Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37342e302f32342d3234203d3e203432333636.roa
File: 3135352e3133332e37342e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: mKalXTpXB8FKs6ahYA61k9nocEBlwJFki4K8TPLnpyQ=
Subject key identifier: 86:FB:28:B6:3F:33:01:00:CE:09:EC:0A:58:23:31:A9:B0:3C:21:E0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 49E03FC9E4B70E907DBF5404AE11A29987003046
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37342e302f32342d3234203d3e203432333636.roa
Signing time: Tue 25 Apr 2023 17:56:36 +0000
ROA not before: Tue 25 Apr 2023 17:51:36 +0000
ROA not after: Tue 23 Apr 2024 17:56:36 +0000
asID: 42366
IP address blocks: 155.133.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e0:3f:c9:e4:b7:0e:90:7d:bf:54:04:ae:11:a2:99:87:00:30:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 25 17:51:36 2023 GMT
Not After : Apr 23 17:56:36 2024 GMT
Subject: CN=86FB28B63F330100CE09EC0A582331A9B03C21E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:94:51:b5:34:be:98:05:ad:d4:8c:13:9e:
34:b9:8a:d3:7a:b9:80:05:7b:39:8e:d0:64:98:e9:
79:3a:14:4a:0e:6a:bd:d3:97:6a:a1:be:76:d1:c9:
85:9a:61:c0:d8:ba:a3:2e:91:f2:be:44:57:67:47:
ff:5d:ea:6f:e7:56:17:cc:1d:94:21:35:6c:8d:23:
c1:0f:41:3d:89:0e:ac:cf:3f:45:7d:75:fa:0d:0e:
8e:53:b9:c7:91:a5:d2:08:33:38:fe:65:85:81:96:
d1:11:22:04:21:85:8b:b6:c5:12:18:41:94:8b:dc:
b0:35:25:c7:3a:27:e3:4e:17:20:6c:c6:53:fa:35:
7a:c7:d2:e3:8a:4d:d0:03:8e:dc:e1:c0:17:ef:ad:
91:09:ff:dd:a3:8e:07:2a:0c:37:42:59:3f:78:7f:
06:d5:17:0c:2a:d9:1a:52:20:b9:35:48:12:fb:91:
d5:9f:5e:07:d4:86:01:cd:56:0c:d9:f1:2e:f5:50:
c6:af:02:11:18:57:e3:46:8c:43:ed:b2:44:ea:64:
24:30:26:23:61:5f:9b:91:ab:3c:6a:b1:78:74:c4:
6a:dc:03:b5:d7:5d:c9:53:7f:b8:b5:b9:2f:79:f7:
2a:b6:64:60:6a:55:05:76:9a:ed:d7:4f:1f:b1:d1:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FB:28:B6:3F:33:01:00:CE:09:EC:0A:58:23:31:A9:B0:3C:21:E0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37342e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.74.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c9:37:a9:40:fb:b8:6d:10:e4:a7:7f:d7:63:9e:b0:8f:90:
68:5c:22:95:36:bb:b8:5d:4c:bb:7d:3c:4c:4f:be:17:5b:0a:
e2:15:08:63:e7:5c:c4:8a:76:04:49:21:bb:52:0a:76:c2:26:
77:fd:0b:33:35:2a:8c:44:d4:53:c4:76:ce:07:84:60:b6:53:
ae:f0:f9:84:55:3b:82:bf:1f:37:ee:f4:ed:8b:66:d5:a9:52:
d3:e7:4a:5b:cc:38:5f:a0:c0:e3:7d:b8:75:94:2c:20:cd:34:
9e:fd:56:24:e4:71:04:4b:c4:bd:16:c6:91:a0:39:5d:55:22:
88:50:51:d0:e7:90:46:5d:2e:f8:2b:f1:b9:02:a5:77:6b:4e:
a2:6e:eb:c7:10:29:46:b9:5c:2f:d1:da:c0:63:1e:1f:45:37:
e8:fa:cf:92:19:c8:95:32:b6:19:fa:a9:76:07:b5:b8:d1:56:
b3:31:0e:43:e5:b9:a1:c4:dd:48:ca:cb:d1:de:60:02:88:96:
a3:78:a5:00:c6:a5:d3:5b:11:f0:62:9d:cb:2c:f7:36:7a:1b:
4f:f3:a2:3d:3d:43:a5:84:7c:f1:b0:7a:8a:c9:54:32:02:a2:
f6:76:39:1d:2f:e8:94:e7:b1:89:82:94:80:f4:d4:73:c7:b0:
4c:78:98:57
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSeA/yeS3DpB9v1QErhGimYcAMEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA0MjUxNzUxMzZaFw0yNDA0MjMxNzU2MzZaMDMxMTAvBgNV
BAMTKDg2RkIyOEI2M0YzMzAxMDBDRTA5RUMwQTU4MjMzMUE5QjAzQzIxRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbapRRtTS+mAWt1IwTnjS5itN6
uYAFezmO0GSY6Xk6FEoOar3Tl2qhvnbRyYWaYcDYuqMukfK+RFdnR/9d6m/nVhfM
HZQhNWyNI8EPQT2JDqzPP0V9dfoNDo5TuceRpdIIMzj+ZYWBltERIgQhhYu2xRIY
QZSL3LA1Jcc6J+NOFyBsxlP6NXrH0uOKTdADjtzhwBfvrZEJ/92jjgcqDDdCWT94
fwbVFwwq2RpSILk1SBL7kdWfXgfUhgHNVgzZ8S71UMavAhEYV+NGjEPtskTqZCQw
JiNhX5uRqzxqsXh0xGrcA7XXXclTf7i1uS959yq2ZGBqVQV2mu3XTx+x0fYJAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUhvsotj8zAQDOCewKWCMxqbA8IeAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM3
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzMzNjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
m4VKMA0GCSqGSIb3DQEBCwUAA4IBAQCdyTepQPu4bRDkp3/XY56wj5BoXCKVNru4
XUy7fTxMT74XWwriFQhj51zEinYESSG7Ugp2wiZ3/QszNSqMRNRTxHbOB4RgtlOu
8PmEVTuCvx837vTti2bVqVLT50pbzDhfoMDjfbh1lCwgzTSe/VYk5HEES8S9FsaR
oDldVSKIUFHQ55BGXS74K/G5AqV3a06ibuvHEClGuVwv0drAYx4fRTfo+s+SGciV
MrYZ+ql2B7W40VazMQ5D5bmhxN1IysvR3mACiJajeKUAxqXTWxHwYp3LLPc2ehtP
86I9PUOlhHzxsHqKyVQyAqL2djkdL+iU57GJgpSA9NRzx7BMeJhX
-----END CERTIFICATE-----
Generated at Sun Nov 26 20:57:27 2023 by rpki-client on console-fra.rpki-client.org