNV
BAMTKDc4Q0Y4MDU1NUE4RDE4NjBBNDA1OTVBQ0YxRkJCNkE1QTJDREQxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNN3GFnLM6+YKP2IDaS8rsNwbt
IZZClTRaGkh5ATf/4KeDb87j9iO2vdip49ayufY+RxU3ZAzzvK4ueYR/X52/ATm2
DFR7S/fXa9clTm4JF7ERkgufs36h96CO1kCGQLHarFotka8cvbc/xHbFhdd1haFM
RSiaR1C2d6M1wA05tRFxIks8N209pFKT3JnZTKLpfsLFGq8CN/KdxEAQOurCvIht
DHNr3/kgCEEuLnqwO5u/PMDGBgmRVnFKWyWQBs8w2SWGjoaOJXD50PuchgqD3OgT
Y8Y8EIgkR0dx07DlWJXD2OFoEPcGOpTeGtSUi1XZBPZlKQXC1ixT97eh1NM5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUeM+AVVqNGGCkBZWs8fu2paLN0d4wHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzgzNzJlMzEzMTM4MmUzODM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMTMxMzAzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFd2
VjANBgkqhkiG9w0BAQsFAAOCAQEAsL8fQ6YdicLBETH/QsLq+jWaa3Td9iL6beKz
qbRvVos6I4kTXszHp+2L6l0Qq8YC8tsiV/BWkjaZZnu14zSAYC+jpOCAHC8SVjyZ
qiiN9a9KB5oIGhd9C2N2IbVG4i47HwvuH6pfAhbL9a2YbMtGE/1d9QtMHqI08l/F
oPVRPq1RN/xrdmb7i8B53/LPsTILcLtamZ/Q1Z1oPWa4Su/y+Xte5ONAp1gdfq9c
D2wy1zsrbH1UTw08P7pKgmWSaU5shZ7bfyvNo8wGLhKvX5fFBcbUMRgE17ceP5yp
iycPZb+2FfhaQpZAlvvr2kMvJhYRQ3nc+ed1myHWRDC2kXnlTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org