Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32332d3234203d3e20383334.roa
File: 3231332e3133392e36382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 3D6aQPw7/gZgwGXyz2KEbWzyG3/8m1Z5vzmZOOoepKQ=
Subject key identifier: 13:84:69:85:81:05:1B:F5:71:84:2D:FD:67:04:16:14:85:B1:34:50
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 351EF52D93B72CF79395E70519027CD48A5107BC
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32332d3234203d3e20383334.roa
Signing time: Sun 24 Dec 2023 00:00:07 +0000
ROA not before: Sat 23 Dec 2023 23:55:07 +0000
ROA not after: Sun 22 Dec 2024 00:00:07 +0000
asID: 834
IP address blocks: 213.139.68.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1e:f5:2d:93:b7:2c:f7:93:95:e7:05:19:02:7c:d4:8a:51:07:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Dec 23 23:55:07 2023 GMT
Not After : Dec 22 00:00:07 2024 GMT
Subject: CN=1384698581051BF571842DFD6704161485B13450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:13:ef:0a:83:40:68:67:4a:f5:c0:e5:0a:
d2:e2:48:84:27:7f:2e:93:82:23:a1:7c:a4:15:2a:
04:89:86:65:c1:0b:10:73:6c:fe:94:a4:7d:d4:62:
f4:22:5b:78:8a:72:49:29:d2:ce:9c:24:7f:fb:e4:
bc:16:c5:b5:2b:e6:83:5b:11:38:b6:64:90:bb:5b:
2d:0f:34:e2:7e:ab:3c:db:64:11:b6:9d:a1:bf:ab:
7e:4b:1a:50:66:cf:1f:bd:61:d6:22:f0:44:4b:ca:
92:b0:59:bd:d1:bf:96:eb:fc:97:0c:4f:85:ba:46:
fd:65:1c:c4:36:5c:ad:0b:26:93:ad:6d:d8:6e:ae:
96:00:a4:f5:ee:3b:97:7c:5c:db:e3:ba:21:09:9d:
8d:b0:ba:61:6a:70:47:65:3e:c0:94:cc:1e:72:54:
6b:71:4c:f4:ff:02:22:d3:b2:1b:ef:c2:65:70:9a:
1b:8f:50:4e:9b:be:9d:b1:23:11:cd:d0:9f:04:56:
50:00:db:a5:12:7a:b1:8e:ad:1c:da:83:2a:5a:fa:
34:02:49:58:27:a4:22:94:6f:e1:c0:ea:3b:f5:3c:
c2:e8:ef:ba:da:a0:0b:97:11:08:1b:09:f7:98:2b:
6f:c0:93:d3:94:95:8a:b7:c6:48:0e:04:f7:a5:17:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:84:69:85:81:05:1B:F5:71:84:2D:FD:67:04:16:14:85:B1:34:50
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.68.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:27:83:54:74:a2:a1:e4:15:02:f1:9f:85:3e:74:ac:51:f1:
a6:d3:74:df:25:1e:5b:b9:c7:ec:be:ee:c7:fc:b1:af:91:28:
fc:c1:56:d7:62:a7:1f:19:6f:0a:ac:6d:ef:5d:8e:55:02:48:
c8:a1:55:9e:c9:43:be:4f:01:a2:eb:be:36:3c:ca:0f:0d:51:
97:a9:b5:4e:d6:61:75:35:b7:8d:64:4f:0d:f9:03:ce:9e:86:
7e:f3:1c:9e:10:43:65:95:97:79:b0:37:3e:c3:a1:a4:b6:20:
ce:65:19:6c:c4:16:3e:a4:71:cf:13:20:ed:58:6a:2f:ac:ed:
3e:d4:ba:69:a4:c8:d2:71:97:c2:3b:d9:1a:36:eb:d8:05:7b:
cd:00:f1:e4:db:54:ce:42:4a:4f:5c:62:88:27:06:4d:f7:d6:
99:d2:6c:31:67:8e:d2:47:57:85:32:00:3d:03:13:3d:79:0e:
55:46:4f:58:d4:74:d9:f2:3a:e4:b2:e0:4d:1e:0c:69:d4:7a:
30:3b:00:07:f1:f3:33:76:fe:d3:c1:51:4a:f0:0e:a8:d6:b2:
85:e5:dd:70:1c:95:01:59:f1:18:a5:45:88:bb:9e:4d:80:60:
ba:89:b2:95:c6:81:73:30:fc:74:99:33:53:2f:9a:34:6b:8a:
d9:9d:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 11:41:28 2024 by rpki-client on console-fra.rpki-client.org