Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32332d3234203d3e20383334.roa
File: 3231322e3130332e34342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 5pCN+hT21/OuR/kYU2FTaubgvjfnyKaoQgE1r1WiI8E=
Subject key identifier: DD:A9:1A:CB:E1:35:B2:AA:F2:4F:A5:85:1F:C4:AB:DF:BE:05:7A:F2
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 47073AC611FC4CC327A1A1E384FACC9ADD7920F4
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32332d3234203d3e20383334.roa
Signing time: Sat 23 Nov 2024 01:24:21 +0000
ROA not before: Sat 23 Nov 2024 01:19:21 +0000
ROA not after: Sat 22 Nov 2025 01:24:21 +0000
asID: 834
IP address blocks: 212.103.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 06:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:07:3a:c6:11:fc:4c:c3:27:a1:a1:e3:84:fa:cc:9a:dd:79:20:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Nov 23 01:19:21 2024 GMT
Not After : Nov 22 01:24:21 2025 GMT
Subject: CN=DDA91ACBE135B2AAF24FA5851FC4ABDFBE057AF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:0e:0f:a9:be:76:9a:ea:e3:47:7d:5a:97:
fb:07:ab:53:e0:5d:23:34:02:f0:58:ff:39:1d:3c:
e1:b9:ea:87:e2:1f:e1:88:d9:88:30:19:b5:1b:1e:
76:56:8b:f2:a1:b1:87:ed:1e:d2:cf:3c:23:af:75:
4d:22:21:8a:2a:06:4a:ed:eb:2f:be:0d:93:a3:06:
5a:a1:e5:f4:78:1e:db:e7:17:2f:ad:69:a4:f5:4b:
05:60:65:06:31:d6:e2:ea:9c:b5:0c:ab:02:f2:ff:
be:2e:63:b7:2e:85:2d:fe:fd:96:ca:bf:7d:17:95:
e8:fa:c1:1c:66:a8:e6:b6:dc:46:cf:3e:cc:e0:1f:
ee:46:a0:b0:df:b2:20:1d:c3:78:9d:cd:ea:20:1b:
b8:d5:32:e1:4b:21:10:7b:7c:d6:a3:e6:01:a0:58:
66:18:d3:d0:63:0e:cf:35:0b:b2:67:ec:bb:04:7c:
ee:b0:a5:69:37:b5:01:e8:af:9e:7e:c2:a9:53:c8:
da:4c:bf:01:8b:54:1b:fd:38:47:c8:4a:e8:55:4e:
72:a8:10:e1:f7:04:10:dd:da:7e:dd:e5:e3:ac:94:
57:02:f4:89:75:e9:93:a5:48:c7:e2:cf:31:9e:5b:
a2:6c:72:6a:b6:9a:97:c0:a1:a5:eb:2e:d6:b4:5b:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A9:1A:CB:E1:35:B2:AA:F2:4F:A5:85:1F:C4:AB:DF:BE:05:7A:F2
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.44.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:9c:0d:a1:e6:21:1a:80:55:13:f8:ed:aa:93:ba:eb:60:96:
31:ab:13:ac:6e:e2:79:d9:eb:f7:a8:8c:ee:fe:d1:54:60:86:
46:3c:75:30:84:7c:29:31:4a:fc:f6:5f:b7:53:08:30:08:76:
29:a8:7b:08:2b:f4:a9:94:89:73:82:77:3f:8f:06:8e:31:66:
e2:5c:9b:7f:9f:44:19:a2:a7:7c:88:17:b6:ef:8a:d6:06:88:
a4:7e:6a:8f:2c:a0:a9:a0:b6:80:94:8a:ce:a9:96:e8:4c:8c:
97:6f:f9:14:98:2b:ab:42:f9:1e:43:ce:df:a9:32:c2:62:da:
7f:99:1d:dc:f1:d0:37:16:c3:93:41:a0:7a:9f:ca:a9:28:f6:
2d:e5:fc:c1:9b:e6:6c:ca:62:51:a2:51:f5:f9:67:b5:8f:50:
7a:1f:89:2c:be:1e:24:8e:06:b0:6e:ab:7f:19:33:77:74:30:
66:06:34:f4:f6:85:7b:cb:22:78:30:ba:bf:cd:0e:ff:3c:26:
52:d0:62:68:2c:24:38:88:1d:2e:88:2b:86:32:fa:fc:cf:49:
42:d5:74:7e:95:ba:a6:22:7e:4e:d7:63:7b:d9:aa:58:0e:aa:
2a:d4:14:a3:67:17:94:b3:3b:c4:af:16:91:ec:10:89:0a:72:
f0:00:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:19:01 2025 by rpki-client