Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20323135393331.roa
File: 3231332e3133392e36362e302f32342d3234203d3e20323135393331.roa (raw, json)
Hash identifier: lDMl5bLFqrsuERwpH1LSFcKITT2bzfXJhOGvpxIy634=
Subject key identifier: 92:EB:B9:0C:40:9D:1E:5E:89:0E:DF:24:C9:E3:C8:67:34:1A:2E:A3
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 68D44460A4DDEBA0F7C06E8036A214ACB5816C99
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20323135393331.roa
Signing time: Mon 16 Sep 2024 16:41:54 +0000
ROA not before: Mon 16 Sep 2024 16:36:54 +0000
ROA not after: Mon 15 Sep 2025 16:41:54 +0000
asID: 215931
IP address blocks: 213.139.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 10:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d4:44:60:a4:dd:eb:a0:f7:c0:6e:80:36:a2:14:ac:b5:81:6c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 16 16:36:54 2024 GMT
Not After : Sep 15 16:41:54 2025 GMT
Subject: CN=92EBB90C409D1E5E890EDF24C9E3C867341A2EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:cd:64:d7:f0:44:0f:4c:8c:b5:f7:f0:41:
ec:79:fc:33:a8:b1:af:cc:40:64:0e:f4:85:0c:4e:
b1:03:25:34:54:8d:c4:fe:d9:df:ba:52:56:f1:a0:
99:19:4b:f1:d0:2c:7e:49:48:90:09:10:c5:a7:ac:
87:c2:ed:70:56:2d:f1:90:54:76:d1:f4:77:2c:02:
cb:6a:ff:68:9e:4c:ed:e2:10:42:bc:0e:03:7a:25:
2c:da:a1:2a:c5:1b:75:1e:db:9b:ac:92:b4:dd:66:
b6:17:c4:9a:63:34:16:d8:e3:3a:34:62:40:fb:10:
1c:66:c3:e8:79:4e:9c:9e:50:03:52:39:24:e3:07:
50:e5:df:26:9c:3e:52:0b:96:e1:f0:31:b6:c7:03:
df:2f:79:40:a5:31:81:29:dd:fd:d1:45:4f:54:87:
34:d7:a9:fe:b7:3c:31:de:d6:8c:ad:28:ce:2c:8b:
cb:bc:b7:56:f6:3d:ab:1e:8b:81:0d:0d:9c:8d:b9:
c2:39:37:d3:73:ea:53:b8:8d:8c:48:55:08:e5:24:
ab:fc:df:cc:77:17:e1:25:1c:b1:78:2e:ed:16:74:
a9:6e:ed:39:76:2e:1a:4b:64:62:c0:06:62:40:97:
1f:fe:9f:29:d8:d7:7a:6a:de:38:55:cd:00:2b:5b:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:B9:0C:40:9D:1E:5E:89:0E:DF:24:C9:E3:C8:67:34:1A:2E:A3
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20323135393331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.66.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4c:9d:f4:93:13:01:ce:b2:68:b6:df:ba:23:b9:15:68:85:
a5:ad:79:2a:67:bd:d1:8b:ef:d9:34:71:61:85:d0:0c:98:e7:
73:1b:61:d0:60:4a:8f:6f:a1:12:d1:65:8c:96:ad:33:0d:96:
a9:27:c8:a1:de:08:07:0e:d6:ce:3b:21:e0:71:84:b8:f0:4b:
2f:89:d5:fb:b7:d5:cc:58:63:67:3a:e4:f9:9d:75:88:13:01:
a7:b2:df:45:07:6d:1f:a9:92:81:31:0c:96:37:06:57:d1:32:
8e:b4:9c:91:72:95:1d:f6:df:34:c5:c2:17:e3:ea:d0:19:5c:
58:86:4d:b0:a6:11:b2:ec:3a:23:3e:cf:d9:2d:d8:d2:e8:b5:
94:a3:54:c4:f5:c1:43:c6:45:66:bf:63:27:55:f9:61:2c:db:
4b:76:41:3b:13:3f:a1:ad:7a:64:bd:7e:a3:f3:9f:bf:80:09:
91:e1:27:94:b8:c9:b9:c9:f5:5a:6b:72:c7:4e:22:be:ec:6c:
59:39:f9:f9:6a:d5:fb:88:d9:98:39:4a:0e:89:6f:86:0d:bd:
67:41:fc:c2:05:28:59:e3:0f:e8:5e:dd:74:6d:11:54:a5:d8:
dc:e7:34:c0:b3:f3:f3:e0:22:b7:40:aa:0b:45:d2:dd:ff:8a:
4e:ac:bf:4b
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 25 12:38:02 2024 by rpki-client on console-ams.rpki-client.org