Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3135302e302f32342d3234203d3e20383334.roa
File: 352e3138302e3135302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: tS2RZ8hqApWZ06KqLSxV+0iLp2eFacrXL/RchCmExrE=
Subject key identifier: 2D:D2:68:81:8C:F6:7A:05:65:31:05:4C:F2:30:F6:B3:DD:4F:D0:BA
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 662D6D73D717DD40FCEA1863C4EFA054C6E5008D
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3135302e302f32342d3234203d3e20383334.roa
Signing time: Fri 10 May 2024 13:28:23 +0000
ROA not before: Fri 10 May 2024 13:23:23 +0000
ROA not after: Fri 09 May 2025 13:28:23 +0000
asID: 834
IP address blocks: 5.180.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 20:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2d:6d:73:d7:17:dd:40:fc:ea:18:63:c4:ef:a0:54:c6:e5:00:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: May 10 13:23:23 2024 GMT
Not After : May 9 13:28:23 2025 GMT
Subject: CN=2DD268818CF67A056531054CF230F6B3DD4FD0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:2e:06:0e:45:77:ec:92:4a:a9:3d:4c:10:
53:a2:4f:ca:5e:8f:f3:82:35:c0:8a:0b:f1:cd:0a:
57:f5:23:4d:29:77:64:6d:53:d8:f1:b6:cb:b8:94:
f9:6f:ed:35:64:79:5d:67:8b:b2:f9:30:b8:c3:32:
5f:c1:bb:08:d4:3c:59:9d:a3:5e:d9:14:52:21:58:
ed:0e:b6:db:10:06:66:ec:10:b0:ff:af:60:d9:51:
c0:3b:8b:2e:6d:2f:d5:d5:c7:fd:f9:bf:51:e8:09:
eb:a5:22:7e:fc:27:65:5d:34:b7:9e:4c:7a:5b:fe:
1e:3a:56:5b:61:82:00:d0:7f:19:02:52:24:cb:05:
ca:f6:2e:93:d8:54:2c:76:0f:87:66:e4:55:b1:c4:
33:54:e8:92:24:6e:73:0d:db:cc:a9:eb:71:f8:7a:
50:1a:2f:0b:26:74:eb:06:af:e6:c6:34:04:cb:69:
59:d9:98:90:5d:6c:e4:95:3a:b3:c1:33:0e:c6:45:
01:45:ab:4d:14:53:cb:6c:d3:2e:91:4d:b3:36:6c:
48:60:9c:10:d9:92:75:d4:b0:82:a3:49:f1:2c:47:
8f:26:ea:d0:19:1f:95:36:0c:a4:30:1c:b4:6f:77:
02:14:76:d9:96:68:a7:b2:33:22:6d:4f:5b:ae:35:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:68:81:8C:F6:7A:05:65:31:05:4C:F2:30:F6:B3:DD:4F:D0:BA
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3135302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.150.0/24
Signature Algorithm: sha256WithRSAEncryption
88:18:14:1e:70:26:c6:ff:b6:1b:ca:34:10:f0:2d:9f:fc:91:
19:3a:60:5f:92:1e:10:38:a5:84:20:bc:fa:b2:f8:d4:23:0e:
65:21:49:81:2a:3b:8d:37:4b:42:43:f5:f2:a1:cf:99:26:8c:
72:c7:d3:08:5e:00:50:70:fe:d8:b7:5e:2a:d9:8f:81:99:47:
25:3e:da:dd:6a:67:fd:51:b1:73:ac:d1:a9:d8:d2:58:08:cc:
43:bb:58:3f:08:e7:e0:0b:b0:25:15:ac:6d:6c:de:df:c4:cd:
f7:92:78:d8:83:80:34:b4:84:84:0b:18:0e:3e:b0:eb:84:d4:
39:cb:b9:49:bb:4d:17:68:8d:01:10:88:08:e8:04:32:23:52:
6c:cb:22:e1:36:5f:70:0d:f7:fb:1d:ae:24:21:05:2b:51:22:
6d:fa:87:e4:d4:7d:c6:a0:8d:48:62:5d:6a:9b:d1:34:60:88:
ae:82:aa:d2:f9:bb:58:10:ee:a4:cd:57:50:4c:3e:32:45:c5:
8a:2f:c0:3e:bc:55:ce:ed:63:13:e6:24:4d:ea:db:9f:2e:92:
78:d9:ca:b7:48:86:aa:69:25:a1:96:e3:8b:ac:73:75:b4:3c:
76:ff:c1:a8:2d:41:d0:6f:e2:b4:32:db:ed:ff:c8:5b:ba:2d:
be:1f:e3:d2
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUZi1tc9cX3UD86hhjxO+gVMblAI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yNDA1MTAxMzIzMjNaFw0yNTA1MDkxMzI4MjNaMDMxMTAvBgNV
BAMTKDJERDI2ODgxOENGNjdBMDU2NTMxMDU0Q0YyMzBGNkIzREQ0RkQwQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAy4GDkV37JJKqT1MEFOiT8pe
j/OCNcCKC/HNClf1I00pd2RtU9jxtsu4lPlv7TVkeV1ni7L5MLjDMl/BuwjUPFmd
o17ZFFIhWO0OttsQBmbsELD/r2DZUcA7iy5tL9XVx/35v1HoCeulIn78J2VdNLee
THpb/h46VlthggDQfxkCUiTLBcr2LpPYVCx2D4dm5FWxxDNU6JIkbnMN28yp63H4
elAaLwsmdOsGr+bGNATLaVnZmJBdbOSVOrPBMw7GRQFFq00UU8ts0y6RTbM2bEhg
nBDZknXUsIKjSfEsR48m6tAZH5U2DKQwHLRvdwIUdtmWaKeyMyJtT1uuNTijAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQULdJogYz2egVlMQVM8jD2s91P0LowHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzUyZTMxMzgzMDJlMzEzNTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbSWMA0G
CSqGSIb3DQEBCwUAA4IBAQCIGBQecCbG/7YbyjQQ8C2f/JEZOmBfkh4QOKWEILz6
svjUIw5lIUmBKjuNN0tCQ/Xyoc+ZJoxyx9MIXgBQcP7Yt14q2Y+BmUclPtrdamf9
UbFzrNGp2NJYCMxDu1g/COfgC7AlFaxtbN7fxM33knjYg4A0tISECxgOPrDrhNQ5
y7lJu00XaI0BEIgI6AQyI1JsyyLhNl9wDff7Ha4kIQUrUSJt+ofk1H3GoI1IYl1q
m9E0YIiugqrS+btYEO6kzVdQTD4yRcWKL8A+vFXO7WMT5iRN6tufLpJ42cq3SIaq
aSWhluOLrHN1tDx2/8GoLUHQb+K0Mtvt/8hbui2+H+PS
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org