Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20323132393132.roa
File: 3231332e3133392e36362e302f32342d3234203d3e20323132393132.roa (raw, json)
Hash identifier: iV6wlbE4U5q9HKMWDZeVryJJ9ondgOcy5lm6Q1VcV1Y=
Subject key identifier: BB:47:DC:D0:AB:72:C0:D4:59:1B:FD:A8:84:1F:A4:1B:2D:1F:76:DF
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 24AE7BB3080F0881C9DBD2A706DA3913E4013AAF
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20323132393132.roa
Signing time: Thu 25 Jul 2024 20:39:57 +0000
ROA not before: Thu 25 Jul 2024 20:34:57 +0000
ROA not after: Thu 24 Jul 2025 20:39:57 +0000
asID: 212912
IP address blocks: 213.139.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 16:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ae:7b:b3:08:0f:08:81:c9:db:d2:a7:06:da:39:13:e4:01:3a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jul 25 20:34:57 2024 GMT
Not After : Jul 24 20:39:57 2025 GMT
Subject: CN=BB47DCD0AB72C0D4591BFDA8841FA41B2D1F76DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:f2:4b:62:18:1e:16:5c:bb:b5:31:e7:6b:
a1:6a:2d:8f:60:09:dc:05:b4:6d:1a:c5:d2:69:c1:
df:5d:f9:38:76:cb:38:0b:c3:1a:b3:8c:8f:2e:14:
ff:49:30:6f:e9:fa:11:bf:67:75:3f:3f:43:23:c1:
e7:85:8e:82:54:b0:e4:96:24:9d:82:b2:61:29:a1:
8d:04:2a:b1:bd:77:1d:ce:da:da:c4:b2:f5:ff:63:
ca:47:54:90:48:ef:45:79:89:77:fe:31:d8:38:21:
62:0f:73:ee:3d:e5:e8:49:93:14:0c:f0:85:46:de:
8d:96:d0:b1:7a:34:9b:57:64:77:88:fd:3e:16:c8:
f3:f7:bb:9c:51:fb:46:37:09:32:f4:11:e5:cb:c2:
d0:c8:4c:54:fe:8b:69:03:f5:ed:53:7e:61:c8:d4:
2a:b4:42:e0:e6:d8:dc:d8:25:d7:b1:be:65:b6:2b:
c1:cd:d7:97:91:27:7b:07:aa:ce:7b:9d:20:92:d2:
f2:2b:d5:7e:0c:fc:e9:e2:f2:1a:35:af:5a:50:d1:
18:28:d8:39:a0:e2:b7:09:38:8d:f8:1c:12:14:6d:
33:f3:f0:64:1f:99:9c:05:fc:00:33:68:50:33:6a:
20:0c:fc:c3:af:33:ff:c5:36:38:7f:9a:8f:df:78:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:DC:D0:AB:72:C0:D4:59:1B:FD:A8:84:1F:A4:1B:2D:1F:76:DF
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20323132393132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:87:29:10:21:2a:b0:92:89:4c:a2:21:10:f1:9d:ff:0c:68:
50:03:63:3e:5d:fe:86:81:e0:31:67:08:4c:93:90:8e:cd:3d:
15:12:5a:fa:b4:79:82:21:71:64:a6:7a:b9:72:e8:04:60:a9:
15:fe:8e:14:72:8f:fd:33:0c:71:76:fd:63:9f:29:e5:72:24:
4a:2e:65:59:84:2a:f0:5e:1f:07:f4:3f:ca:1c:9c:03:09:0c:
06:b0:ee:7b:12:2a:0c:4a:49:df:ce:7d:d0:ce:a2:65:86:10:
7e:dc:e1:12:d0:c1:a1:87:4f:98:e5:79:5e:b8:c9:81:5c:2d:
ce:b9:79:36:1d:ab:08:84:0a:41:05:5f:f2:6b:9a:21:1d:bd:
60:9f:9b:09:d1:ce:b3:b3:42:54:13:49:f5:1d:91:e8:c4:49:
ae:1a:f4:67:0a:d0:c4:f4:78:48:db:0b:5a:ed:ba:fe:21:39:
f5:9c:b8:4b:85:e1:4b:88:61:f8:db:e3:93:f9:75:b9:1d:15:
da:3a:31:f0:fa:b1:c4:ca:7f:ab:f9:0b:d1:c1:9c:c1:85:42:
74:40:f3:6e:a7:e9:05:8d:ab:d8:67:39:0c:d5:27:c3:70:b9:
b9:ec:ba:cd:d8:1b:36:ef:63:d8:6c:22:b1:55:7a:d5:8a:e4:
48:24:7f:4f
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 16 22:26:24 2024 by rpki-client on console-ams.rpki-client.org