Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3138392e3130362e302f32332d3233203d3e20323033303938.roa
File: 3139332e3138392e3130362e302f32332d3233203d3e20323033303938.roa (raw, json)
Hash identifier: LPwWStIwzxSGYREB2j5fqhHndViPckXz5EAWu2+Z44A=
Subject key identifier: BA:B6:79:CC:19:3F:0D:86:0B:E7:19:9E:55:1C:27:7D:AB:AD:82:14
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1524C1DDF132894F248932BEA44E193E7F5C78EE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3138392e3130362e302f32332d3233203d3e20323033303938.roa
Signing time: Mon 26 Feb 2024 08:53:08 +0000
ROA not before: Mon 26 Feb 2024 08:48:08 +0000
ROA not after: Mon 24 Feb 2025 08:53:08 +0000
asID: 203098
IP address blocks: 193.189.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 02 Mar 2024 21:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:24:c1:dd:f1:32:89:4f:24:89:32:be:a4:4e:19:3e:7f:5c:78:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:08 2024 GMT
Not After : Feb 24 08:53:08 2025 GMT
Subject: CN=BAB679CC193F0D860BE7199E551C277DABAD8214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:6b:fb:f7:d2:19:da:09:30:23:7c:25:13:
15:d2:fc:6a:e9:7c:e9:20:5a:e4:e0:54:a6:57:a7:
aa:b0:9a:4d:c0:63:ee:f1:50:99:1a:aa:e9:3a:6e:
a4:53:b3:63:2f:31:0e:fa:4e:36:7b:71:51:32:3a:
1b:0b:33:bb:e0:90:ff:e5:c3:4d:24:fb:a3:e6:9d:
b4:df:d6:47:38:52:18:52:65:fa:f1:ad:0d:8c:e9:
f6:fe:25:ae:b7:2c:a0:15:c8:68:62:cf:6d:f1:85:
5a:78:5b:3b:71:36:8b:1f:01:a0:0c:d5:2f:f4:33:
6d:ed:a4:fa:27:52:11:05:67:1d:95:b5:29:04:e2:
c6:cc:ff:c6:d5:68:42:d5:b9:8b:89:02:19:02:2b:
59:18:ed:47:9e:90:eb:3b:8f:61:6e:df:7b:ed:82:
ef:85:09:f4:3c:b2:34:a1:f9:71:34:75:de:f6:f3:
d5:c7:3d:38:a4:25:cd:03:aa:5e:9e:d3:6e:14:0c:
20:22:a5:7b:41:4f:3e:2f:e0:01:5a:3c:02:2b:bb:
05:c5:56:2d:37:aa:aa:9f:83:63:74:4a:28:83:17:
93:d8:f9:f8:eb:a5:29:88:c5:7f:69:cd:73:45:71:
79:2b:a5:26:ea:c0:87:cc:1e:52:ea:a5:61:03:7b:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:79:CC:19:3F:0D:86:0B:E7:19:9E:55:1C:27:7D:AB:AD:82:14
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3138392e3130362e302f32332d3233203d3e20323033303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.106.0/23
Signature Algorithm: sha256WithRSAEncryption
32:cc:0c:d6:ff:1e:46:72:08:d6:0e:9b:a6:87:62:82:e2:c3:
9b:84:b8:c4:6b:97:02:7a:09:f1:00:12:c6:98:90:64:93:b7:
39:c0:81:78:f8:a2:80:50:df:c3:9e:09:4f:45:b2:64:b2:fd:
30:08:bc:30:73:1a:80:1d:68:c2:85:e7:32:77:b5:25:c7:4b:
09:84:8a:f7:8d:08:ce:06:d4:11:4d:1b:06:2d:11:e6:d4:5d:
b1:f6:b8:d0:65:22:46:e3:04:8b:86:67:60:36:98:13:2e:26:
0e:cc:a6:2f:7f:fc:ec:db:b8:7a:a6:84:1f:48:17:44:d7:0c:
6e:49:82:74:f0:95:63:de:da:0d:24:18:7e:b3:5e:83:a7:52:
fc:2d:06:18:33:b7:f9:b1:11:66:0f:5a:94:f2:21:e2:be:cd:
ac:4d:bb:46:05:b6:b9:53:e8:75:cb:cd:73:05:51:38:bf:9b:
0e:28:79:0c:10:d5:69:ff:35:e1:2b:a2:e1:ee:5c:7a:62:4a:
16:bd:a5:60:fa:23:c5:be:86:b3:c7:37:fd:16:f6:18:64:45:
5d:ea:bb:a3:d4:6d:ab:23:b4:1a:64:cb:ae:0f:9d:15:df:d4:
17:6a:32:e0:4a:8b:3c:b6:6e:8a:a0:9e:a6:84:79:e5:e0:27:
34:36:53:6e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUFSTB3fEyiU8kiTK+pE4ZPn9ceO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MDhaFw0yNTAyMjQwODUzMDhaMDMxMTAvBgNV
BAMTKEJBQjY3OUNDMTkzRjBEODYwQkU3MTk5RTU1MUMyNzdEQUJBRDgyMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwfmv799IZ2gkwI3wlExXS/Grp
fOkgWuTgVKZXp6qwmk3AY+7xUJkaquk6bqRTs2MvMQ76TjZ7cVEyOhsLM7vgkP/l
w00k+6PmnbTf1kc4UhhSZfrxrQ2M6fb+Ja63LKAVyGhiz23xhVp4WztxNosfAaAM
1S/0M23tpPonUhEFZx2VtSkE4sbM/8bVaELVuYuJAhkCK1kY7UeekOs7j2Fu33vt
gu+FCfQ8sjSh+XE0dd7289XHPTikJc0Dql6e024UDCAipXtBTz4v4AFaPAIruwXF
Vi03qqqfg2N0SiiDF5PY+fjrpSmIxX9pzXNFcXkrpSbqwIfMHlLqpWEDe5J5AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUurZ5zBk/DYYL5xmeVRwnfautghQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzMTM4MzkyZTMx
MzAzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzAzMzMwMzkzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAcG9ajANBgkqhkiG9w0BAQsFAAOCAQEAMswM1v8eRnII1g6bpodiguLDm4S4
xGuXAnoJ8QASxpiQZJO3OcCBePiigFDfw54JT0WyZLL9MAi8MHMagB1owoXnMne1
JcdLCYSK940IzgbUEU0bBi0R5tRdsfa40GUiRuMEi4ZnYDaYEy4mDsymL3/87Nu4
eqaEH0gXRNcMbkmCdPCVY97aDSQYfrNeg6dS/C0GGDO3+bERZg9alPIh4r7NrE27
RgW2uVPodcvNcwVROL+bDih5DBDVaf814Sui4e5cemJKFr2lYPojxb6Gs8c3/Rb2
GGRFXeq7o9RtqyO0GmTLrg+dFd/UF2oy4EqLPLZuiqCepoR55eAnNDZTbg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:03 2025 by rpki-client