Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32332d3234203d3e2037303138.roa
File: 3231332e3133392e37342e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: 9HYMHE1HIEo4lWCsx0mF554U8Hqv94hkQU4J3vCtNqg=
Subject key identifier: BA:53:69:08:6C:3B:BC:DF:E6:B7:FA:EF:97:F3:22:1B:FC:79:29:81
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 1FB05D44D6D1406E1E140ADF86A1EC5277E5D192
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32332d3234203d3e2037303138.roa
Signing time: Fri 24 Nov 2023 17:09:45 +0000
ROA not before: Fri 24 Nov 2023 17:04:45 +0000
ROA not after: Fri 22 Nov 2024 17:09:45 +0000
asID: 7018
IP address blocks: 213.139.74.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b0:5d:44:d6:d1:40:6e:1e:14:0a:df:86:a1:ec:52:77:e5:d1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Nov 24 17:04:45 2023 GMT
Not After : Nov 22 17:09:45 2024 GMT
Subject: CN=BA5369086C3BBCDFE6B7FAEF97F3221BFC792981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:3e:bb:e5:30:0b:4c:52:4a:ce:79:e6:38:
bd:68:e2:d0:1f:9d:b7:43:71:86:19:65:aa:a4:22:
31:70:70:53:a0:cf:4b:a9:a0:c7:97:14:9c:05:e3:
b3:a1:b6:35:a2:5d:dd:f2:67:1a:dd:fc:b5:de:78:
e1:a5:5d:11:5e:20:c5:24:75:2e:26:ef:d9:ec:4b:
c8:fc:a7:20:2a:3d:da:58:6d:b6:80:4f:11:43:cd:
3f:44:e3:5a:9f:2d:d8:fd:a4:28:c0:9e:d2:4e:52:
94:c5:f6:59:50:2d:11:96:af:ac:a9:31:4f:64:03:
a7:0f:48:28:c0:fd:ce:15:e6:d7:fd:1d:1f:4e:96:
59:f7:4c:42:0a:d5:fd:02:a3:a9:69:97:a2:28:25:
d9:9f:b3:e3:68:fc:80:fa:ff:d3:42:df:49:ba:f0:
a4:5c:b1:7d:ae:9e:c9:4d:ad:ad:be:19:e7:c4:0e:
35:8e:72:35:26:d5:62:ca:c2:1c:5e:86:3a:49:73:
99:a8:19:57:e5:5f:73:9a:5d:ba:aa:c4:ed:40:16:
3e:ea:29:0a:c2:0e:c8:24:02:47:9c:b7:08:cb:51:
c3:d2:80:60:36:f3:26:dc:5e:f2:49:79:ad:49:a3:
fb:2e:77:49:a1:63:50:95:47:76:7e:4e:57:41:7a:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:69:08:6C:3B:BC:DF:E6:B7:FA:EF:97:F3:22:1B:FC:79:29:81
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.74.0/23
Signature Algorithm: sha256WithRSAEncryption
65:2c:95:66:03:7e:00:57:d2:f8:48:8d:bf:b9:6c:01:24:a8:
e6:fa:69:40:c9:ff:d4:ea:99:ff:c1:5e:a2:5b:7c:36:89:3c:
5a:ea:4e:68:cb:b8:13:38:b2:bc:76:d7:d4:49:a7:3f:36:9e:
9f:e6:95:97:97:d0:d3:fa:84:fb:23:a2:74:46:3f:49:19:55:
21:a3:93:c5:57:d4:f3:0c:33:c0:58:85:39:25:6b:fb:5f:60:
56:d0:be:84:01:27:dc:eb:bd:a9:13:eb:eb:74:53:26:65:45:
91:23:ce:cf:d1:ff:10:19:42:d2:02:89:c3:7d:55:57:d8:4c:
6c:f4:74:77:47:13:9b:4f:08:62:2f:e1:b0:e3:59:79:93:84:
dc:e3:85:c0:d3:d7:0f:c0:62:cf:f6:e4:ab:50:fc:f2:0b:b3:
6a:b9:45:2c:9e:f2:b6:5e:27:c0:47:85:a6:03:e2:b7:a8:43:
7c:ee:67:4a:13:bb:b7:54:71:f8:54:d5:35:21:13:24:74:bb:
9b:00:17:87:50:1f:3b:df:11:0e:4a:04:86:5a:58:82:30:fa:
f4:cb:3b:58:d5:d4:ef:61:ea:76:e1:5d:bd:6a:3a:40:b6:13:
b0:7a:45:e0:34:d6:53:c6:25:a9:79:51:00:82:1d:ef:e4:4e:
88:8e:9b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 24 00:31:47 2023 by rpki-client on console-ams.rpki-client.org