Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38312e302f32342d3332203d3e20313336373837.roa
File: 3139322e3134352e38312e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: xSBOwtPM3MxXzW+0abl8+A/XJxVYmWGxWBuWiHR3KGI=
Subject key identifier: 93:65:F1:83:4F:91:1C:C6:9B:AA:D7:AD:F8:BB:05:50:A1:84:86:A7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46F41BE005C905F5E87477DE42F5B8478F9D832C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38312e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:49 +0000
ROA not before: Fri 20 Oct 2023 13:36:49 +0000
ROA not after: Fri 18 Oct 2024 13:41:49 +0000
asID: 136787
IP address blocks: 192.145.81.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sun 14 Jan 2024 18:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f4:1b:e0:05:c9:05:f5:e8:74:77:de:42:f5:b8:47:8f:9d:83:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:49 2023 GMT
Not After : Oct 18 13:41:49 2024 GMT
Subject: CN=9365F1834F911CC69BAAD7ADF8BB0550A18486A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:d4:75:5e:21:25:48:b4:22:1e:f2:c2:86:
c4:35:d0:9d:d2:8d:cc:34:8e:fe:77:40:58:62:14:
19:14:e0:64:1c:e1:83:d5:ef:01:70:23:52:6a:55:
39:f1:2f:ca:73:a3:d8:84:51:bc:15:59:d8:65:49:
58:e7:e5:cf:a6:a0:3f:17:b5:ac:a5:56:3a:2b:eb:
15:23:08:4e:18:7b:e0:03:82:72:24:0e:f3:3d:f4:
8c:2f:56:d3:08:c5:50:70:c0:8c:1c:07:05:3d:0f:
d6:6a:17:74:14:22:58:73:36:5b:09:ff:20:da:aa:
cb:f1:95:0d:cf:ca:03:54:bd:bd:8b:1c:8d:fe:a0:
52:82:9c:c9:14:da:f8:2e:d5:14:55:31:ca:eb:1e:
fd:39:44:26:42:41:56:80:e8:a5:0e:b6:a1:d4:46:
ff:22:29:6e:71:9b:ea:a7:00:67:66:42:d5:da:46:
16:bc:74:68:e8:73:da:8b:99:4e:a0:2e:9f:17:83:
2c:9d:51:56:44:39:2c:9d:4c:9a:a7:d1:ab:e3:79:
d6:e2:c8:4c:7b:c7:89:ab:50:fb:a6:c9:0d:e5:ed:
06:bb:65:4f:52:b0:e6:4e:95:33:15:e1:a9:08:80:
da:6d:10:19:d3:77:34:3e:8e:60:63:d2:3d:9c:d2:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:F1:83:4F:91:1C:C6:9B:AA:D7:AD:F8:BB:05:50:A1:84:86:A7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38312e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.81.0/24
Signature Algorithm: sha256WithRSAEncryption
94:97:e6:ff:d3:a3:07:cf:9b:0d:a5:c4:a0:29:25:52:12:8a:
b1:ab:09:62:a5:33:65:61:dd:2a:b0:83:ec:a9:69:45:4d:9b:
af:75:46:d8:66:2d:18:ba:ae:c4:53:e5:32:62:ad:da:21:c5:
b6:76:e6:a7:3c:44:5c:98:76:14:b7:c0:3f:b1:f9:28:7c:5b:
af:6d:ec:c6:1f:51:a7:b0:36:d9:bd:b0:c7:fb:65:bd:0f:91:
95:f7:92:83:74:c4:d5:18:a2:72:ff:4d:fa:5b:5e:56:60:33:
c3:9d:53:1c:94:11:2d:6c:34:97:70:66:44:34:89:7b:d5:bc:
c4:09:8f:18:32:0f:c4:ee:66:a5:c1:21:72:fe:0f:63:2d:a4:
b1:c8:67:fa:0b:93:5f:39:a9:67:72:12:13:c1:c8:5b:cc:b0:
03:57:3e:77:a9:75:63:ff:53:b6:88:00:b1:c6:91:24:4c:78:
af:39:35:2e:a4:e5:1c:15:11:57:85:de:80:66:b7:41:11:d7:
80:99:04:fa:6a:00:6e:a6:98:74:9d:3e:04:95:d0:af:b1:fb:
c7:02:41:2e:fe:13:76:d2:ff:ce:86:07:a8:45:89:e6:f0:e2:
7f:34:5c:00:55:5c:cf:bc:93:ee:c1:5d:6c:02:5c:66:e5:87:
41:a3:99:03
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIURvQb4AXJBfXodHfeQvW4R4+dgywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMjAxMzM2NDlaFw0yNDEwMTgxMzQxNDlaMDMxMTAvBgNV
BAMTKDkzNjVGMTgzNEY5MTFDQzY5QkFBRDdBREY4QkIwNTUwQTE4NDg2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcFtR1XiElSLQiHvLChsQ10J3S
jcw0jv53QFhiFBkU4GQc4YPV7wFwI1JqVTnxL8pzo9iEUbwVWdhlSVjn5c+moD8X
taylVjor6xUjCE4Ye+ADgnIkDvM99IwvVtMIxVBwwIwcBwU9D9ZqF3QUIlhzNlsJ
/yDaqsvxlQ3PygNUvb2LHI3+oFKCnMkU2vgu1RRVMcrrHv05RCZCQVaA6KUOtqHU
Rv8iKW5xm+qnAGdmQtXaRha8dGjoc9qLmU6gLp8XgyydUVZEOSydTJqn0avjedbi
yEx7x4mrUPumyQ3l7Qa7ZU9SsOZOlTMV4akIgNptEBnTdzQ+jmBj0j2c0jgVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUk2Xxg0+RHMabqtet+LsFUKGEhqcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMyMmUzMTM0MzUyZTM4
MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADAkVEwDQYJKoZIhvcNAQELBQADggEBAJSX5v/TowfPmw2lxKApJVISirGrCWKl
M2Vh3Sqwg+ypaUVNm691RthmLRi6rsRT5TJirdohxbZ25qc8RFyYdhS3wD+x+Sh8
W69t7MYfUaewNtm9sMf7Zb0PkZX3koN0xNUYonL/TfpbXlZgM8OdUxyUES1sNJdw
ZkQ0iXvVvMQJjxgyD8TuZqXBIXL+D2MtpLHIZ/oLk185qWdyEhPByFvMsANXPnep
dWP/U7aIALHGkSRMeK85NS6k5RwVEVeF3oBmt0ER14CZBPpqAG6mmHSdPgSV0K+x
+8cCQS7+E3bS/86GB6hFiebw4n80XABVXM+8k+7BXWwCXGblh0GjmQM=
-----END CERTIFICATE-----
Generated at Sun Jan 14 18:56:52 2024 by rpki-client on console-ams.rpki-client.org