Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rj60+6zLKmc210K+vIdKPH0V+iBWHSjpH8mz/HmDT5Y=
Subject key identifier: 89:90:2A:B6:E0:AE:76:51:FD:5B:7B:E3:B0:4B:3A:A0:80:61:BF:5C
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 48BC960F34B03135D636DDD133666C07077003B7
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20383334.roa
Signing time: Fri 02 Feb 2024 10:04:06 +0000
ROA not before: Fri 02 Feb 2024 09:59:06 +0000
ROA not after: Fri 31 Jan 2025 10:04:06 +0000
asID: 834
IP address blocks: 213.139.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 14:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:bc:96:0f:34:b0:31:35:d6:36:dd:d1:33:66:6c:07:07:70:03:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 2 09:59:06 2024 GMT
Not After : Jan 31 10:04:06 2025 GMT
Subject: CN=89902AB6E0AE7651FD5B7BE3B04B3AA08061BF5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:b9:3e:1c:e6:ab:ef:f9:27:e1:df:e7:ee:
89:22:16:bb:b9:ba:9c:97:79:1b:5a:d7:ec:11:92:
6b:98:a9:af:59:4c:07:e7:9b:e3:8c:26:21:5d:7a:
89:ed:4b:10:51:5d:0c:a5:9d:5c:34:26:b3:57:01:
78:4b:68:64:f2:da:9e:7e:41:51:ad:6f:f6:36:3e:
42:53:03:62:8d:5d:f3:23:45:09:57:f1:94:95:e7:
a5:c7:b8:56:60:f4:3e:b5:d8:d3:a8:29:e2:bb:08:
75:a0:92:16:4c:c7:3d:48:10:65:85:5a:1b:e0:89:
ff:1c:ae:83:07:87:66:18:c2:ea:4b:6e:c2:4f:10:
c1:fa:0d:76:6b:53:72:bd:d6:ff:62:27:ac:19:08:
20:d5:52:ff:41:41:da:5b:0b:81:f1:f5:51:10:60:
cb:ba:15:86:d0:c4:22:c1:56:17:a6:59:d4:00:c8:
47:e9:07:6b:a5:64:ee:94:5d:f1:2a:a4:7f:e4:12:
60:1a:29:9a:93:89:12:08:90:df:fd:85:fa:85:b0:
20:f7:74:a9:52:6d:62:df:64:9a:67:7e:ce:1b:4a:
e6:38:87:67:04:e9:d8:11:11:84:d2:ea:37:3f:68:
97:38:e2:83:86:15:52:8b:45:85:4e:c7:1b:b5:51:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:90:2A:B6:E0:AE:76:51:FD:5B:7B:E3:B0:4B:3A:A0:80:61:BF:5C
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:18:1c:50:9f:3a:3a:ca:26:1c:1f:a7:7e:3d:cd:80:c4:3d:
e9:ed:e2:76:dc:c8:87:a1:d6:af:93:70:f2:46:98:fe:4b:6a:
06:38:38:39:c3:90:14:df:c0:a0:6a:53:b9:0d:a3:6a:f3:af:
fc:c9:6b:98:7d:0d:20:21:c8:a6:61:28:d6:4c:56:21:32:90:
9b:b7:5b:fe:e0:fa:3c:38:51:7f:4a:0c:70:47:20:0f:c5:fe:
8a:f5:80:d2:f8:e5:67:f9:4d:a1:71:7b:fb:0a:3e:fd:a1:d9:
88:2f:89:aa:07:93:45:86:cb:10:82:3d:fa:b5:53:8e:02:00:
f9:27:33:6c:5c:4e:74:f4:22:ee:87:e1:9b:f8:a0:50:41:c2:
dd:28:3e:74:07:97:e5:a1:03:96:d4:61:73:06:ff:82:c6:02:
53:aa:4c:91:23:e9:f3:75:2f:ec:2b:32:3f:52:59:a4:ab:8b:
de:3a:a1:b5:a5:4e:a2:8c:bb:64:69:b6:aa:8a:f7:60:31:57:
ff:86:3f:01:1b:b9:ea:85:3a:ae:f2:95:b9:0c:02:55:1c:0b:
ca:7a:a0:d8:57:89:cd:8a:7d:b7:3a:ec:6d:dd:02:44:63:e2:
49:b4:2a:71:a6:fc:27:fd:d2:aa:ae:2f:99:1d:81:a0:13:50:
7a:86:59:ab
-----BEGIN CERTIFICATE-----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Generated at Mon Feb 19 18:02:55 2024 by rpki-client on console-ams.rpki-client.org