Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e39372e3134362e302f32332d3233203d3e203437353833.roa
File: 3138352e39372e3134362e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier: McXJ0aZmyOn6vaO2Qt/y2yELaVaKKFyNQATrJCGeJBE=
Subject key identifier: 5F:9E:99:DD:7B:C6:80:F4:DA:F4:EE:EC:46:8E:20:03:E7:CA:59:87
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 5A9246A8C55F6926165290E1540D6635A23E2941
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e39372e3134362e302f32332d3233203d3e203437353833.roa
Signing time: Thu 06 Jun 2024 13:54:20 +0000
ROA not before: Thu 06 Jun 2024 13:49:20 +0000
ROA not after: Thu 05 Jun 2025 13:54:20 +0000
asID: 47583
IP address blocks: 185.97.146.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Jun 2024 11:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:92:46:a8:c5:5f:69:26:16:52:90:e1:54:0d:66:35:a2:3e:29:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 6 13:49:20 2024 GMT
Not After : Jun 5 13:54:20 2025 GMT
Subject: CN=5F9E99DD7BC680F4DAF4EEEC468E2003E7CA5987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:93:74:b5:4a:ae:4a:4f:01:6f:ec:57:2e:
a8:82:8f:05:4f:0f:49:3b:84:eb:6e:60:64:25:02:
8e:d4:17:93:f7:0e:9f:85:f4:74:e5:6e:90:b2:2f:
b0:14:d8:65:84:35:d6:c1:32:ac:78:ef:16:aa:e3:
a2:d2:92:9e:40:c9:a3:3b:f9:9d:11:8f:10:b5:ab:
aa:6f:91:5f:8b:8c:63:92:90:bf:7b:8c:ba:a5:d1:
37:ee:1f:fd:6b:df:0e:ab:08:25:d5:8d:5e:82:9d:
4c:33:9e:e5:4c:67:53:1d:8c:e1:f7:f2:7c:f0:c0:
25:a2:4b:a9:b7:77:73:b9:1a:48:eb:40:6e:b7:fe:
fc:40:40:14:a1:7a:0b:eb:0e:6d:1a:25:f0:d8:8f:
8a:b1:68:ac:55:a4:d5:73:d9:20:db:d7:24:a9:93:
ab:be:3c:b7:70:e8:6a:7a:dd:1a:28:e7:16:43:ec:
d7:15:a0:9d:1d:19:85:2c:ac:f2:9e:af:a6:a4:32:
c5:a2:d1:d6:87:2f:90:31:76:19:59:78:2a:79:32:
07:ec:8b:c6:23:b3:c1:9e:2e:85:ba:94:6d:fb:22:
0a:ab:a4:4f:56:12:21:1c:fe:94:2b:f9:3f:07:e3:
0e:43:4f:5d:b0:0d:d5:2f:bf:f3:d2:9b:62:ff:81:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9E:99:DD:7B:C6:80:F4:DA:F4:EE:EC:46:8E:20:03:E7:CA:59:87
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e39372e3134362e302f32332d3233203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.146.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:d7:95:56:20:55:cf:3c:12:35:53:e8:4b:11:8d:07:8e:d4:
5d:87:6d:f4:3c:64:18:06:6d:2f:e4:9d:1b:1c:e3:3c:ff:6d:
2d:b4:a4:d0:0a:c1:44:f1:0c:78:3b:9b:e8:b8:94:0f:25:6e:
51:97:77:d4:33:4c:02:c8:3a:63:1a:8b:6a:96:9f:10:98:1c:
22:5a:05:e5:ec:16:81:a3:b8:25:23:3c:5e:53:c4:54:25:60:
74:1e:7e:a5:df:b2:c4:ec:d6:a0:8e:1c:63:4c:4c:2e:67:0d:
7f:50:c0:b8:a5:ca:5f:f4:ba:92:a0:0e:9a:fa:7d:e3:2d:24:
3d:87:39:2b:96:55:6e:51:0f:1d:0d:60:3b:78:96:bb:d0:89:
5d:e7:f8:4f:26:32:eb:b5:37:2b:28:0c:3e:d7:2e:9f:d2:46:
40:f4:7d:fd:f9:0b:07:f1:be:2e:eb:64:66:91:eb:57:16:ba:
9b:c0:24:ea:74:e3:b9:a0:78:86:ed:c1:46:75:c0:e9:c6:d6:
13:d1:23:bd:41:8b:67:ce:d8:0e:f0:15:fe:b5:ad:b2:fe:6a:
58:40:3a:38:5b:47:f0:52:41:b4:b4:33:1f:cb:c1:31:09:b6:
af:38:f2:9d:0f:aa:df:dd:ac:d9:aa:f7:1c:cf:4c:9b:dc:93:
3b:b3:1c:96
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWpJGqMVfaSYWUpDhVA1mNaI+KUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yNDA2MDYxMzQ5MjBaFw0yNTA2MDUxMzU0MjBaMDMxMTAvBgNV
BAMTKDVGOUU5OUREN0JDNjgwRjREQUY0RUVFQzQ2OEUyMDAzRTdDQTU5ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJpN0tUquSk8Bb+xXLqiCjwVP
D0k7hOtuYGQlAo7UF5P3Dp+F9HTlbpCyL7AU2GWENdbBMqx47xaq46LSkp5AyaM7
+Z0RjxC1q6pvkV+LjGOSkL97jLql0TfuH/1r3w6rCCXVjV6CnUwznuVMZ1MdjOH3
8nzwwCWiS6m3d3O5GkjrQG63/vxAQBShegvrDm0aJfDYj4qxaKxVpNVz2SDb1ySp
k6u+PLdw6Gp63Roo5xZD7NcVoJ0dGYUsrPKer6akMsWi0daHL5AxdhlZeCp5Mgfs
i8Yjs8GeLoW6lG37IgqrpE9WEiEc/pQr+T8H4w5DT12wDdUvv/PSm2L/gVRNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUX56Z3XvGgPTa9O7sRo4gA+fKWYcwHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzEzODM1MmUzOTM3MmUzMTM0
MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
uWGSMA0GCSqGSIb3DQEBCwUAA4IBAQBb15VWIFXPPBI1U+hLEY0HjtRdh230PGQY
Bm0v5J0bHOM8/20ttKTQCsFE8Qx4O5vouJQPJW5Rl3fUM0wCyDpjGotqlp8QmBwi
WgXl7BaBo7glIzxeU8RUJWB0Hn6l37LE7NagjhxjTEwuZw1/UMC4pcpf9LqSoA6a
+n3jLSQ9hzkrllVuUQ8dDWA7eJa70Ild5/hPJjLrtTcrKAw+1y6f0kZA9H39+QsH
8b4u62RmketXFrqbwCTqdOO5oHiG7cFGdcDpxtYT0SO9QYtnztgO8BX+ta2y/mpY
QDo4W0fwUkG0tDMfy8ExCbavOPKdD6rf3azZqvccz0yb3JM7sxyW
-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:32 2024 by rpki-client on console-fra.rpki-client.org