Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36362e302f32342d3234203d3e20383334.roa
File: 3139342e3131332e36362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: q5o5k1DTyjHq2YI7aC9upK8g6pMDH+GLY+34eCj2STs=
Subject key identifier: C6:8C:E5:D6:8B:20:ED:4A:1D:E1:17:5C:28:B6:28:ED:82:AD:27:AC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5C36E3D0B88698C9CB9886E96BE04196AAD5A0F3
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36362e302f32342d3234203d3e20383334.roa
Signing time: Fri 27 Dec 2024 11:47:44 +0000
ROA not before: Fri 27 Dec 2024 11:42:44 +0000
ROA not after: Fri 26 Dec 2025 11:47:44 +0000
asID: 834
IP address blocks: 194.113.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 13:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:36:e3:d0:b8:86:98:c9:cb:98:86:e9:6b:e0:41:96:aa:d5:a0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:44 2024 GMT
Not After : Dec 26 11:47:44 2025 GMT
Subject: CN=C68CE5D68B20ED4A1DE1175C28B628ED82AD27AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:28:33:2a:a9:52:e7:ad:1b:d9:a6:75:cc:
7e:53:9b:63:b0:f7:a2:ed:f0:38:e5:3b:0a:1f:16:
fa:ee:65:3e:26:1a:c8:c1:b0:4a:5a:86:fd:cc:56:
2d:2e:3f:fc:d3:32:96:02:1a:1c:d8:a1:6a:3d:aa:
90:39:fe:90:f5:5a:3b:6c:4a:73:8a:c2:9b:11:82:
b3:c6:c2:9e:b2:60:cb:7f:49:18:32:65:d6:bd:6e:
12:d1:dc:01:16:4c:b5:05:9a:c8:d1:78:af:d6:b8:
11:25:c6:ff:31:ec:ad:47:96:46:90:58:a8:bf:10:
fd:68:d2:ee:e2:cb:21:57:cb:8d:02:31:6a:18:87:
09:75:ef:8a:fe:74:6e:0a:fb:b3:15:1b:19:23:e5:
5e:0b:84:60:82:2e:15:c2:26:a5:81:cb:60:ca:96:
3d:1c:93:9c:de:be:2c:28:74:c4:c7:c4:ce:c6:05:
49:a8:75:58:82:bd:33:c1:94:ae:29:a0:0c:e8:3e:
7b:c5:70:72:e2:3e:ef:1d:9f:9b:49:be:5f:d9:2a:
df:f5:ea:b1:ef:57:ab:fe:d5:ab:7d:39:0e:9a:a2:
6e:3f:39:b6:2c:72:7c:ca:8f:06:79:5f:c5:96:ae:
e8:d8:38:c2:27:d2:d7:62:fb:dd:df:fd:47:11:65:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:E5:D6:8B:20:ED:4A:1D:E1:17:5C:28:B6:28:ED:82:AD:27:AC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.66.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9f:d7:55:03:8e:5d:be:f7:6e:f9:e2:da:9d:4b:3f:83:f3:
53:b1:d9:93:10:a2:17:68:b6:f4:03:fc:86:af:32:a5:f7:0c:
bc:c1:57:d7:c9:10:20:25:cb:89:bf:02:e9:e5:c2:89:f3:3c:
4b:a2:f4:a9:45:2d:0f:40:92:ad:fe:8d:fd:f5:d9:a8:ca:a0:
06:40:be:2a:21:7e:e2:48:39:1a:fd:2b:a9:67:03:48:78:1e:
39:fd:f5:ee:02:af:99:54:1c:74:ff:31:e2:34:df:e8:eb:c2:
9f:21:6b:94:6e:8c:21:64:d3:4f:c8:b6:f2:b8:69:24:04:fe:
f0:82:d6:f0:5e:36:c5:41:6b:1e:3f:33:7f:c0:45:69:db:a3:
2b:fb:b7:89:69:54:04:b8:e3:30:13:91:b7:0a:72:ec:41:5b:
5a:19:89:d5:e2:07:dd:e8:5b:3b:4d:e9:4e:c7:43:8a:82:d3:
a2:94:c8:64:d8:fe:c4:90:1c:71:96:d2:51:c0:54:fa:5b:ce:
67:32:18:73:7b:04:5e:3e:77:92:a4:02:a5:b3:e8:49:6a:82:
8b:71:fe:80:0d:15:3b:ae:36:be:19:2e:25:19:aa:b8:7e:a7:
bb:ce:ad:4c:b8:69:46:fa:3d:78:0d:68:57:f0:da:90:10:7d:
ef:91:0c:4b
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUXDbj0LiGmMnLmIbpa+BBlqrVoPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyNDRaFw0yNTEyMjYxMTQ3NDRaMDMxMTAvBgNV
BAMTKEM2OENFNUQ2OEIyMEVENEExREUxMTc1QzI4QjYyOEVEODJBRDI3QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxNygzKqlS560b2aZ1zH5Tm2Ow
96Lt8DjlOwofFvruZT4mGsjBsEpahv3MVi0uP/zTMpYCGhzYoWo9qpA5/pD1Wjts
SnOKwpsRgrPGwp6yYMt/SRgyZda9bhLR3AEWTLUFmsjReK/WuBElxv8x7K1HlkaQ
WKi/EP1o0u7iyyFXy40CMWoYhwl174r+dG4K+7MVGxkj5V4LhGCCLhXCJqWBy2DK
lj0ck5zeviwodMTHxM7GBUmodViCvTPBlK4poAzoPnvFcHLiPu8dn5tJvl/ZKt/1
6rHvV6v+1at9OQ6aom4/ObYscnzKjwZ5X8WWrujYOMIn0tdi+93f/UcRZYbTAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUxozl1osg7Uod4RdcKLYo7YKtJ6wwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz
MzJlMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AMJxQjANBgkqhkiG9w0BAQsFAAOCAQEARJ/XVQOOXb73bvni2p1LP4PzU7HZkxCi
F2i29AP8hq8ypfcMvMFX18kQICXLib8C6eXCifM8S6L0qUUtD0CSrf6N/fXZqMqg
BkC+KiF+4kg5Gv0rqWcDSHgeOf317gKvmVQcdP8x4jTf6OvCnyFrlG6MIWTTT8i2
8rhpJAT+8ILW8F42xUFrHj8zf8BFadujK/u3iWlUBLjjMBORtwpy7EFbWhmJ1eIH
3ehbO03pTsdDioLTopTIZNj+xJAccZbSUcBU+lvOZzIYc3sEXj53kqQCpbPoSWqC
i3H+gA0VO642vhkuJRmquH6nu86tTLhpRvo9eA1oV/DakBB975EMSw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:55:37 2025 by rpki-client