Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3130392e3233362e36312e302f32342d3234203d3e203631333137.roa
File: 3130392e3233362e36312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: d9SQr2vPwiEkug4SZySm0skuzenI3p/Fr6wfINjpLnc=
Subject key identifier: 7F:09:85:AB:F0:83:E2:3D:DA:FA:85:38:3E:41:0C:74:E7:FC:4A:3D
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 106E2C9DA0AC55115ABADE41D1EAA1A9A5497C10
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3130392e3233362e36312e302f32342d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:27:54 +0000
ROA not before: Mon 27 Mar 2023 08:22:54 +0000
ROA not after: Mon 25 Mar 2024 08:27:54 +0000
asID: 61317
IP address blocks: 109.236.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:6e:2c:9d:a0:ac:55:11:5a:ba:de:41:d1:ea:a1:a9:a5:49:7c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:54 2023 GMT
Not After : Mar 25 08:27:54 2024 GMT
Subject: CN=7F0985ABF083E23DDAFA85383E410C74E7FC4A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:d1:45:e6:a9:7e:3f:9d:5d:cd:03:e7:21:
70:a9:c0:08:7b:3d:0f:5f:ed:a4:38:91:3f:dd:77:
4f:d1:b7:6d:a2:a1:c7:17:46:1e:84:b4:75:29:66:
d8:d5:a1:68:16:78:62:aa:2a:ff:f4:5a:42:bf:8b:
6a:0a:03:01:81:cf:b1:37:16:11:30:ac:04:cb:e4:
c7:e8:37:72:9a:19:8b:85:70:35:1a:32:76:e8:55:
1e:6a:f8:c8:39:fb:84:cd:74:56:8f:03:52:b6:fa:
a4:37:d1:74:bb:be:cc:d9:b4:80:ec:f5:8b:47:8c:
87:a5:92:a2:28:e9:f0:a2:74:9a:34:cb:e5:47:ff:
9f:d7:0f:9f:88:f8:25:67:76:5e:ee:10:65:05:f9:
14:64:14:27:5a:92:e0:dd:19:21:65:64:1c:98:cb:
ee:f0:a3:e7:4f:cc:5b:a3:7d:bb:47:0d:99:bd:dc:
4d:92:71:ca:30:c7:35:e5:25:d0:12:04:cf:99:fe:
b2:6f:6c:77:3f:1a:71:2b:3c:9d:34:af:d9:e0:e5:
e3:8f:9d:4e:03:11:f0:5d:24:cc:41:bb:20:10:5e:
18:6c:2a:49:d7:5e:88:e3:f0:6c:71:d6:20:76:53:
f2:2b:34:90:a7:4a:b7:c7:66:74:c3:59:6f:83:5b:
13:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:85:AB:F0:83:E2:3D:DA:FA:85:38:3E:41:0C:74:E7:FC:4A:3D
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3130392e3233362e36312e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.61.0/24
Signature Algorithm: sha256WithRSAEncryption
44:21:0f:3a:c4:2b:bc:78:02:f3:ac:e7:cb:08:a4:86:d7:7e:
29:05:48:aa:85:db:51:1d:f3:40:0a:97:c9:83:7c:96:65:2b:
4c:78:1e:47:f6:47:76:6b:2d:a0:e4:a6:21:c0:fd:55:97:b7:
e3:26:01:bd:ac:3c:76:44:7b:80:4d:55:e6:b6:8a:1a:02:9e:
46:a9:17:6b:b4:bc:29:74:25:b2:b7:34:07:31:34:a5:0a:8c:
96:1e:c6:a7:e9:ba:9f:4c:ce:2a:0c:72:cd:75:f9:d4:cc:d3:
33:32:50:5b:49:b2:48:1b:5e:82:8e:99:bb:0a:38:85:5d:ea:
f2:76:64:34:d1:5a:b6:f4:f0:e7:3f:7b:4e:e6:df:64:4b:21:
df:de:4b:fb:0f:0a:c0:10:0f:3a:5d:96:6c:bb:39:50:96:fa:
25:09:90:bf:b3:dc:8e:1c:7f:2e:e1:82:4d:69:6a:41:cb:b3:
2e:10:f0:bb:7c:ea:2b:f8:f7:a6:12:2f:4c:13:22:94:96:99:
ca:7c:41:56:e8:be:31:a2:8d:00:82:62:47:e5:5b:42:5d:b3:
aa:cd:b9:16:07:13:3d:5f:0d:b0:e3:c3:b9:57:de:3c:e2:d7:
db:d6:e0:22:fe:f2:be:b3:0f:d6:d2:43:e1:fd:50:21:bd:41:
4a:9d:f6:ff
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEG4snaCsVRFaut5B0eqhqaVJfBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yMzAzMjcwODIyNTRaFw0yNDAzMjUwODI3NTRaMDMxMTAvBgNV
BAMTKDdGMDk4NUFCRjA4M0UyM0REQUZBODUzODNFNDEwQzc0RTdGQzRBM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCtFF5ql+P51dzQPnIXCpwAh7
PQ9f7aQ4kT/dd0/Rt22ioccXRh6EtHUpZtjVoWgWeGKqKv/0WkK/i2oKAwGBz7E3
FhEwrATL5MfoN3KaGYuFcDUaMnboVR5q+Mg5+4TNdFaPA1K2+qQ30XS7vszZtIDs
9YtHjIelkqIo6fCidJo0y+VH/5/XD5+I+CVndl7uEGUF+RRkFCdakuDdGSFlZByY
y+7wo+dPzFujfbtHDZm93E2SccowxzXlJdASBM+Z/rJvbHc/GnErPJ00r9ng5eOP
nU4DEfBdJMxBuyAQXhhsKknXXojj8Gxx1iB2U/IrNJCnSrfHZnTDWW+DWxMZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUfwmFq/CD4j3a+oU4PkEMdOf8Sj0wHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzEzMDM5MmUzMjMzMzYyZTM2
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
bew9MA0GCSqGSIb3DQEBCwUAA4IBAQBEIQ86xCu8eALzrOfLCKSG134pBUiqhdtR
HfNACpfJg3yWZStMeB5H9kd2ay2g5KYhwP1Vl7fjJgG9rDx2RHuATVXmtooaAp5G
qRdrtLwpdCWytzQHMTSlCoyWHsan6bqfTM4qDHLNdfnUzNMzMlBbSbJIG16Cjpm7
CjiFXerydmQ00Vq29PDnP3tO5t9kSyHf3kv7DwrAEA86XZZsuzlQlvolCZC/s9yO
HH8u4YJNaWpBy7MuEPC7fOor+PemEi9MEyKUlpnKfEFW6L4xoo0AgmJH5VtCXbOq
zbkWBxM9Xw2w48O5V9484tfb1uAi/vK+sw/W0kPh/VAhvUFKnfb/
Generated at Wed Nov 1 08:44:49 2023 by rpki-client on console-ams.rpki-client.org