Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e20323037303833.roa
File: 3231332e3133392e36342e302f32342d3234203d3e20323037303833.roa (raw, json)
Hash identifier: NRfE0+dMzcVdvGgJ5WNNzBiCb7MQB00kr5o8ripPzTw=
Subject key identifier: 8A:B9:83:5B:EC:13:AA:4A:D6:5E:20:66:DA:E4:E8:1F:33:F7:44:F2
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 40EC10A7F511B05F1CC6876276E99055743FA253
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e20323037303833.roa
Signing time: Fri 09 Jun 2023 14:25:58 +0000
ROA not before: Fri 09 Jun 2023 14:20:58 +0000
ROA not after: Fri 07 Jun 2024 14:25:58 +0000
asID: 207083
IP address blocks: 213.139.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ec:10:a7:f5:11:b0:5f:1c:c6:87:62:76:e9:90:55:74:3f:a2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jun 9 14:20:58 2023 GMT
Not After : Jun 7 14:25:58 2024 GMT
Subject: CN=8AB9835BEC13AA4AD65E2066DAE4E81F33F744F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:5b:7a:67:84:da:73:e6:df:4c:ae:67:23:
41:60:cf:69:21:20:12:d2:70:42:1c:0c:ad:4a:cb:
d6:65:9c:23:cd:69:dd:a1:e6:c8:6e:22:2a:d9:e2:
5d:48:3d:43:8a:7d:39:9e:14:70:ee:a3:ce:4e:17:
9a:2b:0a:5b:0b:23:f3:34:99:60:6f:93:4c:21:59:
6d:49:4e:5e:9a:2a:58:f5:d8:f4:0b:a7:fa:6d:e0:
a4:de:7e:8d:f5:f5:6b:35:47:7b:3a:b9:9c:33:3f:
09:73:55:17:34:40:88:c5:19:50:41:8a:47:e2:7f:
43:91:95:99:d7:3f:50:e3:b5:51:bf:f8:d0:34:3f:
e0:2c:44:61:5a:00:33:13:32:0b:11:6b:d2:26:aa:
5d:f1:89:f2:c5:69:28:d9:81:33:37:73:e5:d9:1d:
a7:63:99:e3:d3:34:95:99:a3:82:b0:54:8c:7b:3c:
06:a6:fd:d5:0b:05:59:c7:38:ac:37:94:57:b9:83:
76:ea:30:37:04:89:96:4b:a8:7c:a6:bf:57:70:4c:
13:49:e8:86:16:17:ca:91:73:d3:ff:ff:2e:6a:05:
a0:0e:ee:5a:75:42:cb:ba:ff:ee:56:c8:70:62:ed:
13:61:87:fd:5f:8b:02:3f:98:da:f5:92:ea:f4:45:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B9:83:5B:EC:13:AA:4A:D6:5E:20:66:DA:E4:E8:1F:33:F7:44:F2
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e20323037303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.64.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a4:f3:3d:bb:83:d5:53:10:75:c9:ca:07:97:7b:a0:db:59:
ec:4e:5e:8f:1f:21:a8:dd:d7:82:61:5f:95:60:b5:d1:77:6a:
54:b1:5d:61:fc:76:5c:bd:69:33:44:7e:ce:f8:74:32:4b:2c:
43:79:48:55:82:15:21:e3:d7:43:a1:fa:c2:21:65:93:6c:a5:
de:e0:51:9b:f4:1e:e8:85:43:85:e0:bd:0e:7a:2d:f0:b9:24:
3e:8f:e3:34:c5:f4:91:5d:9c:a3:7e:6d:8b:ef:f4:6a:00:d3:
9b:0a:96:d8:2e:f7:a2:7b:d3:a9:b3:1c:ea:50:50:d3:71:ad:
24:11:58:90:b3:54:7b:f4:17:de:a1:30:2a:7e:e4:52:87:ca:
40:3e:0f:c4:e8:e9:a8:c4:a1:35:1f:53:fd:d8:b3:ca:d0:61:
95:56:3b:8b:3c:b9:42:d6:db:34:e9:4b:3d:6d:c7:16:f5:af:
0d:d4:9f:9f:ad:f6:eb:99:47:43:f5:1d:8e:d9:c5:c4:8d:b5:
eb:c5:15:89:04:66:ff:7b:0c:45:7e:01:cd:f7:62:9c:6a:ed:
34:fb:6b:1f:45:b9:8b:a9:17:f9:db:82:8a:72:a6:44:94:93:
14:3c:3d:20:48:06:5e:f7:c6:fd:0a:4d:b8:0d:21:99:61:b1:
1c:6b:e1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 00:37:30 2023 by rpki-client on console-ams.rpki-client.org