Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32332d3234203d3e2030.roa
File: 3231322e39302e3132322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: /CAvFag6PaGKp2hA6NmdV6+7AwwziCPTzhQuV+5yvcI=
Subject key identifier: C5:34:08:13:BE:68:A0:44:98:AA:CC:44:F6:3C:78:C6:9B:E0:70:6E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3447AE5EFF7E3964DEAF4860756BC38F5652CEAE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32332d3234203d3e2030.roa
Signing time: Fri 20 Oct 2023 13:41:46 +0000
ROA not before: Fri 20 Oct 2023 13:36:46 +0000
ROA not after: Fri 18 Oct 2024 13:41:46 +0000
asID: 0
IP address blocks: 212.90.122.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 18:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:47:ae:5e:ff:7e:39:64:de:af:48:60:75:6b:c3:8f:56:52:ce:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:46 2023 GMT
Not After : Oct 18 13:41:46 2024 GMT
Subject: CN=C5340813BE68A04498AACC44F63C78C69BE0706E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:41:70:5b:44:dc:0c:12:14:0d:f5:56:a1:
c6:e8:7f:b8:08:43:3b:1d:4b:39:43:bf:ae:9a:8c:
61:a7:96:cd:99:35:2d:cc:fb:b1:a3:4a:42:b9:69:
3b:27:6f:c4:f6:91:5f:8b:61:64:5f:28:82:d3:4a:
de:23:bc:8a:9e:b4:2e:e4:d6:9b:ba:c1:db:85:3b:
15:ef:22:21:6a:da:a2:94:38:58:fd:ad:cc:89:46:
57:70:3a:8c:c5:32:ef:88:ab:a6:53:b5:3d:0e:50:
23:8b:54:74:8c:a9:68:e1:67:cb:57:88:21:d9:31:
e9:b5:41:42:4d:62:fd:bb:00:67:e9:f0:66:6e:99:
98:5c:cc:8e:6b:00:af:8c:7a:e6:5a:65:da:84:42:
0d:be:01:6d:94:d5:77:81:42:b6:ad:cf:fa:89:43:
0c:8c:e6:c1:51:2e:4f:6c:b1:71:e2:bc:a5:ee:fd:
05:02:8e:eb:b5:79:97:4b:58:fd:b4:fc:4c:8c:bf:
68:0e:d4:b8:19:a7:68:37:03:ed:dd:4b:80:b4:60:
fa:10:a4:9a:45:fc:00:2d:e9:bb:11:35:b1:08:42:
b4:74:86:18:08:53:8c:a4:30:1b:1f:36:e9:d7:a7:
ed:e2:05:ed:16:15:ee:e9:29:67:af:03:08:ec:35:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:08:13:BE:68:A0:44:98:AA:CC:44:F6:3C:78:C6:9B:E0:70:6E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.122.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:39:08:63:7f:48:6a:0d:04:9c:49:c1:96:f4:25:ab:7c:9c:
63:a5:89:b6:0d:13:81:16:ca:0d:34:0e:af:de:38:b3:ca:96:
04:b1:44:3f:43:cb:07:c2:37:f2:2a:fc:20:62:70:99:00:29:
4a:45:77:45:7a:c4:02:2b:79:a5:94:c3:f1:7a:47:6f:89:c4:
80:27:69:8d:fb:79:5e:1a:6d:e4:31:57:93:d0:1f:a7:1b:be:
f5:b6:a4:74:77:e0:61:78:96:92:7f:e3:35:85:d7:d1:f0:47:
56:77:27:bb:a1:57:21:5d:43:21:2b:68:d3:30:07:d0:47:b0:
6d:4b:e9:01:85:25:fe:a1:68:43:17:bd:be:89:43:fd:af:eb:
c6:dc:23:da:b0:73:06:3d:d8:c2:60:9b:6c:fb:5c:4c:d3:82:
27:ed:35:7c:ee:35:48:97:ce:31:4c:8a:20:c3:fe:01:74:af:
6f:af:4e:1e:4b:59:9d:5d:53:66:4a:06:bd:92:7f:4c:c2:fa:
1b:f5:12:67:9b:6e:e4:d8:bd:ba:10:2a:f3:71:15:8c:4f:92:
f3:be:e0:7b:70:d1:27:7f:c3:1c:94:d5:e4:01:66:6a:cb:b1:
e1:d1:74:81:39:f7:88:df:e2:27:0a:69:b8:4e:e9:64:1b:09:
87:03:cb:87
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUNEeuXv9+OWTer0hgdWvDj1ZSzq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMjAxMzM2NDZaFw0yNDEwMTgxMzQxNDZaMDMxMTAvBgNV
BAMTKEM1MzQwODEzQkU2OEEwNDQ5OEFBQ0M0NEY2M0M3OEM2OUJFMDcwNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+UFwW0TcDBIUDfVWocbof7gI
QzsdSzlDv66ajGGnls2ZNS3M+7GjSkK5aTsnb8T2kV+LYWRfKILTSt4jvIqetC7k
1pu6wduFOxXvIiFq2qKUOFj9rcyJRldwOozFMu+Iq6ZTtT0OUCOLVHSMqWjhZ8tX
iCHZMem1QUJNYv27AGfp8GZumZhczI5rAK+MeuZaZdqEQg2+AW2U1XeBQratz/qJ
QwyM5sFRLk9ssXHivKXu/QUCjuu1eZdLWP20/EyMv2gO1LgZp2g3A+3dS4C0YPoQ
pJpF/AAt6bsRNbEIQrR0hhgIU4ykMBsfNunXp+3iBe0WFe7pKWevAwjsNZJnAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUxTQIE75ooESYqsxE9jx4xpvgcG4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTMwMmUzMTMy
MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdRaejANBgkq
hkiG9w0BAQsFAAOCAQEALjkIY39Iag0EnEnBlvQlq3ycY6WJtg0TgRbKDTQOr944
s8qWBLFEP0PLB8I38ir8IGJwmQApSkV3RXrEAit5pZTD8XpHb4nEgCdpjft5Xhpt
5DFXk9Afpxu+9bakdHfgYXiWkn/jNYXX0fBHVncnu6FXIV1DISto0zAH0EewbUvp
AYUl/qFoQxe9volD/a/rxtwj2rBzBj3YwmCbbPtcTNOCJ+01fO41SJfOMUyKIMP+
AXSvb69OHktZnV1TZkoGvZJ/TML6G/USZ5tu5Ni9uhAq83EVjE+S877ge3DRJ3/D
HJTV5AFmasux4dF0gTn3iN/iJwppuE7pZBsJhwPLhw==
-----END CERTIFICATE-----
Generated at Sun Jan 14 18:56:52 2024 by rpki-client on console-ams.rpki-client.org