Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e20383334.roa
File: 3134362e3234372e35382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mx2r97tZwBieUk1D92ct1EvQMwLL86JXhgHyf0e7rTA=
Subject key identifier: 71:BF:37:3E:10:06:90:E8:11:55:2D:58:38:5C:0C:00:82:97:16:9B
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 21086BB0AEA861CE7B13FD466AF07C5069A6DFBC
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e20383334.roa
Signing time: Thu 08 Jun 2023 00:00:07 +0000
ROA not before: Wed 07 Jun 2023 23:55:07 +0000
ROA not after: Thu 06 Jun 2024 00:00:07 +0000
asID: 834
IP address blocks: 146.247.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:08:6b:b0:ae:a8:61:ce:7b:13:fd:46:6a:f0:7c:50:69:a6:df:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Jun 7 23:55:07 2023 GMT
Not After : Jun 6 00:00:07 2024 GMT
Subject: CN=71BF373E100690E811552D58385C0C008297169B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:81:2b:e5:af:60:d7:3a:97:b4:6e:87:f6:
5b:ab:a5:5f:0c:77:9f:43:ce:09:09:66:a7:18:70:
fc:5e:c9:23:7b:5a:d6:68:47:9e:be:ec:62:66:69:
06:fa:7d:b3:ee:f9:ba:ea:e0:25:f4:2b:54:d4:01:
39:ad:92:7d:d8:f7:51:ca:bf:1f:37:d5:4f:d4:b5:
b3:3d:bd:fe:25:10:f0:a0:1c:11:ce:36:48:55:ef:
54:84:9a:46:d9:bc:9e:b3:f0:b0:f3:e0:db:c9:ac:
8e:f3:08:e6:24:c3:3f:59:fa:d4:ee:8d:23:1e:0f:
d2:60:c5:1c:d9:cd:e5:39:ab:e5:a4:d0:0a:7e:07:
a2:83:b8:bd:28:47:37:a6:1e:b9:a0:10:96:97:e4:
c0:b4:4e:9f:66:48:3a:bf:ee:f0:fa:0f:15:8f:ba:
30:04:27:09:63:45:bb:5f:16:bf:57:07:1f:b8:58:
78:70:ac:15:72:01:89:08:05:36:da:f7:b3:26:fe:
85:e3:6d:e6:6c:a6:56:63:40:1f:ce:91:7b:44:e0:
30:5f:ff:c5:88:c7:17:8a:58:62:cb:57:31:e6:18:
c2:3a:f7:3d:04:63:0c:fb:3c:d4:fc:04:ec:10:f8:
ad:a5:7b:41:26:2e:98:e2:bc:88:70:a1:b0:4f:e2:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BF:37:3E:10:06:90:E8:11:55:2D:58:38:5C:0C:00:82:97:16:9B
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
11:dd:d2:4b:96:4f:e9:73:c7:47:16:4f:07:2f:bc:4d:bb:20:
ba:6d:af:71:5f:96:b6:b5:d4:97:bf:07:90:92:df:cc:1c:e2:
3a:c5:2d:71:83:5d:4d:b1:2b:10:3f:c1:0a:96:c0:be:15:70:
63:f0:a6:56:45:a4:61:03:2e:8f:1a:68:26:c0:91:d1:ff:57:
20:4e:98:b6:d1:f7:03:6c:5c:94:7d:c5:57:66:d4:97:a7:15:
67:88:8e:7a:6e:59:51:a6:82:5a:28:85:28:d6:a4:bf:6b:e0:
f8:81:22:5a:23:70:36:d8:62:ab:2c:3b:a9:f3:ad:d4:a1:3b:
8c:22:a4:cd:7c:91:54:4c:ab:dc:d6:9f:f6:c0:c8:86:00:d8:
c1:83:68:e2:61:9a:44:7f:18:ba:96:79:97:40:4d:ac:dd:d3:
46:90:7d:9a:5d:55:ca:34:0f:10:be:b0:f4:90:01:d8:b3:1f:
dd:4e:3d:28:bf:0e:05:60:73:e0:cb:c7:4d:68:cc:56:e0:3a:
5e:20:58:f4:94:8b:d7:0e:0c:c6:13:94:18:0c:f9:d9:8b:87:
5a:70:5f:98:f6:13:1f:d6:3a:f8:f1:79:f3:f4:ba:fd:e4:75:
3f:87:cf:16:6a:62:a3:37:24:3f:58:60:42:f4:bd:86:93:b5:
a1:d2:56:95
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUIQhrsK6oYc57E/1GavB8UGmm37wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl
MTZkODdmYjAeFw0yMzA2MDcyMzU1MDdaFw0yNDA2MDYwMDAwMDdaMDMxMTAvBgNV
BAMTKDcxQkYzNzNFMTAwNjkwRTgxMTU1MkQ1ODM4NUMwQzAwODI5NzE2OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmboEr5a9g1zqXtG6H9lurpV8M
d59DzgkJZqcYcPxeySN7WtZoR56+7GJmaQb6fbPu+brq4CX0K1TUATmtkn3Y91HK
vx831U/UtbM9vf4lEPCgHBHONkhV71SEmkbZvJ6z8LDz4NvJrI7zCOYkwz9Z+tTu
jSMeD9JgxRzZzeU5q+Wk0Ap+B6KDuL0oRzemHrmgEJaX5MC0Tp9mSDq/7vD6DxWP
ujAEJwljRbtfFr9XBx+4WHhwrBVyAYkIBTba97Mm/oXjbeZsplZjQB/OkXtE4DBf
/8WIxxeKWGLLVzHmGMI69z0EYwz7PNT8BOwQ+K2le0EmLpjivIhwobBP4i1vAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUcb83PhAGkOgRVS1YOFwMAIKXFpswHwYDVR0j
BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1
NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G
dGhfcy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYt
OTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1NWM1LzEvMzEzNDM2MmUzMjM0MzcyZTM1
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACS9zow
DQYJKoZIhvcNAQELBQADggEBABHd0kuWT+lzx0cWTwcvvE27ILptr3Fflra11Je/
B5CS38wc4jrFLXGDXU2xKxA/wQqWwL4VcGPwplZFpGEDLo8aaCbAkdH/VyBOmLbR
9wNsXJR9xVdm1JenFWeIjnpuWVGmgloohSjWpL9r4PiBIlojcDbYYqssO6nzrdSh
O4wipM18kVRMq9zWn/bAyIYA2MGDaOJhmkR/GLqWeZdATazd00aQfZpdVco0DxC+
sPSQAdizH91OPSi/DgVgc+DLx01ozFbgOl4gWPSUi9cODMYTlBgM+dmLh1pwX5j2
Ex/WOvjxefP0uv3kdT+HzxZqYqM3JD9YYEL0vYaTtaHSVpU=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net