Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e203630373231.roa
File: 39322e3131342e342e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: u34nlqFuFdZaYPL7T+rfvT8ZpVeYLXZQgPCG5aw5WGY=
Subject key identifier: F8:47:00:12:67:1B:AE:AB:29:ED:DD:06:27:C9:1B:18:FD:3A:33:90
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 1A3D6D30743F746C8AE7D596A10772B781CCF742
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e203630373231.roa
Signing time: Thu 04 May 2023 10:56:22 +0000
ROA not before: Thu 04 May 2023 10:51:22 +0000
ROA not after: Thu 02 May 2024 10:56:22 +0000
asID: 60721
IP address blocks: 92.114.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3d:6d:30:74:3f:74:6c:8a:e7:d5:96:a1:07:72:b7:81:cc:f7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 4 10:51:22 2023 GMT
Not After : May 2 10:56:22 2024 GMT
Subject: CN=F8470012671BAEAB29EDDD0627C91B18FD3A3390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:80:9c:14:45:46:6b:f4:c8:2f:f5:83:8b:
d8:bc:86:02:92:92:d9:d5:a6:cb:d5:57:3d:f7:14:
f1:33:25:31:71:37:26:b1:85:a6:e9:27:47:44:00:
f3:7d:88:74:36:dd:da:a0:aa:4f:74:b8:3e:e5:5c:
e0:fc:16:b3:cf:73:de:1e:1c:7a:c3:73:f2:e2:9c:
cb:f6:5f:45:d8:d9:b1:95:30:73:11:67:7b:50:35:
e8:c4:fa:9a:52:78:01:5e:65:e7:64:bc:6c:d3:b1:
02:3c:ac:64:14:94:97:f0:c3:df:e9:94:83:b2:b1:
52:ad:a1:16:d1:7c:b4:56:5c:29:c4:2c:20:fa:0e:
f8:dc:66:01:f6:c5:46:13:ee:c8:ed:2b:a1:30:f3:
04:26:7e:08:06:13:f7:f3:42:57:7d:f0:a6:7c:b6:
a6:7c:ed:db:af:e1:4f:b9:50:41:77:d3:51:ff:a7:
c9:40:cc:0c:a2:17:97:b1:ad:9f:92:02:92:0f:ca:
f6:b8:f8:84:53:68:f6:b9:b3:ff:92:c8:e1:55:cb:
36:e5:cf:bb:8c:05:dd:3d:3e:24:6b:84:0a:ca:39:
7b:fb:eb:e9:b0:b0:e0:d2:91:e4:43:4a:d8:ec:5e:
88:0c:72:06:ca:2e:9c:c2:14:52:fe:a7:30:ae:6d:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:47:00:12:67:1B:AE:AB:29:ED:DD:06:27:C9:1B:18:FD:3A:33:90
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.4.0/24
Signature Algorithm: sha256WithRSAEncryption
38:36:0c:50:ab:02:68:82:35:e6:0e:65:27:88:71:94:b7:94:
18:44:b5:ce:35:a4:4b:61:ad:1e:d6:c3:6d:dc:45:39:31:d0:
db:92:76:79:eb:ed:fd:19:34:0d:75:16:cf:11:52:0f:42:4c:
1d:af:95:75:23:a8:c0:0d:98:a1:4d:53:fc:b8:00:6d:a2:22:
fc:35:9d:58:72:ee:88:23:1b:68:5a:66:28:58:58:7a:9f:3e:
b4:cf:b5:4f:09:43:37:10:d2:a4:fb:b8:52:40:e2:2c:bb:5a:
79:d4:cf:79:05:e7:f3:13:f4:ad:6f:76:7c:12:25:83:4c:ed:
94:82:e2:65:33:7f:ec:02:f3:16:50:be:a7:02:e8:3b:a9:e1:
12:cf:16:47:e6:16:f4:f4:23:0d:2b:c9:53:71:fc:2e:5e:f3:
f4:14:f2:04:0a:58:10:3c:0a:95:6a:1d:ff:82:e3:35:56:13:
fd:a2:20:a0:01:b5:0f:0b:aa:39:e5:b1:f6:b3:18:f7:cf:d7:
f8:f8:37:81:26:5c:af:7e:ef:df:17:45:26:ac:6d:9b:c7:0e:
ad:55:d2:98:18:84:ae:f1:76:9f:68:0f:06:3a:dc:9b:1a:b4:
11:32:05:76:75:0e:97:87:8f:c3:4c:94:85:13:1a:54:a1:9e:
53:c6:90:6f
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUGj1tMHQ/dGyK59WWoQdyt4HM90IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yMzA1MDQxMDUxMjJaFw0yNDA1MDIxMDU2MjJaMDMxMTAvBgNV
BAMTKEY4NDcwMDEyNjcxQkFFQUIyOUVEREQwNjI3QzkxQjE4RkQzQTMzOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/oCcFEVGa/TIL/WDi9i8hgKS
ktnVpsvVVz33FPEzJTFxNyaxhabpJ0dEAPN9iHQ23dqgqk90uD7lXOD8FrPPc94e
HHrDc/LinMv2X0XY2bGVMHMRZ3tQNejE+ppSeAFeZedkvGzTsQI8rGQUlJfww9/p
lIOysVKtoRbRfLRWXCnELCD6DvjcZgH2xUYT7sjtK6Ew8wQmfggGE/fzQld98KZ8
tqZ87duv4U+5UEF301H/p8lAzAyiF5exrZ+SApIPyva4+IRTaPa5s/+SyOFVyzbl
z7uMBd09PiRrhArKOXv76+mwsODSkeRDStjsXogMcgbKLpzCFFL+pzCubR43AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU+EcAEmcbrqsp7d0GJ8kbGP06M5AwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzkzMjJlMzEzMTM0MmUzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzNzMyMzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABccgQw
DQYJKoZIhvcNAQELBQADggEBADg2DFCrAmiCNeYOZSeIcZS3lBhEtc41pEthrR7W
w23cRTkx0NuSdnnr7f0ZNA11Fs8RUg9CTB2vlXUjqMANmKFNU/y4AG2iIvw1nVhy
7ogjG2haZihYWHqfPrTPtU8JQzcQ0qT7uFJA4iy7WnnUz3kF5/MT9K1vdnwSJYNM
7ZSC4mUzf+wC8xZQvqcC6Dup4RLPFkfmFvT0Iw0ryVNx/C5e8/QU8gQKWBA8CpVq
Hf+C4zVWE/2iIKABtQ8LqjnlsfazGPfP1/j4N4EmXK9+798XRSasbZvHDq1V0pgY
hK7xdp9oDwY63JsatBEyBXZ1DpeHj8NMlIUTGlShnlPGkG8=
Generated at Tue Jul 25 11:28:57 2023 by rpki-client on console-ams.rpki-client.org