Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37322e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e37322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 6S0jfOmAZ2Xy9rmjUEnNDcJn9g2PqiTzF+NZEFhDpOQ=
Subject key identifier: 22:2A:CB:78:CA:8F:2E:7E:CC:61:83:A1:15:8E:3A:0B:7D:73:CD:5A
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 339E00AF928B691F8B69F7B5670DDF0DE1AA815A
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37322e302f32342d3234203d3e20383334.roa
Signing time: Tue 20 Feb 2024 00:02:03 +0000
ROA not before: Mon 19 Feb 2024 23:57:03 +0000
ROA not after: Tue 18 Feb 2025 00:02:03 +0000
asID: 834
IP address blocks: 213.139.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:9e:00:af:92:8b:69:1f:8b:69:f7:b5:67:0d:df:0d:e1:aa:81:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 19 23:57:03 2024 GMT
Not After : Feb 18 00:02:03 2025 GMT
Subject: CN=222ACB78CA8F2E7ECC6183A1158E3A0B7D73CD5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:ec:02:68:01:2f:bb:06:c6:a7:01:ac:3f:
95:bf:f2:e9:83:87:3a:53:45:99:16:40:52:d7:a9:
d4:0a:f0:40:42:5a:23:cf:f4:f8:cc:48:1f:2f:83:
68:95:57:45:10:b7:49:e2:9a:4b:75:61:9d:37:17:
f8:51:cb:ea:29:f5:04:e4:37:13:86:9e:4c:3a:af:
52:07:2f:24:24:91:57:82:e8:dd:23:ce:a2:43:88:
df:97:3e:6f:de:74:56:6a:c3:9c:69:97:92:7c:ad:
cd:9a:69:8f:81:5a:d8:f2:72:df:d5:24:cb:fd:24:
86:42:9c:52:f3:d0:84:c3:f6:cc:78:81:f4:d7:ca:
73:d6:45:a0:fb:3e:4b:72:30:61:55:f5:ee:e7:c2:
36:fe:5c:14:89:19:ed:49:98:4a:10:35:ce:ae:50:
ae:a9:b8:69:5f:23:ba:a1:05:c7:cd:74:a8:a5:c5:
29:ce:dc:98:f3:66:a0:8b:f6:bd:22:c1:1c:6c:a0:
38:2b:09:ef:a3:e3:ab:cf:4c:5e:29:f6:e8:50:52:
14:1a:2d:fa:41:1d:00:6c:8d:e9:8e:4d:41:15:14:
52:f3:65:0d:81:ac:73:85:09:35:36:e9:6a:a9:94:
c7:7e:70:1c:4f:eb:5a:c3:2d:ff:58:e0:af:a7:1e:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:CB:78:CA:8F:2E:7E:CC:61:83:A1:15:8E:3A:0B:7D:73:CD:5A
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.72.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:bf:88:46:ef:83:15:de:c8:28:40:2b:72:1a:0f:a0:39:4c:
34:7b:0c:79:62:27:6c:e5:c1:b2:ab:2d:1c:75:16:54:03:6e:
5c:cc:60:3e:fc:a1:fa:02:f0:a1:7a:a9:14:73:21:1d:aa:a9:
5f:4a:a4:d5:13:c1:cf:d6:33:29:2d:46:2a:f0:4c:a6:66:c8:
4d:2b:27:07:a3:d4:f8:81:24:3a:94:32:47:89:41:f2:fe:5c:
df:0f:3e:a8:08:38:b6:fb:60:f2:11:bf:02:ed:d0:e8:43:cf:
3a:02:a0:8c:e8:be:97:b3:f7:d6:6e:0d:cb:7b:9c:51:94:76:
e2:be:ab:8a:15:45:92:b5:88:d1:92:f4:e9:4c:7b:7b:19:dd:
2f:21:49:4c:fc:26:cf:bb:0f:45:6c:dc:77:59:ee:ce:51:15:
79:39:01:6e:65:e7:9d:84:29:1c:27:76:d7:50:fb:e0:47:d4:
51:e0:5a:3d:c2:49:67:c9:92:70:d6:9a:e2:60:72:f5:a5:40:
88:60:a0:3b:88:9d:96:f3:41:27:ff:1c:fc:10:e8:6a:2f:b5:
c1:8b:5e:c4:1c:6b:00:f9:e8:e6:7d:80:51:96:f0:61:77:c5:
41:bd:07:60:04:eb:b5:78:3a:7d:8c:f9:cc:3d:dc:37:0c:a1:
f2:fa:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 20:55:27 2024 by rpki-client on console-ams.rpki-client.org