Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e36342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NOhZi5+EMdfVP1w10nM1+llAhoylY6Mj5u2oYnMNsDA=
Subject key identifier: 2A:F6:26:52:57:33:87:AC:A2:C6:F4:EF:57:60:A3:F4:2A:6D:5D:2B
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 230C760D755D6A6F909162A55C0AD0BFC4627203
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e20383334.roa
Signing time: Wed 09 Aug 2023 00:00:06 +0000
ROA not before: Tue 08 Aug 2023 23:55:06 +0000
ROA not after: Wed 07 Aug 2024 00:00:06 +0000
asID: 834
IP address blocks: 213.139.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:0c:76:0d:75:5d:6a:6f:90:91:62:a5:5c:0a:d0:bf:c4:62:72:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Aug 8 23:55:06 2023 GMT
Not After : Aug 7 00:00:06 2024 GMT
Subject: CN=2AF62652573387ACA2C6F4EF5760A3F42A6D5D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:eb:e4:7b:c2:7a:de:d7:ed:ed:03:74:22:
5a:65:19:24:6f:bd:e7:01:59:5d:08:ca:91:80:6f:
ae:2c:0d:ae:45:59:77:ec:01:2e:b3:a6:a7:b5:0f:
70:af:7d:94:47:e4:92:0e:1d:70:1b:af:6a:85:f2:
a3:3e:ba:49:14:bf:ac:83:94:97:99:4a:13:75:f1:
42:6b:66:ec:7d:53:ca:e5:33:7d:fc:1c:73:3d:c2:
db:7b:4d:ea:a1:c2:2f:fd:c2:6c:e1:8b:d7:9a:2b:
35:10:f5:e6:e9:9b:75:c4:b9:c7:b7:e6:d1:44:56:
8b:11:36:32:f3:a9:4e:46:09:32:22:86:b9:9f:d7:
45:6e:b2:2b:f5:16:00:08:66:f2:c6:b4:11:c5:07:
98:55:1d:7d:af:9b:d4:51:0a:f6:bb:3c:27:c8:3b:
c2:2c:5c:96:e1:7f:63:90:5a:9b:d4:db:4b:98:5b:
97:ab:d6:1e:ce:30:d9:5d:0b:63:a6:3a:85:93:98:
b8:57:71:50:b5:80:7a:d9:ad:b6:12:49:f6:91:7d:
f5:67:ba:95:74:4b:af:39:1c:85:9e:f5:9a:00:28:
f8:ed:15:a6:12:55:c7:62:63:93:27:a4:ce:44:2e:
88:de:54:bf:92:29:fd:6c:c1:08:d5:e2:a1:7d:eb:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:26:52:57:33:87:AC:A2:C6:F4:EF:57:60:A3:F4:2A:6D:5D:2B
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.64.0/24
Signature Algorithm: sha256WithRSAEncryption
03:dd:2a:f9:1e:29:c0:7b:af:91:19:3e:bb:f3:ec:f1:fd:27:
ab:e6:99:b7:d5:29:a6:20:00:17:67:38:65:9a:34:50:57:dd:
b9:64:7f:eb:79:16:74:33:ff:5b:d3:67:dc:9a:7e:c3:0f:83:
11:59:d7:a6:b4:0c:b7:54:5c:86:99:ac:09:54:f4:e2:d1:63:
7c:2c:c3:c0:c9:88:35:5c:62:dd:48:25:48:52:4b:bc:a7:f3:
b3:9b:a2:0b:8f:52:3c:6e:16:b8:b1:d8:4b:d5:96:84:e5:53:
8c:8b:0e:90:52:8e:6c:b6:e3:7a:b8:2a:c2:fa:97:3a:f0:74:
39:68:22:24:1f:dc:37:91:87:57:89:1e:b0:d8:2f:2e:fb:f2:
17:41:8d:56:4b:7b:db:7b:d8:ca:2b:cc:c8:9a:08:8c:f7:d9:
2c:43:d6:41:fb:24:ad:d0:e6:22:67:3f:61:83:e3:bf:01:cb:
71:b3:61:03:0f:bb:02:07:32:44:8c:68:12:f9:77:0b:93:92:
4f:70:6d:45:7e:b9:0d:86:6a:af:81:2e:b8:6c:02:04:cc:d3:
94:49:f1:91:2f:45:f5:91:29:9c:b4:e1:c1:1a:9c:b6:a6:c8:
82:a5:90:31:7c:b9:9f:90:02:dc:c9:04:32:5a:78:aa:f6:1e:
69:76:8c:05
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 23 12:12:43 2023 by rpki-client on console-ams.rpki-client.org