Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32342d3234203d3e203236303432.roa
File: 3231332e3133392e36382e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier: XS1R8pR0AFOXhmHeSfo76lLaAkUfpVsDxVmXain6jSs=
Subject key identifier: FD:3B:EC:89:42:03:45:8F:4D:AF:EF:6A:13:E6:19:75:03:4F:A9:BF
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 178D340930DBDC3A531E12C8D812B794B84B6AE4
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32342d3234203d3e203236303432.roa
Signing time: Fri 05 Jan 2024 08:31:00 +0000
ROA not before: Fri 05 Jan 2024 08:26:00 +0000
ROA not after: Fri 03 Jan 2025 08:31:00 +0000
asID: 26042
IP address blocks: 213.139.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8d:34:09:30:db:dc:3a:53:1e:12:c8:d8:12:b7:94:b8:4b:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 5 08:26:00 2024 GMT
Not After : Jan 3 08:31:00 2025 GMT
Subject: CN=FD3BEC894203458F4DAFEF6A13E61975034FA9BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:59:03:78:25:4e:dd:c8:e7:ad:7d:11:57:
fc:19:77:fa:1b:5d:a7:be:43:ef:79:62:3a:50:e9:
f5:8f:c7:ac:e3:83:36:86:75:6d:dc:67:2b:2f:23:
3e:0d:95:fd:f6:71:05:5b:2b:f0:a6:96:29:9c:6b:
1d:1d:43:b3:41:db:8b:d5:c3:3c:87:4f:d9:e0:58:
ce:f7:6d:ee:81:b6:0d:17:7c:39:11:62:b6:37:94:
34:8e:1d:71:6c:60:15:c2:a8:13:b6:f2:74:c4:92:
23:fb:75:7f:92:48:a4:ed:74:26:22:ab:4b:91:68:
0b:b2:a3:df:35:24:b7:21:58:74:71:cd:8a:bd:ee:
82:e0:92:d6:a1:b0:17:2e:18:b4:f2:47:47:03:d7:
83:21:71:61:00:7a:87:6d:3c:e8:f2:40:3b:e6:cb:
30:f4:eb:1b:2f:1d:c0:e4:d8:9f:57:10:e9:2e:b7:
73:f6:03:8c:07:45:18:7e:d1:de:5f:6e:b3:00:f7:
95:5b:9c:43:a1:c5:66:b5:d5:fa:a1:12:54:56:61:
b0:fe:b4:48:88:3c:cd:55:ff:0e:3c:eb:43:e7:41:
c5:ea:5c:82:ae:e3:3f:33:a9:d2:51:75:cf:af:f4:
2c:ab:73:30:e6:50:69:e1:aa:4f:e8:99:80:a5:0c:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3B:EC:89:42:03:45:8F:4D:AF:EF:6A:13:E6:19:75:03:4F:A9:BF
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32342d3234203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.68.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1d:51:fb:4e:31:b5:c9:6f:d4:d5:40:c9:46:c5:be:87:28:
73:1e:5e:05:ad:12:cd:12:4a:ff:f5:74:63:cd:e6:d9:6f:ae:
0b:be:da:ce:58:5a:34:0f:0b:f5:1d:74:5c:39:aa:b5:30:72:
10:cd:5c:81:29:b3:f4:93:15:f0:e2:1b:2f:66:02:6c:1c:30:
d6:99:c3:a1:ad:23:5a:ba:6b:4e:49:dd:51:86:76:ed:e7:e0:
ad:f5:6b:34:b6:14:0e:74:22:93:da:8f:01:27:c5:1f:80:0e:
80:70:2f:59:3e:1f:18:a0:ae:ad:7e:9c:62:47:66:59:07:f7:
6c:2d:79:ec:ca:70:7a:a9:7f:37:ae:61:b5:63:0e:35:81:0f:
50:d5:98:54:51:d8:bf:2f:9e:76:dd:ef:2e:bf:e7:6c:d1:af:
3e:2a:f8:9f:55:c5:39:be:67:1f:46:b2:21:e6:fc:6e:b5:7b:
4b:9f:8e:af:22:40:f7:a9:9e:c5:66:01:c3:0e:c3:31:7a:40:
2f:44:e1:ba:f3:f3:32:de:d5:1d:64:a1:3b:6d:36:25:cc:f9:
f9:fb:fe:2b:8f:2b:e8:1c:ec:9d:a7:b9:a6:9a:00:ab:e6:e3:
d4:a8:62:ed:1b:50:68:30:39:54:03:7a:97:d8:c0:e3:3f:81:
21:7c:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 02:46:40 2024 by rpki-client on console-ams.rpki-client.org