Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e36302e38362e302f32342d3332203d3e203133323133.roa
File: 3139342e36302e38362e302f32342d3332203d3e203133323133.roa (raw, json)
Hash identifier: HTyaHyuwwcCqFbcHXFFT3ZrkLwKrC5gtrNjPxBE6lWY=
Subject key identifier: F9:E9:F8:48:67:A5:35:4C:E1:45:A8:75:39:41:1E:C3:6B:DE:A2:49
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 38DB161A178FAAE03DD42A22A77E108D2DA017A6
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e36302e38362e302f32342d3332203d3e203133323133.roa
Signing time: Mon 26 Feb 2024 08:53:39 +0000
ROA not before: Mon 26 Feb 2024 08:48:39 +0000
ROA not after: Mon 24 Feb 2025 08:53:39 +0000
asID: 13213
IP address blocks: 194.60.86.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:db:16:1a:17:8f:aa:e0:3d:d4:2a:22:a7:7e:10:8d:2d:a0:17:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Feb 26 08:48:39 2024 GMT
Not After : Feb 24 08:53:39 2025 GMT
Subject: CN=F9E9F84867A5354CE145A87539411EC36BDEA249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:65:0f:ab:b6:5a:3b:a9:bb:4e:e7:8d:8d:e7:
81:85:fb:26:8c:65:5f:8e:5f:c9:f3:b8:51:e7:bd:
6d:33:de:da:d7:a3:02:8f:1e:63:dc:49:33:2b:39:
57:65:5c:f7:5d:2c:56:ba:40:f8:d8:a5:8f:a8:5f:
17:f3:5d:00:f9:14:b3:cc:42:99:a8:a4:e5:07:b4:
bd:fd:14:1f:95:03:77:8b:be:c6:9e:3b:aa:4a:1e:
88:29:18:85:ef:ec:8b:d9:7c:80:9b:f4:e1:f6:5d:
0d:18:a7:c3:53:60:4f:83:cc:42:bd:b0:48:d3:69:
66:fc:f7:de:9a:d9:c8:6d:cb:5d:a4:5d:a1:0b:77:
76:09:94:d2:9c:3b:de:ce:3a:aa:a0:ee:ed:33:b1:
14:be:e9:25:d8:8d:23:d4:a1:a4:15:ef:38:a2:4c:
d5:fb:6c:01:52:5a:b7:b1:fc:ee:a3:56:d3:fc:bc:
84:16:2a:e9:29:e3:67:9b:58:79:b6:08:34:cd:ea:
55:d0:32:28:23:89:be:68:21:f8:11:5b:bc:ee:80:
42:a5:9a:57:ec:e2:c7:70:3d:95:b2:30:f9:8d:c8:
ee:1c:f6:29:6d:e0:94:8a:3b:c8:fe:23:71:c6:bb:
69:27:8c:46:49:2a:41:d2:d1:63:4d:10:44:3e:94:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:F8:48:67:A5:35:4C:E1:45:A8:75:39:41:1E:C3:6B:DE:A2:49
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e36302e38362e302f32342d3332203d3e203133323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.86.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b8:c7:cd:de:b0:8a:b0:3b:b4:81:b4:7f:55:c8:0f:23:79:
0c:4e:79:1a:5b:9b:e5:93:9d:ff:53:3a:dd:0e:f7:c2:ab:e1:
6f:a9:b5:ed:ba:54:cd:fb:c6:f5:cc:8b:e2:b2:b8:43:88:cb:
2d:8a:43:4a:02:02:8b:22:95:8c:b3:7f:99:ef:d3:53:de:5d:
1b:d6:89:e5:6d:ad:21:f1:78:dd:f9:c4:8b:36:5a:8c:34:c0:
c9:b3:1d:00:af:08:1e:1d:7b:5b:b3:60:08:80:6f:5d:c8:40:
b8:66:b0:92:49:4d:b8:f3:5e:a9:93:fa:1d:54:71:99:28:35:
64:77:69:be:c5:5e:23:e7:f6:cd:e7:c5:c2:49:96:6b:2b:10:
e0:5b:b7:31:f1:6f:fd:da:a6:77:d6:f0:e5:56:6a:d3:d6:ad:
a4:56:1a:54:1e:57:63:45:a2:9f:50:6f:e9:92:cd:65:32:6d:
b4:39:46:dd:36:2d:ef:a9:2d:fc:ba:80:4c:98:ca:db:cd:13:
8b:71:f1:e8:04:68:d9:b9:0b:fc:71:08:37:65:42:c0:e3:48:
ac:fa:bc:00:5b:f6:7f:7b:50:42:e2:f6:74:62:cc:0c:97:b4:
34:1e:bb:30:3c:4e:f2:d7:3d:ee:ea:66:7a:49:0a:1d:34:de:
bb:39:63:b3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUONsWGhePquA91Coip34QjS2gF6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yNDAyMjYwODQ4MzlaFw0yNTAyMjQwODUzMzlaMDMxMTAvBgNV
BAMTKEY5RTlGODQ4NjdBNTM1NENFMTQ1QTg3NTM5NDExRUMzNkJERUEyNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwZQ+rtlo7qbtO542N54GF+yaM
ZV+OX8nzuFHnvW0z3trXowKPHmPcSTMrOVdlXPddLFa6QPjYpY+oXxfzXQD5FLPM
QpmopOUHtL39FB+VA3eLvsaeO6pKHogpGIXv7IvZfICb9OH2XQ0Yp8NTYE+DzEK9
sEjTaWb8996a2chty12kXaELd3YJlNKcO97OOqqg7u0zsRS+6SXYjSPUoaQV7zii
TNX7bAFSWrex/O6jVtP8vIQWKukp42ebWHm2CDTN6lXQMigjib5oIfgRW7zugEKl
mlfs4sdwPZWyMPmNyO4c9ilt4JSKO8j+I3HGu2knjEZJKkHS0WNNEEQ+lKjjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+en4SGelNUzhRah1OUEew2veokkwHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzEzOTM0MmUzNjMwMmUzODM2
MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzMyMzEzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI8
VjANBgkqhkiG9w0BAQsFAAOCAQEAFrjHzd6wirA7tIG0f1XIDyN5DE55Glub5ZOd
/1M63Q73wqvhb6m17bpUzfvG9cyL4rK4Q4jLLYpDSgICiyKVjLN/me/TU95dG9aJ
5W2tIfF43fnEizZajDTAybMdAK8IHh17W7NgCIBvXchAuGawkklNuPNeqZP6HVRx
mSg1ZHdpvsVeI+f2zefFwkmWaysQ4Fu3MfFv/dqmd9bw5VZq09atpFYaVB5XY0Wi
n1Bv6ZLNZTJttDlG3TYt76kt/LqATJjK280Ti3Hx6ARo2bkL/HEIN2VCwONIrPq8
AFv2f3tQQuL2dGLMDJe0NB67MDxO8tc97upmekkKHTTeuzljsw==
Generated at Mon Mar 4 11:57:02 2024 by rpki-client on console-fra.rpki-client.org