Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e36382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jEa3A4ELH2iu8WlFXvz++edZXaA3ikEmA4nw6EOVKI0=
Subject key identifier: 3C:83:A3:1E:6D:B5:69:4B:DD:10:7D:B8:3C:1C:59:D4:B1:B7:8E:BD
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 422602EC308704104A9D7F469CCC99EF196260FD
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32342d3234203d3e20383334.roa
Signing time: Mon 05 Feb 2024 00:00:07 +0000
ROA not before: Sun 04 Feb 2024 23:55:07 +0000
ROA not after: Mon 03 Feb 2025 00:00:07 +0000
asID: 834
IP address blocks: 213.139.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 11:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:26:02:ec:30:87:04:10:4a:9d:7f:46:9c:cc:99:ef:19:62:60:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 4 23:55:07 2024 GMT
Not After : Feb 3 00:00:07 2025 GMT
Subject: CN=3C83A31E6DB5694BDD107DB83C1C59D4B1B78EBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:6d:1e:39:dd:44:f8:f4:47:66:ed:c8:d1:
dd:85:bd:bc:de:2b:ab:4b:b5:6a:20:1e:19:53:4a:
cd:b6:a7:67:f5:86:6a:66:8e:ba:61:d4:7f:85:98:
a6:e6:73:f9:c8:3a:c6:e4:de:01:b5:26:95:c4:02:
f9:7a:b6:21:34:a6:8d:5d:88:e8:2f:c6:94:32:51:
21:f7:8c:7e:23:61:1b:5e:c5:e7:d4:b2:34:87:07:
85:50:a0:de:a9:c2:b0:39:48:ae:7f:28:d0:f5:f3:
be:e7:91:5a:fd:87:b0:40:d4:ce:0e:4e:4b:d0:f8:
17:cf:6a:26:3a:1a:78:a9:48:10:b1:d8:5f:71:90:
b1:d9:84:2e:04:b9:e7:4e:b7:50:97:41:f4:cf:58:
6c:f2:a0:de:41:5e:1e:2d:ac:bd:4c:60:ca:28:71:
46:ea:f9:00:39:ad:b4:e9:1f:ed:75:c9:04:28:e7:
6a:bc:56:e4:d3:dc:60:f7:c2:a2:99:ef:f0:cb:4b:
44:14:41:42:7a:e5:c2:bf:e1:29:21:3c:71:5d:d9:
e6:ca:9a:77:dc:e7:1c:64:fe:79:b2:8c:d3:da:3d:
64:8b:25:5f:8a:7a:93:ea:70:d1:68:dc:f0:23:62:
0e:8a:a8:ee:96:28:0d:ae:6b:31:0a:af:d0:1b:8a:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:83:A3:1E:6D:B5:69:4B:DD:10:7D:B8:3C:1C:59:D4:B1:B7:8E:BD
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.68.0/24
Signature Algorithm: sha256WithRSAEncryption
10:de:33:ba:3b:46:70:f7:8b:8d:2e:43:28:08:b6:be:9e:be:
98:a2:b7:3d:ea:d8:1d:f1:1f:e1:3a:da:eb:76:46:1e:77:74:
d2:b8:ab:02:28:66:06:21:54:80:64:e3:31:e9:09:19:8c:99:
56:3f:e5:5e:47:0a:8e:05:17:57:d2:6d:d3:fa:38:ee:79:b8:
c4:3d:c7:eb:55:97:31:06:a9:e5:4e:bc:4b:ab:e9:e5:e3:df:
68:b9:bc:cc:c0:83:a9:3c:53:0a:69:16:94:25:4b:d4:66:67:
19:27:62:29:1e:92:6b:46:72:1b:e9:98:f9:63:77:ab:e4:b0:
b6:07:4f:70:df:0f:1d:b0:df:aa:10:6b:bb:6b:57:e0:f9:70:
e4:e3:d3:15:d3:07:c4:e1:43:ff:37:0e:5f:87:6a:89:1d:11:
90:ac:d5:d8:94:40:40:0c:77:21:19:77:7d:67:49:09:b8:ec:
cd:2c:00:db:cc:1e:cb:2f:ff:72:e0:c4:77:25:34:d3:41:fa:
c0:ef:d5:52:95:66:6b:27:d1:07:26:91:f1:33:56:42:4c:54:
98:11:38:09:d4:b4:8c:ec:f8:47:19:b8:50:b6:79:93:47:d6:
3e:0b:59:95:97:0e:0b:ce:90:ba:78:7d:31:16:d5:d7:af:37:
28:e6:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 15:04:19 2024 by rpki-client on console-ams.rpki-client.org