Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20323132363639.roa
File: 3231332e3133392e36352e302f32342d3234203d3e20323132363639.roa (raw, json)
Hash identifier: mSGIuzT13kjF3pKPwB9tRxY3JO9OT460taflE6LIWk4=
Subject key identifier: 38:36:22:14:99:D9:51:9D:8E:66:5D:39:9F:56:0D:04:EA:96:57:9E
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 08A05A036296985B908B2EB5ACD285BC258EDC3B
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20323132363639.roa
Signing time: Wed 25 Jan 2023 13:03:08 +0000
ROA not before: Wed 25 Jan 2023 12:58:08 +0000
ROA not after: Wed 24 Jan 2024 13:03:08 +0000
asID: 212669
IP address blocks: 213.139.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a0:5a:03:62:96:98:5b:90:8b:2e:b5:ac:d2:85:bc:25:8e:dc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 25 12:58:08 2023 GMT
Not After : Jan 24 13:03:08 2024 GMT
Subject: CN=3836221499D9519D8E665D399F560D04EA96579E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:9c:27:35:19:e6:b2:ab:91:3b:f8:92:05:
3d:42:86:c5:eb:34:b0:9f:5a:f2:76:d8:90:55:73:
73:04:2c:49:27:9b:96:bc:00:65:73:88:2c:b8:e6:
36:4d:7d:04:63:d8:50:5d:15:6b:74:91:34:78:1d:
84:60:25:48:49:15:8d:f7:b1:d7:f6:ef:91:f8:25:
a7:19:57:0b:b4:34:b7:8f:49:3d:82:01:2d:d5:37:
4d:e0:40:dc:d9:3d:b7:da:f8:00:c7:c8:fd:cb:d1:
32:a6:e1:d1:75:ea:82:7f:f7:6a:8d:3f:89:21:a8:
00:fd:a8:8c:a5:15:7f:64:a2:f8:bc:1b:c3:4e:6d:
46:f3:76:c3:ec:c3:86:d7:0b:b3:b5:f2:07:2f:7b:
94:47:5e:6d:33:66:00:c0:dd:47:ad:4a:23:8b:a7:
27:b9:18:63:29:27:e5:7e:76:9f:a7:f4:da:a3:d2:
18:54:02:dd:f8:b5:5d:a4:20:b8:e3:3e:c1:c3:13:
62:28:a5:bb:a7:69:83:50:db:57:40:1d:5a:ff:6b:
02:8c:ed:f6:15:ca:48:e7:28:ef:11:82:68:2a:d7:
2b:06:2f:9a:76:e3:f4:20:0f:3f:0e:a2:fd:50:52:
09:98:4d:f2:bd:43:64:e0:77:ee:b8:89:f0:73:c6:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:22:14:99:D9:51:9D:8E:66:5D:39:9F:56:0D:04:EA:96:57:9E
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20323132363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.65.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6c:4e:0a:bb:40:87:da:60:f1:5b:41:6b:7e:24:72:35:a6:
16:60:82:0d:6a:38:71:f0:dd:23:7d:57:0d:f1:b4:97:81:90:
3c:d4:a8:4d:d2:fc:88:35:cc:2c:78:26:99:d2:07:61:64:fd:
e0:40:46:e2:8e:99:c3:b2:4b:71:09:8e:14:f4:a7:55:03:f4:
cc:d4:ec:c6:17:44:2a:b0:ff:ed:b2:3e:b2:f0:8b:4c:eb:b2:
1f:b6:41:e7:96:d1:6c:81:94:07:bf:bf:00:00:a1:24:d9:6c:
70:5a:da:f3:e8:4e:6a:f1:08:f8:c7:20:f0:b2:a9:c2:e5:a5:
27:67:4a:4b:b7:6e:76:f8:49:a0:bf:cb:ce:e1:e0:87:9e:54:
51:86:ba:08:cb:b1:5a:a7:9f:ef:be:68:44:e2:56:bd:4e:db:
10:b8:f0:e2:7e:f8:03:c2:04:48:c6:fa:95:55:55:df:b4:da:
59:64:13:35:23:e5:e7:8e:6e:60:a2:10:87:81:ba:a3:da:b3:
e8:ec:35:8f:1b:5b:d7:80:a2:3b:89:86:04:10:31:6f:81:ec:
63:ce:65:7a:1a:6f:9e:6a:26:b6:ab:7f:53:92:05:86:f0:f8:
aa:ea:6a:61:b9:01:94:4b:35:00:23:4a:ff:ac:f3:04:73:ee:
e4:78:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org