Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32332d3234203d3e203432333636.roa
File: 352e3130342e37382e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: FLGOo3aZaJicxUX4mK4Q2Y/nqmcSfKTOVVcqHxt4BA8=
Subject key identifier: F5:A2:8E:7C:D3:B5:4B:73:06:95:47:25:61:87:88:45:B4:A1:2A:04
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 06F4ACB87664220A708D6EB0362F42D25F270E3B
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32332d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:22:27 +0000
ROA not before: Mon 17 Apr 2023 11:17:27 +0000
ROA not after: Mon 15 Apr 2024 11:22:27 +0000
asID: 42366
IP address blocks: 5.104.78.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f4:ac:b8:76:64:22:0a:70:8d:6e:b0:36:2f:42:d2:5f:27:0e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:17:27 2023 GMT
Not After : Apr 15 11:22:27 2024 GMT
Subject: CN=F5A28E7CD3B54B730695472561878845B4A12A04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:e0:12:d4:2c:7a:a0:bf:dc:48:0a:39:ea:
fb:2f:0a:e1:98:39:0e:a9:f4:f2:31:ed:b5:60:ea:
2e:1a:3f:e5:1a:42:e7:08:37:4e:d3:46:01:bc:e4:
18:03:cd:2c:e9:63:2e:85:3d:1c:ac:98:05:78:3e:
25:21:e2:bf:87:6a:19:97:84:b9:e4:52:8d:12:f0:
c9:f8:8b:b4:4a:1f:a0:ca:67:b0:67:4d:70:a9:65:
27:c6:74:17:21:0d:2d:e3:4f:bb:5d:10:74:70:c2:
b0:2c:56:2e:a8:60:87:9b:8e:33:67:a3:e2:22:95:
90:33:63:7f:a0:46:85:b6:fe:65:d3:84:83:fa:70:
ea:f5:e8:bc:bf:a6:05:e2:3a:d7:bf:d5:d1:99:65:
ca:eb:93:7d:c7:64:6f:3a:32:51:f9:59:e7:9d:9e:
82:12:f2:d3:3e:7b:35:d7:06:ee:49:c2:d9:f9:e5:
ff:6c:a7:cf:53:21:c7:dc:d0:1f:fd:7d:91:92:09:
b6:fc:51:a5:cc:e8:d0:f0:bc:37:46:1e:59:10:19:
66:8f:14:66:1d:d0:50:98:b3:5c:e7:ee:ec:a6:3f:
4d:b9:5b:f2:45:76:85:d2:a5:6a:b7:e4:9f:dd:b2:
36:20:17:8d:ad:44:f8:c7:6b:c2:2e:b0:2b:3c:05:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:8E:7C:D3:B5:4B:73:06:95:47:25:61:87:88:45:B4:A1:2A:04
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37382e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.78.0/23
Signature Algorithm: sha256WithRSAEncryption
51:0a:ce:97:3d:c4:e6:92:ad:9b:b8:7b:2e:0e:78:a7:40:37:
b9:f0:8c:95:ea:bd:73:be:68:11:6a:d7:9e:78:ef:f0:e2:ee:
75:5f:40:14:f7:95:80:1c:7a:3a:c3:67:96:b3:49:82:ea:2f:
c1:67:ff:74:26:67:c2:9a:06:4c:8a:3a:e9:79:c8:59:4a:7d:
0d:f3:fb:a8:4a:94:6e:a1:56:68:1b:2a:12:0a:f1:1c:9c:c6:
72:b4:88:5f:7c:3e:43:33:8f:4f:4a:01:25:23:aa:3a:aa:af:
18:64:c6:78:d1:2b:ff:37:ce:12:10:07:df:53:99:ba:76:95:
b3:db:d3:27:84:3f:16:95:f1:ec:35:1c:bd:6c:9e:03:15:42:
0a:74:aa:06:ad:42:77:80:d8:55:a3:aa:1c:79:68:b6:63:fb:
76:be:e0:19:ab:d4:0f:96:dc:8a:e3:6b:21:93:79:f4:2a:bd:
06:3c:01:3f:23:4d:95:0e:fd:d6:93:12:45:75:bd:dd:dd:0a:
16:48:02:3e:18:3f:db:ee:ab:b3:ae:26:57:ea:0a:4b:44:e1:
37:cd:6e:4e:2b:fb:ed:0d:e2:8a:f2:93:f1:b5:fc:b5:0e:21:
59:4d:4d:1a:61:fa:66:3a:74:f2:9d:5c:45:79:68:0f:ea:e8:
5b:f3:1c:b2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUBvSsuHZkIgpwjW6wNi9C0l8nDjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzA0MTcxMTE3MjdaFw0yNDA0MTUxMTIyMjdaMDMxMTAvBgNV
BAMTKEY1QTI4RTdDRDNCNTRCNzMwNjk1NDcyNTYxODc4ODQ1QjRBMTJBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2+AS1Cx6oL/cSAo56vsvCuGY
OQ6p9PIx7bVg6i4aP+UaQucIN07TRgG85BgDzSzpYy6FPRysmAV4PiUh4r+HahmX
hLnkUo0S8Mn4i7RKH6DKZ7BnTXCpZSfGdBchDS3jT7tdEHRwwrAsVi6oYIebjjNn
o+IilZAzY3+gRoW2/mXThIP6cOr16Ly/pgXiOte/1dGZZcrrk33HZG86MlH5Weed
noIS8tM+ezXXBu5Jwtn55f9sp89TIcfc0B/9fZGSCbb8UaXM6NDwvDdGHlkQGWaP
FGYd0FCYs1zn7uymP025W/JFdoXSpWq35J/dsjYgF42tRPjHa8IusCs8BTZJAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU9aKOfNO1S3MGlUclYYeIRbShKgQwHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzUyZTMxMzAzNDJlMzczODJl
MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzIzMzM2MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEFaE4w
DQYJKoZIhvcNAQELBQADggEBAFEKzpc9xOaSrZu4ey4OeKdAN7nwjJXqvXO+aBFq
15547/Di7nVfQBT3lYAcejrDZ5azSYLqL8Fn/3QmZ8KaBkyKOul5yFlKfQ3z+6hK
lG6hVmgbKhIK8RycxnK0iF98PkMzj09KASUjqjqqrxhkxnjRK/83zhIQB99Tmbp2
lbPb0yeEPxaV8ew1HL1sngMVQgp0qgatQneA2FWjqhx5aLZj+3a+4Bmr1A+W3Irj
ayGTefQqvQY8AT8jTZUO/daTEkV1vd3dChZIAj4YP9vuq7OuJlfqCktE4TfNbk4r
++0N4oryk/G1/LUOIVlNTRph+mY6dPKdXEV5aA/q6FvzHLI=
-----END CERTIFICATE-----
Generated at Wed Feb 7 17:55:36 2024 by rpki-client on console-ams.rpki-client.org