Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20313937383432.roa
File: 3231332e3133392e36392e302f32342d3234203d3e20313937383432.roa (raw, json)
Hash identifier: RAFcBm/RPM4t7wvuUsffA/j/XYamftkXHdGz4lSwENs=
Subject key identifier: C1:8F:53:8F:3A:DF:D8:D4:60:6A:75:1B:68:7C:CA:E9:66:CE:15:58
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 4169E66D2F314BEAD8384664FE82ACBA946AFD9C
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20313937383432.roa
Signing time: Wed 17 Jan 2024 19:46:33 +0000
ROA not before: Wed 17 Jan 2024 19:41:33 +0000
ROA not after: Wed 15 Jan 2025 19:46:33 +0000
asID: 197842
IP address blocks: 213.139.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 10:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:69:e6:6d:2f:31:4b:ea:d8:38:46:64:fe:82:ac:ba:94:6a:fd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 17 19:41:33 2024 GMT
Not After : Jan 15 19:46:33 2025 GMT
Subject: CN=C18F538F3ADFD8D4606A751B687CCAE966CE1558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:51:ad:d6:0e:a4:a9:0e:a4:cc:d8:77:26:
3a:61:64:da:32:21:4a:39:53:5c:6b:05:e3:c7:9d:
f7:8c:51:d2:79:e0:32:11:b8:3f:e7:a6:ef:3a:a3:
39:8a:7a:ec:41:4e:90:7c:f1:b2:72:06:c2:2d:5c:
71:9c:96:ce:7d:e0:0c:66:d1:30:b6:c4:ed:26:b0:
52:ad:70:1f:2f:e7:56:12:24:fc:a0:9c:ca:59:a4:
87:14:e4:0a:93:53:e1:f6:8f:dd:62:2b:a1:74:97:
73:a4:71:a0:4d:1d:f1:bd:70:2a:bf:2c:ad:1e:08:
e5:12:2a:c3:0d:b1:7f:b1:1b:e7:ac:d0:51:a9:45:
10:5d:0f:4e:1d:70:44:1f:20:a7:e6:c2:76:b3:a0:
c0:87:d2:47:9e:a8:a0:5e:42:aa:af:5b:ca:cf:cd:
2f:11:80:99:1a:dc:22:f4:80:d0:e2:5e:b0:2f:6f:
ed:80:95:a3:d5:e1:2e:93:46:0f:b1:96:b2:17:a6:
9a:72:c0:1a:5e:d2:92:49:5e:5a:34:82:14:dd:85:
46:c4:4d:41:b3:2c:fa:72:ab:ab:04:8b:ac:bc:3d:
f0:95:26:34:b3:14:a5:c8:3b:39:ac:98:e2:f5:52:
e9:b8:b6:c5:cf:d1:37:28:8d:e4:1f:54:02:45:d7:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:53:8F:3A:DF:D8:D4:60:6A:75:1B:68:7C:CA:E9:66:CE:15:58
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20313937383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:cd:40:5a:0b:00:8f:62:84:f1:67:8f:5c:26:d4:1f:db:e0:
c6:87:86:14:3e:2a:8f:c2:44:b0:af:d0:1a:f9:d5:da:d5:d4:
fb:8f:e2:6f:07:8e:4d:40:36:ef:e5:8b:07:48:b5:fc:a4:1b:
8e:a9:92:04:a9:37:9d:b7:e1:5e:ca:57:2f:e4:ef:4c:c2:66:
24:7d:bf:f5:d9:f3:77:2d:4b:b0:4f:34:7b:71:02:58:c9:53:
bd:1f:cb:8a:5d:5d:4b:67:e7:21:14:83:04:f4:19:3b:c9:9a:
36:e3:d0:15:0c:43:01:29:8d:ad:ee:a3:66:c7:3f:08:b2:e0:
9e:bc:42:72:1a:50:40:b5:e0:63:c2:43:69:bb:33:7f:d3:62:
8a:8b:74:32:69:95:cd:d8:d4:dc:ed:72:c1:e9:af:d8:6d:4b:
61:83:cc:46:d5:97:da:a2:06:96:25:0b:dc:5e:92:fc:f9:5d:
8a:f1:8a:95:a2:37:2e:9b:00:dd:f1:3e:ed:5e:21:eb:c1:23:
ae:15:25:b6:52:d7:88:e4:7f:f0:ea:6b:c5:db:b7:ee:3f:bc:
24:4f:06:e5:03:11:b2:00:2e:9c:fe:79:9e:cd:d7:92:b4:8e:
77:cd:32:15:27:0e:fe:b9:97:4f:e5:2b:5c:b2:26:02:69:39:
13:2b:e5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 14:46:22 2024 by rpki-client on console-fra.rpki-client.org