Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33362e302f32342d3234203d3e20383334.roa
File: 3134392e36322e33362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: b/3GadYxmmPh9LpxluK67Hr03SMW77j9A9ME6jW+UMA=
Subject key identifier: 1A:A5:64:F0:06:53:77:BB:FF:8B:FA:F5:A7:63:C2:CC:6C:88:96:18
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 10FB9AAFF1A932972DF8EAE45C18B901B3147EEF
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33362e302f32342d3234203d3e20383334.roa
Signing time: Tue 13 Aug 2024 10:08:29 +0000
ROA not before: Tue 13 Aug 2024 10:03:29 +0000
ROA not after: Tue 12 Aug 2025 10:08:29 +0000
asID: 834
IP address blocks: 149.62.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 06:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fb:9a:af:f1:a9:32:97:2d:f8:ea:e4:5c:18:b9:01:b3:14:7e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Aug 13 10:03:29 2024 GMT
Not After : Aug 12 10:08:29 2025 GMT
Subject: CN=1AA564F0065377BBFF8BFAF5A763C2CC6C889618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:55:f1:d7:5f:4b:2d:b0:28:f3:90:67:53:
18:bb:f8:a1:40:87:61:f9:e1:5d:bb:06:24:86:d0:
56:ba:2f:3d:2b:a9:56:32:e6:e1:9a:a3:52:f3:99:
8b:99:21:86:b1:ef:2a:a4:b0:e3:d7:82:15:fb:28:
e3:ce:99:9b:b2:ce:97:1a:bf:6a:93:70:b5:4d:db:
ef:eb:d5:da:ae:30:04:a9:d4:e8:c0:8d:46:0c:4c:
81:87:2d:c5:80:ce:6c:49:d4:48:63:ba:69:c6:2b:
b7:53:73:43:30:44:5b:14:c3:17:ce:24:4f:94:ce:
34:02:d3:84:74:dd:e0:77:3c:a3:54:4a:a7:7e:42:
5e:dc:1a:7a:86:16:2b:e3:db:bf:99:c7:a0:22:ca:
1c:f5:b5:14:4b:b6:6b:a7:c5:fb:7b:85:05:f0:3d:
a4:55:d1:17:2e:ae:50:5c:64:bf:fe:c8:ee:20:6a:
b7:a1:65:52:13:06:c7:0b:d8:84:e6:b1:4e:30:66:
03:77:96:eb:da:3b:e3:47:37:43:7d:99:c0:f1:fc:
89:e2:65:b5:47:4f:c2:62:87:0a:77:0d:fd:72:8d:
6c:02:9a:a6:de:ce:70:0a:f2:2b:09:e1:6e:fa:63:
1d:c9:24:bf:b1:94:fb:0f:5b:ad:d3:1c:7a:3c:6c:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:64:F0:06:53:77:BB:FF:8B:FA:F5:A7:63:C2:CC:6C:88:96:18
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:48:8a:4d:42:95:9c:48:76:f0:bf:3a:15:fa:9b:f4:45:2a:
4e:24:d6:ac:9c:b1:11:02:d0:e3:2b:64:57:71:6b:5f:c6:15:
17:5d:5f:04:31:86:92:5f:ab:72:d3:fd:61:0c:2a:5d:7b:83:
e3:8f:1a:8b:35:e4:ac:f1:46:13:21:37:f4:05:8c:0d:13:75:
3d:b9:ff:39:70:93:8a:fb:14:45:d4:ed:52:03:32:1e:ad:64:
d7:ef:f7:73:5a:5b:f1:45:89:1c:d3:cc:c7:98:94:b4:99:b2:
d0:7b:2e:ee:7f:6f:c7:a4:1b:3e:4a:93:a5:79:2f:de:79:08:
a5:c2:01:04:41:79:ae:30:98:b1:fb:33:24:a8:39:49:34:87:
e1:36:87:0b:17:82:14:49:9a:6c:19:b0:69:a1:6d:08:a4:aa:
b8:4c:24:12:5c:26:71:75:0d:7c:17:79:56:89:1f:58:df:35:
d2:84:db:eb:d7:01:c1:06:7c:90:de:e5:ea:0b:4a:12:6d:2d:
49:a2:1c:5c:fb:0f:5a:a7:0e:66:c6:83:6c:f4:55:77:40:aa:
26:e2:82:00:d1:1a:1d:d0:5a:2b:16:6f:3b:48:33:e6:8d:22:
9b:f1:eb:fa:ac:e8:8e:fe:70:5b:c3:bd:05:02:7a:35:0c:5d:
43:dd:e3:f7
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUEPuar/GpMpct+OrkXBi5AbMUfu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yNDA4MTMxMDAzMjlaFw0yNTA4MTIxMDA4MjlaMDMxMTAvBgNV
BAMTKDFBQTU2NEYwMDY1Mzc3QkJGRjhCRkFGNUE3NjNDMkNDNkM4ODk2MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW8lXx119LLbAo85BnUxi7+KFA
h2H54V27BiSG0Fa6Lz0rqVYy5uGao1LzmYuZIYax7yqksOPXghX7KOPOmZuyzpca
v2qTcLVN2+/r1dquMASp1OjAjUYMTIGHLcWAzmxJ1EhjumnGK7dTc0MwRFsUwxfO
JE+UzjQC04R03eB3PKNUSqd+Ql7cGnqGFivj27+Zx6Aiyhz1tRRLtmunxft7hQXw
PaRV0RcurlBcZL/+yO4garehZVITBscL2ITmsU4wZgN3luvaO+NHN0N9mcDx/Ini
ZbVHT8Jihwp3Df1yjWwCmqbeznAK8isJ4W76Yx3JJL+xlPsPW63THHo8bPI7AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUGqVk8AZTd7v/i/r1p2PCzGyIlhgwHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzEzNDM5MmUzNjMyMmUzMzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlT4kMA0G
CSqGSIb3DQEBCwUAA4IBAQBeSIpNQpWcSHbwvzoV+pv0RSpOJNasnLERAtDjK2RX
cWtfxhUXXV8EMYaSX6ty0/1hDCpde4PjjxqLNeSs8UYTITf0BYwNE3U9uf85cJOK
+xRF1O1SAzIerWTX7/dzWlvxRYkc08zHmJS0mbLQey7uf2/HpBs+SpOleS/eeQil
wgEEQXmuMJix+zMkqDlJNIfhNocLF4IUSZpsGbBpoW0IpKq4TCQSXCZxdQ18F3lW
iR9Y3zXShNvr1wHBBnyQ3uXqC0oSbS1Johxc+w9apw5mxoNs9FV3QKom4oIA0Rod
0ForFm87SDPmjSKb8ev6rOiO/nBbw70FAno1DF1D3eP3
-----END CERTIFICATE-----
Generated at Fri Aug 23 09:29:22 2024 by rpki-client on console-ams.rpki-client.org