Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32332d3234203d3e203632323430.roa
File: 3231332e3133392e36382e302f32332d3234203d3e203632323430.roa (raw, json)
Hash identifier: 9PjvTfhOQLk7yL+oc3zeQMss9CNRrxPsCLQ7SRDSwXw=
Subject key identifier: A9:C7:5F:80:1D:11:17:B9:2A:60:99:7E:CC:12:E2:77:49:25:3E:A6
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 73D88627E13490456520E4D7B3C60BF2032FF731
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32332d3234203d3e203632323430.roa
Signing time: Wed 25 Jan 2023 13:02:15 +0000
ROA not before: Wed 25 Jan 2023 12:57:15 +0000
ROA not after: Wed 24 Jan 2024 13:02:15 +0000
asID: 62240
IP address blocks: 213.139.68.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d8:86:27:e1:34:90:45:65:20:e4:d7:b3:c6:0b:f2:03:2f:f7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 25 12:57:15 2023 GMT
Not After : Jan 24 13:02:15 2024 GMT
Subject: CN=A9C75F801D1117B92A60997ECC12E27749253EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:9a:56:60:f5:a6:7a:c1:10:50:d2:cc:c0:
6f:17:ec:9d:3c:e1:8a:6c:3b:76:f1:3f:e2:3f:d5:
9a:cd:ec:fc:23:1d:68:c2:b0:d6:b7:74:4c:34:6b:
0d:65:27:ea:0f:1a:81:f3:61:38:19:6f:ab:63:33:
35:ee:83:a4:fe:b7:4e:19:78:41:4b:30:b4:c0:15:
54:36:17:62:85:2f:ed:4e:88:48:85:e5:0e:27:31:
4e:81:74:f6:4e:c9:d8:99:2f:6a:01:e1:a5:a4:0d:
44:16:f0:a1:5a:5e:e9:1c:ee:be:95:5f:c6:a1:c1:
a0:07:6b:0e:d2:5a:61:84:47:f4:f4:cb:84:31:a9:
0f:1e:5b:73:c5:2d:03:ea:a6:a0:b4:11:ce:24:cd:
b3:a0:66:d5:7c:1c:75:ca:6a:83:70:1b:34:8e:d4:
91:de:73:c3:71:16:61:c4:a5:17:2b:39:39:a8:09:
4d:3f:d3:7c:a0:79:38:aa:2a:b2:fb:03:20:7c:cc:
09:5e:dc:b1:d2:37:8e:76:b1:f8:65:49:cf:d4:21:
47:b3:df:32:1a:78:c2:cc:33:f4:79:1c:fb:55:71:
d3:1e:46:6d:95:64:6a:52:6f:ce:00:77:05:d0:b5:
d5:13:67:70:b9:28:31:cb:c2:8e:e9:02:99:94:6b:
a2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:5F:80:1D:11:17:B9:2A:60:99:7E:CC:12:E2:77:49:25:3E:A6
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32332d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.68.0/23
Signature Algorithm: sha256WithRSAEncryption
58:4d:4b:a7:49:5d:85:56:a1:c0:f3:53:df:90:c1:9b:58:b3:
21:30:02:48:7c:44:63:af:44:27:75:22:05:50:32:a8:0c:90:
c0:42:62:9c:36:bd:0c:60:82:51:85:c6:8f:bf:61:68:36:4b:
5c:c7:34:da:3c:cb:f5:7d:fd:ce:4f:b4:d3:8c:50:d2:7f:dc:
95:e1:53:51:e7:92:d4:af:22:17:a5:f4:a9:af:5a:91:d1:de:
cf:c5:87:dc:fe:23:35:ff:02:72:1d:5d:df:d0:81:6e:8c:5a:
3a:d9:78:c1:23:0d:27:16:9a:80:04:0c:fd:7e:5d:fd:eb:2c:
9f:cd:10:c1:70:e8:38:ae:20:88:cd:3f:c4:11:6a:a3:74:53:
fe:f3:49:2e:ef:b1:09:2a:0b:d0:c5:8d:b7:da:13:24:e0:98:
63:df:2a:fc:6b:29:eb:ca:47:af:2e:79:c1:5f:3b:ba:ab:8c:
b3:ea:83:d8:b7:2e:21:b9:d1:47:52:be:4c:10:ef:2f:16:83:
9c:09:62:4f:06:ca:b9:28:aa:ea:ae:4d:69:75:cb:74:4b:a4:
02:18:50:15:57:ee:32:32:de:6d:56:f6:f9:cb:4c:b8:66:af:
9d:6e:33:40:45:a3:eb:90:5a:6c:d9:b8:d9:b8:b3:fe:ff:20:
d5:42:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 00:52:33 2023 by rpki-client on console-ams.rpki-client.org