Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3138372e3133302e302f32342d3234203d3e2030.roa
File: 3139332e3138372e3133302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: mik7TzNrXfhqTj3JP0N8n362Hg3hVcYRnZ7SvTJF/TU=
Subject key identifier: 54:6D:7E:CC:07:3A:B8:3A:79:24:89:D0:46:93:30:E2:44:FC:4E:0A
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 18505257FC79E409844AC355EF96C1F3F95D52C1
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3138372e3133302e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:02 +0000
ROA not before: Mon 27 Mar 2023 08:23:02 +0000
ROA not after: Mon 25 Mar 2024 08:28:02 +0000
asID: 0
IP address blocks: 193.187.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:50:52:57:fc:79:e4:09:84:4a:c3:55:ef:96:c1:f3:f9:5d:52:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:02 2023 GMT
Not After : Mar 25 08:28:02 2024 GMT
Subject: CN=546D7ECC073AB83A792489D0469330E244FC4E0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:c3:84:96:c5:64:b5:c4:62:b8:8e:2d:6f:
2d:82:47:83:35:42:ae:f6:71:66:73:b8:53:e1:90:
a4:2d:00:3c:54:9f:c1:ac:f5:7a:0c:de:95:bd:c0:
93:80:fa:7f:91:3f:e6:77:04:d9:e0:27:41:13:5f:
04:6e:2e:1d:3d:9e:b1:7a:62:4c:0f:2c:c0:7e:54:
40:3d:e1:19:03:42:29:c7:fe:fc:7a:f2:48:54:35:
75:88:3d:7e:2a:ae:74:90:9e:b3:eb:7a:e4:2b:e5:
92:d7:06:55:72:96:0e:66:e4:7c:05:d7:24:2c:e5:
6f:0d:b6:e6:3e:df:2c:87:0d:fb:c8:bf:dd:3e:1a:
0b:53:1e:df:17:12:1c:81:0e:7c:3e:ff:94:ec:da:
4c:8a:f4:fb:76:5e:b7:c8:e1:87:1b:0c:47:35:53:
69:77:99:7f:c2:29:72:ee:49:49:b1:ee:d0:aa:c6:
36:7a:94:83:1a:89:f0:b1:d4:37:8e:28:3d:d0:6f:
15:64:27:ab:22:7e:b8:a3:87:c0:a7:f3:68:42:cd:
a6:27:24:8d:f1:69:29:2f:ef:9f:dc:ca:2a:be:48:
d8:aa:bc:2e:54:79:82:41:18:fa:84:bb:27:ea:4d:
10:15:fb:76:65:d8:9e:1b:77:2d:da:09:32:09:79:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6D:7E:CC:07:3A:B8:3A:79:24:89:D0:46:93:30:E2:44:FC:4E:0A
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3138372e3133302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:25:2c:a7:09:c2:a1:82:c1:ee:43:28:0b:a2:4a:cf:63:39:
2c:98:79:13:8e:13:05:80:03:a8:75:90:43:76:c5:e9:aa:cd:
e1:64:0a:95:80:5d:f2:19:71:91:38:e5:03:71:fd:03:ba:be:
47:62:a3:76:6b:36:fd:95:11:c9:e6:f8:5e:c8:17:ed:6c:84:
14:c8:35:63:7e:73:2d:58:b3:9e:29:89:8a:e8:8d:ff:1d:74:
aa:c3:ab:2d:7c:6f:11:bf:04:4d:c6:41:19:af:d3:b0:80:00:
4f:9f:ee:cf:c3:13:73:70:d4:0b:04:26:c1:61:15:b3:4c:ab:
23:da:b5:74:b5:21:6c:e5:18:e8:22:ac:4a:c5:76:b3:e4:fc:
20:7d:a3:90:d8:9e:04:ec:61:09:f3:1d:74:09:f0:8f:2d:32:
98:55:b1:a5:43:b8:ee:cb:24:74:c8:b9:47:8a:84:77:a9:0b:
ea:d1:2e:9f:ad:36:ad:ac:9b:45:0a:79:eb:74:6d:0a:b7:7b:
05:d3:0d:28:ba:b3:31:a0:12:eb:44:4e:a2:6b:4c:d0:0c:c6:
ec:19:be:74:0a:d6:a2:a4:a6:f6:35:56:f4:34:02:38:38:6b:
e0:25:eb:a7:aa:28:cc:d9:95:bd:d1:d1:96:6d:82:02:8d:a6:
f4:54:9b:b4
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUGFBSV/x55AmESsNV75bB8/ldUsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzAzMjcwODIzMDJaFw0yNDAzMjUwODI4MDJaMDMxMTAvBgNV
BAMTKDU0NkQ3RUNDMDczQUI4M0E3OTI0ODlEMDQ2OTMzMEUyNDRGQzRFMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd8MOElsVktcRiuI4tby2CR4M1
Qq72cWZzuFPhkKQtADxUn8Gs9XoM3pW9wJOA+n+RP+Z3BNngJ0ETXwRuLh09nrF6
YkwPLMB+VEA94RkDQinH/vx68khUNXWIPX4qrnSQnrPreuQr5ZLXBlVylg5m5HwF
1yQs5W8NtuY+3yyHDfvIv90+GgtTHt8XEhyBDnw+/5Ts2kyK9Pt2XrfI4YcbDEc1
U2l3mX/CKXLuSUmx7tCqxjZ6lIMaifCx1DeOKD3QbxVkJ6sifrijh8Cn82hCzaYn
JI3xaSkv75/cyiq+SNiqvC5UeYJBGPqEuyfqTRAV+3Zl2J4bdy3aCTIJeXGVAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUVG1+zAc6uDp5JInQRpMw4kT8TgowHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzEzOTMzMmUzMTM4MzcyZTMx
MzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbuCMA0G
CSqGSIb3DQEBCwUAA4IBAQB/JSynCcKhgsHuQygLokrPYzksmHkTjhMFgAOodZBD
dsXpqs3hZAqVgF3yGXGROOUDcf0Dur5HYqN2azb9lRHJ5vheyBftbIQUyDVjfnMt
WLOeKYmK6I3/HXSqw6stfG8RvwRNxkEZr9OwgABPn+7PwxNzcNQLBCbBYRWzTKsj
2rV0tSFs5RjoIqxKxXaz5PwgfaOQ2J4E7GEJ8x10CfCPLTKYVbGlQ7juyyR0yLlH
ioR3qQvq0S6frTatrJtFCnnrdG0Kt3sF0w0ourMxoBLrRE6ia0zQDMbsGb50Ctai
pKb2NVb0NAI4OGvgJeunqijM2ZW90dGWbYICjab0VJu0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-fra.rpki-client.org