Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e39322e302f32342d3234203d3e203331313033.roa
File: 38372e3131382e39322e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: l/95fC3ynXOXGeXt6jUf3CNldRV8HXjnAyGPuNamfok=
Subject key identifier: 3E:58:0F:13:42:68:59:DD:E3:70:39:1A:98:AF:3F:15:02:E8:7F:02
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 76742F4903CCB5943DD8F32C1667501672721E10
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e39322e302f32342d3234203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:30 +0000
ROA not before: Fri 31 May 2024 09:30:30 +0000
ROA not after: Fri 30 May 2025 09:35:30 +0000
asID: 31103
IP address blocks: 87.118.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 13:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:74:2f:49:03:cc:b5:94:3d:d8:f3:2c:16:67:50:16:72:72:1e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:30 2024 GMT
Not After : May 30 09:35:30 2025 GMT
Subject: CN=3E580F13426859DDE370391A98AF3F1502E87F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:31:e8:0d:51:11:ca:4a:35:bf:35:cc:48:4a:
45:e8:7e:f3:39:9b:59:aa:34:64:86:3d:47:3b:b5:
66:34:20:5e:ef:25:f9:98:a7:5e:b8:fd:36:22:0b:
c5:99:a0:2d:b1:0e:5f:2f:ec:f0:a3:a4:58:37:52:
83:93:c6:98:be:01:7e:f3:15:73:fd:31:fc:2d:75:
12:ae:27:ff:8f:07:e5:b1:e0:fd:e4:62:84:7d:00:
b4:3c:f8:c9:01:0b:43:25:d9:8a:76:aa:7f:b5:ee:
e2:ef:6b:56:ce:b8:08:5b:f6:ea:77:a7:64:ec:1b:
22:2c:ea:b5:85:92:93:1b:c8:38:a9:a8:ba:2f:ac:
bf:cc:73:c1:05:24:fb:4d:45:4e:35:ad:99:7c:79:
1f:3a:9a:a6:fb:8d:48:e4:d8:fe:71:27:3d:7f:b0:
44:f8:68:e6:44:c3:7c:50:02:92:54:0e:d3:7b:09:
f9:a6:97:ea:68:06:77:bf:ba:36:00:e0:a5:ec:46:
4a:64:90:74:da:3b:34:85:e7:1e:ac:c4:c6:40:c1:
8a:c7:53:0c:14:a3:33:4a:84:b1:91:e1:1b:56:62:
44:d8:4b:9e:2f:81:1e:b3:1a:a8:a8:36:c2:db:4f:
e0:f7:20:14:f0:e0:e2:d0:de:62:c8:ed:3a:70:d0:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:0F:13:42:68:59:DD:E3:70:39:1A:98:AF:3F:15:02:E8:7F:02
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e39322e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.92.0/24
Signature Algorithm: sha256WithRSAEncryption
22:4c:cf:70:fb:77:f6:e8:ba:f1:50:c9:c7:92:2d:51:2d:ae:
43:52:b5:42:91:25:03:84:4d:43:90:95:df:fa:f6:7f:69:d2:
4b:dd:6b:39:ed:dc:47:1a:52:00:18:5c:39:f6:7e:d8:e4:02:
7c:d7:c3:30:f3:37:af:22:a2:e8:86:b8:b1:30:56:16:0c:9a:
bf:51:e5:99:27:44:39:94:8a:dd:ca:98:a9:f1:e0:1e:9c:5d:
3f:a5:83:30:09:4c:c7:68:d4:c3:1b:27:b5:52:bc:97:29:c7:
70:24:cb:99:05:a9:6f:bf:ea:b2:50:74:d1:2d:b6:7a:0c:b8:
98:01:44:70:20:62:3e:65:e8:88:be:a5:f4:c6:69:75:3c:65:
0a:1f:37:f1:0b:ae:93:8f:47:19:99:16:05:af:e4:a4:1d:1b:
5d:38:73:a9:76:19:6b:ae:fa:8a:8d:2e:e9:6e:0a:4b:e9:03:
f5:db:bd:c7:4d:90:10:3b:45:ce:f3:08:f9:bd:53:56:18:c4:
67:16:f9:7b:17:b6:f6:9d:76:ec:a2:37:e1:fe:58:84:8d:13:
29:24:92:b8:0c:ca:f9:9f:3e:fc:06:fe:1f:dd:5c:23:0b:cd:
6c:67:09:81:36:be:f4:0f:70:2e:c4:f5:0d:4d:a7:a8:51:9a:
98:36:85:45
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdnQvSQPMtZQ92PMsFmdQFnJyHhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNDA1MzEwOTMwMzBaFw0yNTA1MzAwOTM1MzBaMDMxMTAvBgNV
BAMTKDNFNTgwRjEzNDI2ODU5RERFMzcwMzkxQTk4QUYzRjE1MDJFODdGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoMegNURHKSjW/NcxISkXofvM5
m1mqNGSGPUc7tWY0IF7vJfmYp164/TYiC8WZoC2xDl8v7PCjpFg3UoOTxpi+AX7z
FXP9MfwtdRKuJ/+PB+Wx4P3kYoR9ALQ8+MkBC0Ml2Yp2qn+17uLva1bOuAhb9up3
p2TsGyIs6rWFkpMbyDipqLovrL/Mc8EFJPtNRU41rZl8eR86mqb7jUjk2P5xJz1/
sET4aOZEw3xQApJUDtN7Cfmml+poBne/ujYA4KXsRkpkkHTaOzSF5x6sxMZAwYrH
UwwUozNKhLGR4RtWYkTYS54vgR6zGqioNsLbT+D3IBTw4OLQ3mLI7Tpw0GNLAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUPlgPE0JoWd3jcDkamK8/FQLofwIwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzgzNzJlMzEzMTM4MmUzOTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMTMxMzAzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFd2
XDANBgkqhkiG9w0BAQsFAAOCAQEAIkzPcPt39ui68VDJx5ItUS2uQ1K1QpElA4RN
Q5CV3/r2f2nSS91rOe3cRxpSABhcOfZ+2OQCfNfDMPM3ryKi6Ia4sTBWFgyav1Hl
mSdEOZSK3cqYqfHgHpxdP6WDMAlMx2jUwxsntVK8lynHcCTLmQWpb7/qslB00S22
egy4mAFEcCBiPmXoiL6l9MZpdTxlCh838Quuk49HGZkWBa/kpB0bXThzqXYZa676
io0u6W4KS+kD9du9x02QEDtFzvMI+b1TVhjEZxb5exe29p127KI34f5YhI0TKSSS
uAzK+Z8+/Ab+H91cIwvNbGcJgTa+9A9wLsT1DU2nqFGamDaFRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org