Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37322e302f32342d3234203d3e20333936333536.roa
File: 3231332e3133392e37322e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier: NXBr55nAfEIBhI/YYa5ceqIArApeV+JGDboPwpNxWvo=
Subject key identifier: CB:63:29:74:A7:15:25:36:D1:D7:75:AF:79:AA:98:F8:0D:03:55:22
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 4B3C567463AB764FBF0C925F63CB1B6EF6184FBB
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37322e302f32342d3234203d3e20333936333536.roa
Signing time: Tue 21 Feb 2023 22:13:51 +0000
ROA not before: Tue 21 Feb 2023 22:08:51 +0000
ROA not after: Tue 20 Feb 2024 22:13:51 +0000
asID: 396356
IP address blocks: 213.139.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 13:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3c:56:74:63:ab:76:4f:bf:0c:92:5f:63:cb:1b:6e:f6:18:4f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 21 22:08:51 2023 GMT
Not After : Feb 20 22:13:51 2024 GMT
Subject: CN=CB632974A7152536D1D775AF79AA98F80D035522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:b0:e8:3c:d4:17:ea:0c:f2:18:7b:7e:e7:
bd:9a:30:69:d5:59:ea:b4:de:69:c7:d0:81:3a:f8:
e4:f8:f5:0f:45:3e:d4:5b:f7:3b:61:c4:63:91:a2:
a7:6c:9c:d2:57:22:ed:73:87:34:55:c2:be:94:00:
35:74:4f:31:e1:4d:8e:9b:2d:01:ea:cb:03:d6:e5:
63:13:74:bc:78:c1:0c:50:d4:98:9a:e4:a0:b8:bd:
cd:bc:36:8e:09:bc:7b:fd:69:68:c3:f2:80:87:a9:
5d:23:20:d3:39:58:60:57:23:9b:e3:f9:6e:da:cd:
f7:9f:56:34:93:f5:21:5f:ef:4d:bd:20:0f:50:2a:
26:cf:88:ce:9e:08:2e:1e:50:d6:3a:55:a8:6e:9e:
cc:db:ab:3e:19:c4:a1:e0:14:9a:e0:58:1d:dc:04:
b9:05:af:08:7b:e0:35:a7:fd:37:5b:7c:04:b7:a1:
b6:24:55:6f:b8:04:b9:67:19:79:50:00:77:e4:49:
8d:24:e0:bd:26:b1:d9:fc:50:1b:c9:f0:14:29:64:
34:75:ee:0a:88:3c:b5:85:f7:e3:c7:58:cf:ea:19:
b6:b1:75:27:f2:66:35:4a:53:03:d3:1d:60:04:bd:
98:26:d4:50:82:f3:18:99:3d:7a:6d:11:13:18:66:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:63:29:74:A7:15:25:36:D1:D7:75:AF:79:AA:98:F8:0D:03:55:22
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37322e302f32342d3234203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.72.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e0:69:60:55:3d:7c:1d:c7:0e:26:43:d1:08:5a:83:27:d9:
8a:93:61:4b:15:45:f9:50:4c:f3:bf:68:ed:09:6d:03:26:ae:
ac:6d:92:f4:4c:49:59:99:d8:46:dd:4f:d0:2a:ad:4f:83:a5:
0e:49:0a:66:72:5b:d3:8a:4b:8f:53:72:9c:20:f0:ae:bd:40:
82:bf:9f:7d:ee:c7:31:2c:39:15:a8:c0:7c:d2:6b:e2:72:6b:
ec:f0:4e:21:7b:4b:b8:cb:07:8c:db:c8:a1:6d:37:70:d3:f1:
06:16:ea:09:7c:72:17:a7:98:8d:43:a6:e6:81:34:64:30:30:
6f:05:e5:83:34:cf:b3:6b:05:73:d1:3a:6a:84:39:28:55:65:
e2:40:6d:c8:cb:f3:24:e0:eb:9f:40:59:33:ef:f7:6e:64:26:
db:0c:fb:ac:b0:4b:4f:44:6c:35:99:4a:ff:0a:6b:2f:16:d1:
7e:57:58:52:80:f9:1f:f2:cd:d9:67:c3:a9:64:28:53:08:a8:
12:6a:16:0e:c2:79:14:e2:96:86:4c:3b:26:7c:3d:2d:d4:95:
7e:a5:cf:39:aa:41:fe:ec:db:6a:20:50:1b:c2:f5:4f:01:ba:
4c:cf:15:4c:ea:c4:66:ac:6b:33:81:8d:8c:c4:6a:cb:f9:06:
ef:75:f1:0a
-----BEGIN CERTIFICATE-----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Generated at Mon Jan 15 17:30:00 2024 by rpki-client on console-ams.rpki-client.org