Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36372e302f32342d3234203d3e20323034383433.roa
File: 3231332e3133392e36372e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: BBC6fU1ZHhVVzwtLIaInOUM4PV3cAaTVESA/cO99m5c=
Subject key identifier: A5:E5:9E:95:8A:32:AB:87:92:04:40:FC:5B:EF:04:FC:4A:9E:BD:26
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 7EC0E883057005D891E5DCC33E35957A99021CC8
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36372e302f32342d3234203d3e20323034383433.roa
Signing time: Mon 03 Jul 2023 18:08:20 +0000
ROA not before: Mon 03 Jul 2023 18:03:20 +0000
ROA not after: Mon 01 Jul 2024 18:08:20 +0000
asID: 204843
IP address blocks: 213.139.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c0:e8:83:05:70:05:d8:91:e5:dc:c3:3e:35:95:7a:99:02:1c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jul 3 18:03:20 2023 GMT
Not After : Jul 1 18:08:20 2024 GMT
Subject: CN=A5E59E958A32AB87920440FC5BEF04FC4A9EBD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:6a:d1:60:7f:8e:49:07:47:56:09:aa:b4:
da:80:ba:af:90:fd:ec:73:d5:f7:29:c3:e5:8c:6f:
06:ec:1f:5a:26:3e:c3:5d:72:67:01:a8:d7:d6:fc:
8c:d2:35:4c:65:bb:5a:45:dd:2f:f0:98:5d:cb:a7:
5f:16:1f:3a:0f:9a:4a:3a:a6:ce:bb:21:c9:cd:90:
2b:b1:e1:d4:1f:3b:ba:01:d6:27:4c:15:b3:b8:50:
8e:9f:26:f6:84:38:a3:d0:63:2e:f6:b2:31:b3:b4:
ab:0d:51:62:64:97:ec:1d:4d:7a:1c:e1:62:3b:e1:
d8:96:98:2c:d0:ba:7b:c3:2a:45:8a:61:2a:94:ec:
a2:a3:c1:6e:b4:fb:13:f6:0c:23:b5:e3:f7:c8:42:
b4:8c:77:41:88:7f:39:cb:bd:1e:96:77:f1:a6:41:
40:95:49:5a:90:6f:76:cc:3a:84:9e:ce:10:84:0b:
e8:1e:3a:6b:8e:ea:9a:db:98:90:0a:7c:41:72:ad:
bc:b8:07:2e:d5:8b:04:ae:5e:74:f0:9b:26:00:40:
76:22:f7:33:1c:ce:32:f7:b7:bf:b0:59:ff:dd:8a:
21:a2:9e:a9:9a:5e:30:45:f7:0d:82:f7:c8:93:9e:
0e:03:f6:28:6d:b6:41:1c:5d:1b:86:e9:65:87:f3:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E5:9E:95:8A:32:AB:87:92:04:40:FC:5B:EF:04:FC:4A:9E:BD:26
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36372e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.67.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:33:55:4e:6a:53:60:97:57:78:15:69:e3:e3:01:f9:ea:e4:
82:08:29:2e:21:df:6b:91:3c:0d:42:60:57:64:fd:3b:91:2e:
90:bc:f2:1c:4f:ec:75:88:b4:db:5e:23:8e:37:a3:6f:5f:1a:
63:41:ed:0d:7f:b7:7e:5a:b0:5c:1e:57:ad:1a:b8:6f:38:ce:
74:4f:ab:c5:67:01:73:8a:b8:03:04:d0:ad:50:ca:b2:69:11:
9d:c5:f2:47:86:3d:39:2c:e4:ca:e4:6c:0b:b6:d7:85:ab:ce:
b9:cd:8d:61:7f:7e:ca:d5:2a:11:d4:0b:87:0c:b2:af:d5:de:
53:36:7a:9a:97:bb:25:ab:37:db:0f:83:d0:6a:8d:bc:69:67:
e8:c6:b8:f2:6f:b4:f0:17:92:c1:93:6b:21:8b:7d:f6:66:65:
e5:7d:0a:9f:c6:27:29:51:67:13:71:41:33:01:d9:30:a8:f7:
9e:b6:54:0a:b5:1e:55:88:0b:50:db:5a:be:db:95:9c:d9:eb:
4f:10:e4:50:05:13:23:92:e3:ad:c5:c0:7a:29:53:3e:73:81:
3d:f1:ec:5d:b1:ff:42:d7:c6:d5:d0:3e:8f:43:fc:ac:15:da:
1f:b2:0a:b6:e7:22:cb:8f:73:a0:52:7b:96:89:fb:7c:5b:c8:
5f:42:af:5c
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 4 11:31:57 2023 by rpki-client on console-fra.rpki-client.org