Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32332d3234203d3e203231383539.roa
File: 3231332e3133392e37342e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier: d/0dVGW518dXZwOxDxaomGD3tSHfECuy9HMHu0EByWY=
Subject key identifier: DD:F5:1A:F6:62:FB:69:AD:4F:EC:1E:27:21:B7:E7:32:BB:68:06:DF
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 2A62491AC27BC8024BA9FDA6DD21E01A9B0BDA83
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32332d3234203d3e203231383539.roa
Signing time: Mon 08 Jan 2024 06:31:00 +0000
ROA not before: Mon 08 Jan 2024 06:26:00 +0000
ROA not after: Mon 06 Jan 2025 06:31:00 +0000
asID: 21859
IP address blocks: 213.139.74.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:62:49:1a:c2:7b:c8:02:4b:a9:fd:a6:dd:21:e0:1a:9b:0b:da:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 8 06:26:00 2024 GMT
Not After : Jan 6 06:31:00 2025 GMT
Subject: CN=DDF51AF662FB69AD4FEC1E2721B7E732BB6806DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:16:44:1e:06:c5:4e:6e:bd:20:e5:69:98:
73:75:83:b9:1a:21:be:09:2b:c5:cf:a8:c8:5b:2c:
45:9b:f3:43:e4:52:05:f8:51:98:2f:fd:47:90:22:
1f:47:6a:68:a4:34:67:5f:90:96:a7:22:b6:86:da:
a6:53:de:a0:70:97:11:d3:88:fc:da:8f:2a:8d:0a:
fd:e3:16:3f:37:65:28:07:70:c2:5a:23:58:75:55:
ac:fe:da:88:c0:9f:bd:3e:2e:36:aa:f9:4f:db:9e:
22:6c:3d:00:64:11:36:08:1f:9e:4f:0c:19:46:4f:
ad:2b:65:5c:6c:37:da:d5:81:49:9a:12:bd:9a:3d:
78:fe:4b:23:42:96:4a:ef:b3:7b:f8:64:53:12:e0:
24:a5:bc:a7:7d:12:57:68:24:a0:76:e5:07:0d:6c:
a1:06:94:99:d1:18:82:a2:8e:01:56:c4:63:be:b4:
d8:93:e2:50:25:5d:96:05:bc:4f:87:b7:a0:14:21:
37:6a:e7:08:39:a7:44:6b:3e:27:38:de:7a:7c:fa:
2b:eb:93:c1:b8:b8:e8:bc:68:44:2c:af:95:7d:8e:
ba:6f:5f:d4:68:3a:bd:d2:c0:c3:dc:82:26:37:49:
a4:c9:74:4d:84:ba:b1:1f:32:15:b8:ba:ae:7b:17:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F5:1A:F6:62:FB:69:AD:4F:EC:1E:27:21:B7:E7:32:BB:68:06:DF
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32332d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.74.0/23
Signature Algorithm: sha256WithRSAEncryption
35:54:40:4a:d3:e2:06:99:96:c0:27:95:1d:9d:79:96:ac:68:
8b:56:24:f1:02:4c:d5:31:5d:df:ee:64:39:bc:95:8f:ff:f4:
e2:79:9a:f0:5b:e6:99:1a:cf:a3:3f:f1:f9:ea:7a:44:aa:7d:
04:2b:0a:ac:a5:07:96:61:00:7c:0a:42:ce:09:35:b7:c8:0d:
e4:c8:ec:15:c1:3e:84:8c:85:6f:2e:f0:09:c6:e2:7b:65:96:
cd:3f:93:83:ff:db:ee:ab:e1:53:f7:eb:23:ce:c8:dc:1b:64:
b2:e8:67:1b:8a:a2:28:b9:45:35:d1:3e:a9:41:e0:1c:8d:89:
3b:4d:7d:31:31:59:b4:61:35:51:01:62:e1:be:86:47:da:d0:
2b:10:f8:fc:02:ea:e3:11:fa:78:5b:b2:15:9c:25:27:bf:15:
07:13:62:a8:ce:46:34:9e:76:fc:d1:cc:ec:94:f6:34:4e:d6:
b9:3b:11:26:bb:db:1b:d3:9c:e6:d1:31:06:67:79:c0:d9:67:
eb:a0:dc:23:c3:5d:7d:ac:8b:34:f3:7b:6b:fa:db:4a:2d:d8:
3c:79:3d:94:c7:df:50:97:54:b6:67:8d:b8:0a:b0:c7:d0:3a:
30:38:2a:b4:55:72:c8:ef:45:29:ce:dd:30:cb:10:5e:1d:66:
79:3a:7e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 01:18:11 2024 by rpki-client on console-fra.rpki-client.org