Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37332e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e37332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Ace+mHGyzuFNpX8exTT1PVEPlx8sNK8fLl0M0hVUtlQ=
Subject key identifier: 03:6D:8E:2F:DB:28:94:FF:50:DA:03:78:31:80:37:6D:B3:10:1F:1B
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 4454CAD5E797646E8391C5CC18909A86346329F4
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37332e302f32342d3234203d3e20383334.roa
Signing time: Thu 09 Nov 2023 00:00:09 +0000
ROA not before: Wed 08 Nov 2023 23:55:09 +0000
ROA not after: Thu 07 Nov 2024 00:00:09 +0000
asID: 834
IP address blocks: 213.139.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:54:ca:d5:e7:97:64:6e:83:91:c5:cc:18:90:9a:86:34:63:29:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Nov 8 23:55:09 2023 GMT
Not After : Nov 7 00:00:09 2024 GMT
Subject: CN=036D8E2FDB2894FF50DA03783180376DB3101F1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:fb:3c:4b:00:5f:80:18:51:6a:aa:63:68:
65:9b:ef:d4:12:b1:88:d0:f4:e5:6a:30:e5:0d:f7:
9f:89:4d:c2:87:21:27:a3:20:c4:84:c1:df:dc:9b:
23:21:96:bf:c6:54:a8:0d:ff:4e:04:4e:21:a0:83:
61:0b:d0:5d:8a:a8:dc:fd:04:92:19:7b:3a:48:ec:
a0:ba:59:f7:7a:07:b0:d3:77:34:15:95:93:75:2d:
24:90:4f:39:61:3a:06:7e:61:fc:89:bf:17:d0:2d:
98:42:26:64:3e:f3:e4:fd:43:b8:0b:3b:1e:e2:65:
95:14:77:66:09:b8:f3:1b:c6:dd:9d:dc:64:b2:68:
6f:cf:34:4d:df:66:b4:5f:3a:90:e4:81:fb:63:ac:
60:14:71:d0:65:b7:dc:a2:88:3c:02:09:20:26:1c:
e4:6f:75:4b:0f:1a:18:ce:6f:74:c3:ba:06:86:f2:
4f:5c:f7:0c:9d:26:60:32:89:61:e7:3b:72:a3:c5:
c2:5e:3b:6d:01:98:37:62:99:ad:e4:a3:5f:a4:c3:
22:18:30:b7:d8:ad:76:84:5e:40:98:39:85:20:52:
95:a7:5c:e1:44:de:58:c0:db:1c:89:74:50:5c:69:
7f:98:a5:95:62:b8:16:10:8e:26:f8:20:80:50:ef:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6D:8E:2F:DB:28:94:FF:50:DA:03:78:31:80:37:6D:B3:10:1F:1B
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.73.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e2:a5:5c:98:d7:64:1c:24:d7:e6:cf:58:02:29:53:b0:32:
2d:ba:79:c0:fa:ae:17:69:fc:bd:68:5f:2a:ba:c0:89:5c:4d:
d4:38:94:e8:56:78:8f:46:79:05:76:a7:45:b1:6a:a3:82:c1:
24:47:a0:07:d6:40:f7:ef:11:8a:d5:0f:a4:54:d8:c6:2f:e9:
6b:22:25:1d:1b:b6:2a:ad:64:a5:26:1b:fe:8b:8c:75:ab:8e:
c1:2d:ea:1f:1c:6a:56:4d:07:20:08:fa:27:88:74:77:49:69:
ed:9a:84:a9:fa:f4:2b:87:01:7e:eb:c0:a6:d8:31:5f:f0:0e:
7e:b8:40:d6:f8:d2:d9:9e:19:62:87:57:6f:c0:1e:ec:b2:d8:
64:31:a2:c7:02:c6:92:39:d5:96:7b:48:e8:92:56:d9:c7:60:
22:b6:fe:b4:62:bd:0e:91:b8:82:9c:93:c6:4d:59:b1:b6:5c:
5a:c4:20:90:dc:33:df:7d:d2:15:dd:dc:10:26:38:5f:3a:84:
19:37:d3:4c:6d:2e:c4:27:e9:71:ff:cf:a3:d1:1e:a9:d2:45:
77:49:6e:7b:21:b0:99:af:a0:3b:47:21:ea:f4:6e:3d:8a:65:
fa:54:b9:cc:75:c2:a4:b8:3c:5f:b4:c9:e2:86:74:6d:2f:ad:
dc:bf:3b:8e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURFTK1eeXZG6DkcXMGJCahjRjKfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yMzExMDgyMzU1MDlaFw0yNDExMDcwMDAwMDlaMDMxMTAvBgNV
BAMTKDAzNkQ4RTJGREIyODk0RkY1MERBMDM3ODMxODAzNzZEQjMxMDFGMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4/s8SwBfgBhRaqpjaGWb79QS
sYjQ9OVqMOUN95+JTcKHISejIMSEwd/cmyMhlr/GVKgN/04ETiGgg2EL0F2KqNz9
BJIZezpI7KC6Wfd6B7DTdzQVlZN1LSSQTzlhOgZ+YfyJvxfQLZhCJmQ+8+T9Q7gL
Ox7iZZUUd2YJuPMbxt2d3GSyaG/PNE3fZrRfOpDkgftjrGAUcdBlt9yiiDwCCSAm
HORvdUsPGhjOb3TDugaG8k9c9wydJmAyiWHnO3KjxcJeO20BmDdima3ko1+kwyIY
MLfYrXaEXkCYOYUgUpWnXOFE3ljA2xyJdFBcaX+YpZViuBYQjib4IIBQ78xbAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUA22OL9solP9Q2gN4MYA3bbMQHxswHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADVi0kw
DQYJKoZIhvcNAQELBQADggEBAHfipVyY12QcJNfmz1gCKVOwMi26ecD6rhdp/L1o
Xyq6wIlcTdQ4lOhWeI9GeQV2p0WxaqOCwSRHoAfWQPfvEYrVD6RU2MYv6WsiJR0b
tiqtZKUmG/6LjHWrjsEt6h8calZNByAI+ieIdHdJae2ahKn69CuHAX7rwKbYMV/w
Dn64QNb40tmeGWKHV2/AHuyy2GQxoscCxpI51ZZ7SOiSVtnHYCK2/rRivQ6RuIKc
k8ZNWbG2XFrEIJDcM9990hXd3BAmOF86hBk300xtLsQn6XH/z6PRHqnSRXdJbnsh
sJmvoDtHIer0bj2KZfpUucx1wqS4PF+0yeKGdG0vrdy/O44=
Generated at Wed Dec 20 13:05:33 2023 by rpki-client on console-fra.rpki-client.org