Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20323034383433.roa
File: 3231332e3133392e36352e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: G3kcx/8r46qoEk9kRlmtBEM1CVzj6uDCdcv9nS/CtWw=
Subject key identifier: E9:15:A9:90:4F:B4:DD:ED:CA:42:4D:E6:97:5F:59:74:8A:03:E4:5B
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 259722A1475525A5A33DBC8C300E27F2DB9D2FCF
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20323034383433.roa
Signing time: Thu 01 Jun 2023 15:07:19 +0000
ROA not before: Thu 01 Jun 2023 15:02:19 +0000
ROA not after: Thu 30 May 2024 15:07:19 +0000
asID: 204843
IP address blocks: 213.139.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:97:22:a1:47:55:25:a5:a3:3d:bc:8c:30:0e:27:f2:db:9d:2f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jun 1 15:02:19 2023 GMT
Not After : May 30 15:07:19 2024 GMT
Subject: CN=E915A9904FB4DDEDCA424DE6975F59748A03E45B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:b3:2c:30:7f:d6:99:fa:5b:a0:26:f2:c4:
a0:cf:1e:8a:cf:78:b9:4e:52:8d:e9:a2:72:c0:a1:
6f:66:46:09:cc:15:c3:98:23:98:31:ba:31:e1:b0:
05:33:74:b5:82:54:c8:a5:6c:6e:98:87:ce:27:51:
1f:57:0b:91:fe:70:65:d6:1b:2a:b1:d4:d1:b5:7d:
93:8f:6b:bb:20:8d:7b:6e:1c:92:6d:e0:79:a2:84:
48:a0:17:d3:37:a0:7c:94:61:4a:46:c4:ae:13:a1:
73:56:15:61:52:b7:73:62:8b:cf:f9:a0:23:a4:81:
73:d8:7c:10:2a:96:4f:5c:13:c3:09:e9:3d:f5:67:
f6:c1:cd:29:a6:9e:39:8b:d2:1c:d3:f9:5d:2d:cf:
65:b0:db:ec:ed:6a:5e:f1:14:ad:91:5c:93:96:52:
a4:77:be:d4:de:f2:7b:45:07:d0:31:7b:52:8c:49:
3f:bc:8b:7a:fa:6d:28:71:80:97:48:44:cb:5e:60:
06:42:05:61:0d:c5:84:5d:c5:d9:37:b7:0a:e7:91:
6f:a4:e3:13:43:11:6a:31:46:54:55:c9:73:c5:d2:
e3:ea:bd:77:4e:72:e9:2c:63:31:b8:55:ca:67:b2:
c0:53:b0:37:f1:8e:3e:c6:03:3c:9f:53:58:1a:2d:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:15:A9:90:4F:B4:DD:ED:CA:42:4D:E6:97:5F:59:74:8A:03:E4:5B
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.65.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fa:db:dd:c0:c3:4c:63:95:fb:6b:32:d9:34:d3:09:8f:77:
2f:c6:38:d4:67:17:9f:67:3e:01:44:ec:49:a9:84:55:f0:47:
e2:da:3e:0a:b2:6e:67:0c:c1:84:76:5d:b8:f1:4d:96:a4:7c:
0c:c4:47:6d:27:d8:3c:fb:42:87:0e:b6:e5:3a:34:95:3c:f3:
c4:24:fa:86:84:c5:b8:2f:9a:20:4f:38:80:1d:12:02:9c:ae:
24:45:4f:b3:76:28:d8:28:ef:6e:ab:bf:8c:27:8e:1a:56:18:
71:16:eb:94:92:80:33:ea:d4:bd:37:45:65:37:56:3b:23:5a:
6c:dc:6d:7e:24:72:7d:97:59:53:2d:8a:49:ed:c7:a0:dc:4b:
1e:ea:a4:90:40:79:f0:04:ba:0b:62:07:c9:d2:ac:17:ca:e9:
6b:15:3b:29:9e:1c:98:5b:1e:cb:f9:ed:81:76:55:33:51:df:
01:0c:79:b7:91:80:fb:33:6b:5b:39:c6:de:d6:64:0a:22:70:
c8:68:39:b9:c2:ed:d1:a0:19:40:a4:8f:67:b6:34:85:e1:d3:
f9:ee:b1:83:23:1b:f3:c7:25:8f:9f:f3:87:e7:1b:d0:92:1d:
e3:68:20:9a:ff:fa:0c:40:b4:bf:03:e5:0a:2d:55:16:0b:5c:
dc:f7:7c:4e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJZcioUdVJaWjPbyMMA4n8tudL88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yMzA2MDExNTAyMTlaFw0yNDA1MzAxNTA3MTlaMDMxMTAvBgNV
BAMTKEU5MTVBOTkwNEZCNERERURDQTQyNERFNjk3NUY1OTc0OEEwM0U0NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85rMsMH/WmfpboCbyxKDPHorP
eLlOUo3ponLAoW9mRgnMFcOYI5gxujHhsAUzdLWCVMilbG6Yh84nUR9XC5H+cGXW
Gyqx1NG1fZOPa7sgjXtuHJJt4HmihEigF9M3oHyUYUpGxK4ToXNWFWFSt3Nii8/5
oCOkgXPYfBAqlk9cE8MJ6T31Z/bBzSmmnjmL0hzT+V0tz2Ww2+ztal7xFK2RXJOW
UqR3vtTe8ntFB9Axe1KMST+8i3r6bShxgJdIRMteYAZCBWENxYRdxdk3twrnkW+k
4xNDEWoxRlRVyXPF0uPqvXdOcuksYzG4VcpnssBTsDfxjj7GAzyfU1gaLdO3AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU6RWpkE+03e3KQk3ml19ZdIoD5FswHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM2
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzODM0MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADVi0EwDQYJKoZIhvcNAQELBQADggEBAI36293Aw0xjlftrMtk00wmPdy/GONRn
F59nPgFE7EmphFXwR+LaPgqybmcMwYR2XbjxTZakfAzER20n2Dz7QocOtuU6NJU8
88Qk+oaExbgvmiBPOIAdEgKcriRFT7N2KNgo726rv4wnjhpWGHEW65SSgDPq1L03
RWU3VjsjWmzcbX4kcn2XWVMtikntx6DcSx7qpJBAefAEugtiB8nSrBfK6WsVOyme
HJhbHsv57YF2VTNR3wEMebeRgPsza1s5xt7WZAoicMhoObnC7dGgGUCkj2e2NIXh
0/nusYMjG/PHJY+f84fnG9CSHeNoIJr/+gxAtL8D5QotVRYLXNz3fE4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org