Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20323132363039.roa
File: 3231332e3133392e36362e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: /FUxcq0DyUMn9jThVH4fh9J9nOAGZpQa4y8UulPBBic=
Subject key identifier: 44:09:77:4B:2A:5B:9D:ED:01:15:6E:0A:30:AD:0D:61:34:6C:C3:B3
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 77D088AC053580CEA021EC1D9A1C05553D55AA6D
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20323132363039.roa
Signing time: Tue 25 Apr 2023 09:16:32 +0000
ROA not before: Tue 25 Apr 2023 09:11:32 +0000
ROA not after: Tue 23 Apr 2024 09:16:32 +0000
asID: 212609
IP address blocks: 213.139.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:d0:88:ac:05:35:80:ce:a0:21:ec:1d:9a:1c:05:55:3d:55:aa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 25 09:11:32 2023 GMT
Not After : Apr 23 09:16:32 2024 GMT
Subject: CN=4409774B2A5B9DED01156E0A30AD0D61346CC3B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:09:9f:98:4c:d4:29:1b:41:04:e8:82:4e:
96:84:c8:22:c5:4c:e4:38:25:0a:1e:5a:bc:42:02:
df:df:b8:78:14:cc:20:7a:1a:19:b5:b4:23:32:58:
29:85:1b:5c:ee:42:29:0b:bf:4a:b4:a3:04:e6:a4:
9a:23:91:e1:b0:53:75:a6:e7:ba:ad:07:31:37:d3:
ee:e4:72:13:30:fb:c1:ee:d8:f2:73:9f:5b:2b:d8:
d5:98:09:28:2c:74:38:90:db:2f:7a:38:58:db:56:
01:ec:4e:84:a8:c1:83:9f:c4:15:51:de:03:cc:9e:
54:4c:26:cf:04:bb:49:b6:ce:72:b4:23:8d:92:70:
a3:ac:86:53:2c:be:00:b7:1b:90:b5:e1:87:a8:bb:
1d:92:5d:46:f2:1b:a4:de:22:b0:70:ba:3d:3f:99:
6c:24:52:ec:b2:a4:32:d9:22:6c:e2:bf:4b:04:e2:
bc:36:7b:58:ef:5d:c5:0b:74:f2:15:52:59:34:c6:
9a:9d:5a:f1:90:07:20:42:bf:d2:15:ba:29:53:4a:
73:c9:c1:0a:dd:b9:57:e2:57:5e:95:e1:84:df:c9:
51:1e:d0:2b:89:6f:2a:80:71:8f:3f:37:46:8a:8c:
20:96:06:24:da:ed:ca:de:3d:bb:65:4e:1c:50:a9:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:77:4B:2A:5B:9D:ED:01:15:6E:0A:30:AD:0D:61:34:6C:C3:B3
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bd:bf:78:43:57:95:b7:ee:84:08:54:b9:b1:88:d2:78:8e:
94:4a:c1:5a:f2:93:ef:54:f7:fd:dc:0d:60:92:9d:70:f7:d5:
b4:fd:da:47:87:8f:f8:33:d2:83:65:59:af:a7:7a:53:d2:32:
35:29:df:0c:59:4a:67:9b:c4:c8:d8:7b:d3:7a:cf:a6:3c:cc:
27:40:09:3f:a3:5a:b5:77:28:1e:40:a7:8e:af:77:03:b4:41:
9b:0b:22:4d:85:e3:25:9d:ee:60:68:e6:62:fe:0f:b0:70:f7:
90:20:2f:66:79:c1:6e:71:bc:4c:05:2e:17:12:d2:e9:47:31:
c5:c5:a1:11:53:68:47:f6:87:c5:8a:c3:65:6f:7f:3d:8b:16:
7d:e5:5d:40:f7:c1:e8:10:3e:95:1e:15:51:0d:c8:21:66:3d:
cb:24:2e:88:97:10:2f:0c:6b:79:06:f5:5a:a1:a3:a1:5e:79:
8c:1e:7f:48:7b:64:f1:44:2b:9b:46:07:94:c9:d1:fb:ac:fb:
8a:d8:4b:f3:96:1c:58:15:5c:f8:cf:73:78:65:98:d0:1b:7c:
81:d6:08:71:59:a9:99:ba:3f:28:e7:8b:92:d5:fa:b4:01:40:
a5:d6:85:00:7f:98:aa:e7:94:25:58:ee:91:56:29:f6:61:e9:
8f:36:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 02:29:56 2024 by rpki-client on console-ams.rpki-client.org