Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37332e302f32342d3234203d3e203632323430.roa
File: 3231332e3133392e37332e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: BlwY+bflGJdq48d7VoQQeKDXGpE/Xwsfc8ybXEhHol8=
Subject key identifier: B2:F0:08:D9:CC:20:2A:7E:79:62:92:59:86:82:5E:A8:42:91:B5:20
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 76869BBE0937A4A470A791701FF8749EAD3EFECB
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37332e302f32342d3234203d3e203632323430.roa
Signing time: Wed 25 Jan 2023 13:02:18 +0000
ROA not before: Wed 25 Jan 2023 12:57:18 +0000
ROA not after: Wed 24 Jan 2024 13:02:18 +0000
asID: 62240
IP address blocks: 213.139.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:86:9b:be:09:37:a4:a4:70:a7:91:70:1f:f8:74:9e:ad:3e:fe:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 25 12:57:18 2023 GMT
Not After : Jan 24 13:02:18 2024 GMT
Subject: CN=B2F008D9CC202A7E7962925986825EA84291B520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:a1:5f:fc:b0:68:f6:c4:3d:e7:0a:a1:12:
c5:94:5a:42:2f:dd:32:ec:2d:a6:fb:80:c7:78:df:
00:e7:77:11:1d:49:15:5f:33:b1:82:1c:f1:19:a8:
da:c4:1d:be:a9:c0:56:e5:5b:ef:d6:b2:01:c7:b1:
b6:1b:a3:5e:3f:5c:0e:b9:f1:4d:1c:a1:a3:1d:72:
0e:ca:a2:c2:c3:7b:fa:84:bb:79:c4:62:a1:c5:42:
dd:9e:ac:f2:04:38:06:e2:f2:f3:d4:9c:bf:b2:69:
b5:e7:5e:33:67:88:8d:40:1e:69:3a:bf:e4:5a:2b:
53:e9:6c:19:60:8c:51:e7:a2:f5:1a:7b:d0:16:f9:
f6:66:c2:73:79:8c:75:30:9f:ef:c6:b2:da:ee:11:
bf:56:90:46:4a:e6:ae:bd:6e:c2:8c:5c:a4:be:99:
23:90:34:cf:7c:d9:22:02:e2:24:c9:2f:6c:98:15:
fd:75:50:a0:31:cb:8a:a1:cb:6d:88:77:96:34:a3:
2d:12:a9:cb:77:f7:a3:c5:16:b9:e5:6c:0d:ca:6b:
c6:90:50:b6:8e:e1:b0:8a:1c:bf:e9:df:f0:a4:5e:
1c:b3:7e:27:0c:ab:70:12:0b:e4:ea:33:b0:8d:13:
12:65:06:45:55:54:01:03:3f:b9:e0:4a:ce:5e:f5:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F0:08:D9:CC:20:2A:7E:79:62:92:59:86:82:5E:A8:42:91:B5:20
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37332e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.73.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ca:48:76:cb:95:f2:f1:79:81:ed:f2:3c:f8:eb:d1:c1:e8:
28:b4:c8:c8:43:17:61:ee:e8:c9:1b:fd:68:db:48:2b:29:68:
b3:af:a7:39:de:f9:40:1a:7f:82:cc:d2:15:df:b4:05:ad:87:
33:7c:df:79:44:71:dd:56:9d:b1:a9:d0:e6:9b:8e:b2:b0:3f:
03:eb:dd:77:14:42:5c:8c:9e:b4:8c:72:d8:9e:29:4e:bc:08:
3f:c9:ec:e9:9f:b5:fb:72:6d:77:2c:62:db:75:50:bf:e1:fc:
8b:f0:ec:23:9c:ee:73:5f:3e:93:63:8c:a1:f8:03:58:bf:ac:
f0:98:bb:3f:02:2d:da:f9:a2:d8:c3:f8:3d:97:a8:65:b1:cc:
41:21:00:fd:5d:ed:bb:35:ba:68:06:ae:51:96:f0:00:9e:b5:
92:af:f6:1e:75:92:07:7f:d4:6e:0d:91:2a:66:49:1b:29:cb:
a6:20:68:aa:2d:4d:a7:e3:11:e9:de:75:cc:44:ab:04:e7:f9:
0a:00:30:b8:0a:94:ab:51:aa:a6:fb:b0:0f:f8:c1:a3:dc:79:
17:5b:0b:79:67:27:ca:b3:db:a3:13:f0:71:f0:b8:4b:94:27:
11:a0:09:32:a0:3f:7f:8e:aa:44:6c:0f:35:57:c1:6a:51:ba:
d1:58:3a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 00:33:07 2023 by rpki-client on console-fra.rpki-client.org