Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32332d3234203d3e20383334.roa
File: 3231332e3133392e37342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: p4SPz33DAVclcVzp+K7s/qXUPC7U/Yjf5NjrjVVzNzU=
Subject key identifier: 69:09:F9:D5:7E:D5:63:DB:21:9B:84:5A:48:ED:18:82:B7:BA:AE:1F
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 0F2C2CA55137E068DD79DF1E8AE0FB468E60BA70
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32332d3234203d3e20383334.roa
Signing time: Thu 08 Feb 2024 00:04:55 +0000
ROA not before: Wed 07 Feb 2024 23:59:55 +0000
ROA not after: Thu 06 Feb 2025 00:04:55 +0000
asID: 834
IP address blocks: 213.139.74.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 09:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2c:2c:a5:51:37:e0:68:dd:79:df:1e:8a:e0:fb:46:8e:60:ba:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 7 23:59:55 2024 GMT
Not After : Feb 6 00:04:55 2025 GMT
Subject: CN=6909F9D57ED563DB219B845A48ED1882B7BAAE1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:61:7f:93:05:ca:5c:b7:0b:87:16:12:88:
98:aa:7b:ab:ed:c6:89:c3:d4:eb:08:8b:70:dc:69:
65:68:78:15:d1:11:c5:f8:2b:bf:db:9d:10:09:17:
22:6c:be:0b:db:22:97:cb:b7:8e:e7:c0:5f:6d:e6:
81:19:41:a8:93:84:35:a9:c7:9e:00:b1:87:5a:2e:
5e:4b:64:a3:c3:e0:8f:cb:76:d4:d8:0a:bb:04:6f:
26:e9:0d:8d:ff:b1:e7:2d:99:75:a1:a0:f2:62:98:
e8:54:ad:ff:98:ed:03:66:9c:02:57:51:e6:7c:0e:
33:ac:d5:fe:e3:43:33:3c:aa:ef:fe:c7:4f:35:2d:
0d:43:e4:b0:aa:7d:f4:7e:03:1e:51:98:4e:7c:9f:
bc:17:1d:5e:f7:d9:21:e0:46:2a:bd:6e:28:fb:e4:
62:32:c2:81:53:f8:75:b0:16:ba:66:4a:2c:41:6b:
1a:ab:3d:0c:ea:af:29:a0:df:c5:d2:62:81:3c:8e:
d3:ab:74:98:b2:72:f4:de:98:6d:53:d1:26:a9:b2:
cd:e6:b1:70:32:c7:13:c1:cf:73:e2:80:74:c5:54:
7b:2e:98:21:28:10:ba:66:78:1e:4b:f4:ff:44:23:
c3:02:08:d1:29:79:36:af:e6:d7:08:24:45:a8:ce:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:09:F9:D5:7E:D5:63:DB:21:9B:84:5A:48:ED:18:82:B7:BA:AE:1F
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.74.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:72:94:f5:81:86:d4:7e:ed:25:c6:59:c8:d1:07:d7:e1:65:
2e:eb:54:49:cd:04:c8:d2:05:98:2a:a5:73:80:84:df:39:08:
63:29:66:a7:e4:a7:a8:38:bf:77:2a:f6:5e:27:b7:83:c2:28:
54:6d:b4:20:76:d1:08:55:38:27:3c:3e:d4:c7:f4:ce:ba:78:
c3:19:47:45:13:4e:5e:48:45:1e:e7:91:82:e6:1f:b6:c5:d1:
ca:12:59:7a:1f:fa:a9:34:55:3e:56:43:d0:e2:a9:1d:52:9d:
42:5e:76:a7:89:a9:f3:5f:a8:89:bb:a1:d0:9a:2d:c7:04:8d:
4f:a6:0e:54:3a:ed:42:bf:8b:b8:1b:b3:32:8a:27:7f:a0:9f:
b5:3f:d6:02:4b:66:65:24:52:d3:6d:0c:08:74:d3:2e:1d:2d:
c5:3e:84:87:7a:63:6e:44:2c:e8:53:8e:8d:bd:72:f4:6c:60:
e0:ff:9b:aa:57:99:b6:e3:76:ae:45:e7:3f:a9:7d:c9:a2:c2:
a8:d2:90:49:08:b8:45:7b:97:eb:2f:40:77:aa:13:b0:82:a2:
c4:50:e8:f7:22:0b:cf:11:d1:bc:67:c7:7e:73:c2:19:44:57:
2e:e7:61:35:35:94:00:e5:96:a3:71:6a:82:df:7d:42:13:c5:
28:26:ce:c4
-----BEGIN CERTIFICATE-----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Generated at Sun Feb 25 10:16:19 2024 by rpki-client on console-fra.rpki-client.org