Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e2038313030.roa
File: 3231332e3133392e36392e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: H10n23TJyQRnwBPUZvhu1lFdcd+p4me2ztsm7FE0E1E=
Subject key identifier: F5:67:A3:15:F1:EB:60:F1:91:A4:0B:78:54:0E:13:57:8A:EA:CC:AB
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 71032F911EAD50DDCCB43BD1EC25898C01273DEB
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e2038313030.roa
Signing time: Mon 19 Feb 2024 14:06:09 +0000
ROA not before: Mon 19 Feb 2024 14:01:09 +0000
ROA not after: Mon 17 Feb 2025 14:06:09 +0000
asID: 8100
IP address blocks: 213.139.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 13:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:03:2f:91:1e:ad:50:dd:cc:b4:3b:d1:ec:25:89:8c:01:27:3d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 19 14:01:09 2024 GMT
Not After : Feb 17 14:06:09 2025 GMT
Subject: CN=F567A315F1EB60F191A40B78540E13578AEACCAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:57:92:26:b5:65:92:db:66:9f:b2:60:e2:
10:dc:0f:47:2a:84:aa:d7:ed:d4:51:c9:3c:6b:0b:
ea:20:cc:58:e0:8c:db:ea:b7:e3:d0:71:a5:5d:c4:
d0:c5:c5:ba:4e:40:1e:e6:fe:7a:6f:90:99:ed:fa:
23:24:e5:29:3a:fd:de:0a:59:00:b1:c3:75:e2:5e:
9e:c8:b1:cb:04:89:4c:6f:91:8b:e8:3d:09:93:f1:
de:ec:dc:62:52:6f:6b:b2:f2:78:4b:4d:43:55:f0:
36:b3:51:a3:2f:e5:39:97:52:70:48:8e:bf:4a:04:
67:b3:64:a0:17:69:e4:5f:39:81:b4:89:84:14:ce:
3d:87:e9:5b:2c:0c:88:f0:97:dd:5c:66:7c:73:52:
d9:e3:03:b3:93:08:1f:a5:eb:ad:d1:08:67:3b:2a:
b6:b8:82:a4:83:74:17:2e:82:46:a1:e0:68:3c:ba:
2f:99:76:17:01:d3:ae:27:7a:48:4f:76:95:80:e0:
53:4c:de:50:70:e3:c2:7a:a7:34:e4:54:e2:06:23:
64:38:54:09:c2:6c:7d:d3:14:59:95:a8:bb:16:ae:
53:29:eb:31:d9:15:9a:0e:94:46:af:b6:a3:be:8f:
28:dc:9e:b4:79:d8:78:db:e1:be:c0:0b:3b:1f:df:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:A3:15:F1:EB:60:F1:91:A4:0B:78:54:0E:13:57:8A:EA:CC:AB
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.69.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0b:62:54:44:16:69:b8:66:4d:c8:ed:ac:5c:0b:0b:87:54:
1e:99:b4:5e:cb:f8:23:02:d3:1b:12:f8:ae:23:fa:a4:f2:00:
2f:97:ef:3b:5e:3d:60:16:e0:7d:db:7d:e4:96:eb:c6:0e:2c:
6f:1e:77:d3:79:cb:28:56:59:e1:f1:c7:28:76:2e:07:83:a0:
59:eb:69:08:41:fe:ed:29:42:0a:13:53:c2:7b:1b:b2:cc:8d:
e3:95:23:a4:33:8a:28:bb:52:73:44:15:d0:79:d9:ca:ec:fd:
cb:5b:c8:b5:86:bd:d1:27:3d:8a:6e:fe:65:db:ae:c0:34:69:
02:28:08:e4:fb:e0:8c:89:d4:88:98:f0:25:8e:64:fa:10:08:
3e:35:7a:1f:54:2a:14:2d:d7:38:07:d4:36:b7:8c:9f:ac:22:
bb:8b:cc:e5:71:45:be:cf:43:5b:e9:14:db:0f:d4:c2:e6:dc:
a3:82:89:78:2f:09:e5:ad:af:3e:7b:68:6d:1c:b3:58:8e:99:
d4:7f:d6:6f:3f:2f:cc:44:d7:d8:99:d1:1e:b6:d6:0c:65:4a:
c7:9e:9c:c2:ec:7f:02:53:e3:5b:b2:78:e9:f0:f0:76:78:09:
dc:f7:c3:83:a3:8c:0a:25:dc:5e:5b:05:9c:ad:0a:1d:6e:40:
c7:66:b8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 18:17:04 2024 by rpki-client on console-ams.rpki-client.org