Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e203631333137.roa
File: 3139332e34322e39372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: nvsb3slyMLf/uTojNYojbgOSZxwN7Il7TiWO0G/ZS8E=
Subject key identifier: FE:80:F2:C1:95:98:B8:CF:A4:52:CE:1B:F5:5C:CE:DB:89:3D:B3:92
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 38A1FC6F16E5A34739F7594480C1E88F220C27FD
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:28:14 +0000
ROA not before: Mon 27 Mar 2023 08:23:14 +0000
ROA not after: Mon 25 Mar 2024 08:28:14 +0000
asID: 61317
IP address blocks: 193.42.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a1:fc:6f:16:e5:a3:47:39:f7:59:44:80:c1:e8:8f:22:0c:27:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:14 2023 GMT
Not After : Mar 25 08:28:14 2024 GMT
Subject: CN=FE80F2C19598B8CFA452CE1BF55CCEDB893DB392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f6:f5:04:05:50:63:39:75:3c:e6:f9:6d:92:
4d:b1:89:41:79:f8:e7:92:82:95:5f:4b:8d:b2:9f:
2d:27:b0:50:c1:6c:6c:c3:f6:ce:c4:8d:7b:bd:54:
84:a9:8c:0c:53:b8:de:76:00:7c:a4:32:ca:ca:15:
be:3f:ac:3d:54:ce:79:3f:a8:a2:88:c2:43:cb:1a:
8e:d5:fa:3d:87:68:0f:1b:d5:26:62:c0:e9:e9:fe:
25:73:1b:c4:14:5d:2d:ee:9c:26:c4:f6:5e:56:6a:
d7:5d:cc:bf:a2:42:5d:40:0f:e4:a3:db:11:a7:94:
d9:f0:4a:18:21:97:c2:a9:b8:4d:23:3c:da:40:f1:
e9:fc:35:73:93:03:88:5b:77:47:05:1a:cd:bb:6c:
bc:09:5c:c6:81:30:7d:75:a0:1f:5f:f7:5a:fa:2e:
02:28:4c:58:91:2d:20:a1:b4:76:d3:be:83:a3:51:
c7:c0:bf:38:1d:20:80:7c:50:56:44:6d:32:6c:55:
0c:c9:80:92:81:f1:ba:81:85:d7:45:68:88:ee:f0:
ea:9e:3c:82:8d:a8:05:45:49:dc:b7:47:28:60:2a:
0e:7b:f5:7c:47:45:a7:5e:9f:78:31:6b:e0:18:19:
54:47:eb:19:99:e1:88:f0:89:61:fc:a4:5b:10:d9:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:F2:C1:95:98:B8:CF:A4:52:CE:1B:F5:5C:CE:DB:89:3D:B3:92
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.97.0/24
Signature Algorithm: sha256WithRSAEncryption
82:33:a7:b3:a9:f4:0e:e6:73:37:62:41:a4:9e:d5:c9:80:3b:
63:44:d0:14:cc:36:74:99:cd:ca:51:e0:0d:ba:18:19:7d:05:
10:ab:b3:7b:68:92:9d:b9:fd:df:38:74:bc:9a:ef:36:ae:8d:
22:c0:67:13:71:83:3a:4d:bc:cb:04:51:51:38:02:75:fc:46:
81:29:50:78:81:05:ed:bf:21:14:19:42:a9:d4:41:42:31:01:
76:c4:07:69:9d:24:91:4b:1c:83:5e:2c:63:33:41:60:16:e2:
ce:a6:d7:02:a1:8a:c6:e1:fb:2e:ab:08:1e:e3:15:1a:f7:ee:
ec:2f:28:0c:8d:cf:0e:be:8b:13:22:29:19:8e:37:0e:fa:7e:
20:ab:68:8a:af:9f:67:64:90:28:cd:c7:b0:9c:03:20:17:eb:
58:07:3c:31:4d:e5:a0:87:f4:4b:8c:f1:19:8e:7b:a1:67:91:
2e:1f:cc:ae:84:ec:ec:1a:c3:1c:46:20:c6:0f:ca:f6:4c:bb:
b1:00:bf:0d:03:ab:f8:c4:e9:89:11:6c:8b:de:b6:f2:76:8d:
06:a5:c9:0e:c6:e5:bb:ba:bd:80:68:70:47:3c:aa:85:4b:2c:
20:05:ea:a8:1c:64:c9:7d:f8:8f:99:d7:55:54:2b:3d:bd:45:
eb:e5:55:11
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOKH8bxblo0c591lEgMHojyIMJ/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzAzMjcwODIzMTRaFw0yNDAzMjUwODI4MTRaMDMxMTAvBgNV
BAMTKEZFODBGMkMxOTU5OEI4Q0ZBNDUyQ0UxQkY1NUNDRURCODkzREIzOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD59vUEBVBjOXU85vltkk2xiUF5
+OeSgpVfS42yny0nsFDBbGzD9s7EjXu9VISpjAxTuN52AHykMsrKFb4/rD1Uznk/
qKKIwkPLGo7V+j2HaA8b1SZiwOnp/iVzG8QUXS3unCbE9l5WatddzL+iQl1AD+Sj
2xGnlNnwShghl8KpuE0jPNpA8en8NXOTA4hbd0cFGs27bLwJXMaBMH11oB9f91r6
LgIoTFiRLSChtHbTvoOjUcfAvzgdIIB8UFZEbTJsVQzJgJKB8bqBhddFaIju8Oqe
PIKNqAVFSdy3RyhgKg579XxHRaden3gxa+AYGVRH6xmZ4YjwiWH8pFsQ2VGHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU/oDywZWYuM+kUs4b9VzO24k9s5IwHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzEzOTMzMmUzNDMyMmUzOTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEq
YTANBgkqhkiG9w0BAQsFAAOCAQEAgjOns6n0DuZzN2JBpJ7VyYA7Y0TQFMw2dJnN
ylHgDboYGX0FEKuze2iSnbn93zh0vJrvNq6NIsBnE3GDOk28ywRRUTgCdfxGgSlQ
eIEF7b8hFBlCqdRBQjEBdsQHaZ0kkUscg14sYzNBYBbizqbXAqGKxuH7LqsIHuMV
Gvfu7C8oDI3PDr6LEyIpGY43Dvp+IKtoiq+fZ2SQKM3HsJwDIBfrWAc8MU3loIf0
S4zxGY57oWeRLh/MroTs7BrDHEYgxg/K9ky7sQC/DQOr+MTpiRFsi9628naNBqXJ
Dsblu7q9gGhwRzyqhUssIAXqqBxkyX34j5nXVVQrPb1F6+VVEQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-fra.rpki-client.org