Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32342d3234203d3e203231383539.roa
File: 3231332e3133392e37342e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: oEBxaI6boZ+sHbrfNO5sxWDI/lQ6gZK2E4IOaYjduEk=
Subject key identifier: 31:6A:68:80:5A:A5:08:2D:42:8A:52:EA:69:98:A2:AA:3B:11:80:35
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 1332039690E0EC97CA1F35D1F0C9CA805FDD5DC5
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32342d3234203d3e203231383539.roa
Signing time: Sun 25 Feb 2024 09:40:53 +0000
ROA not before: Sun 25 Feb 2024 09:35:53 +0000
ROA not after: Sun 23 Feb 2025 09:40:53 +0000
asID: 21859
IP address blocks: 213.139.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:32:03:96:90:e0:ec:97:ca:1f:35:d1:f0:c9:ca:80:5f:dd:5d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 25 09:35:53 2024 GMT
Not After : Feb 23 09:40:53 2025 GMT
Subject: CN=316A68805AA5082D428A52EA6998A2AA3B118035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:ef:e3:af:a7:5a:27:1d:bc:53:31:f0:a6:
ac:d0:21:67:40:ea:66:94:2c:9c:9a:75:95:c9:78:
c1:70:28:bd:2c:8f:d3:51:3f:01:37:b0:d0:13:4e:
98:b0:20:fb:d5:3e:a0:c8:95:d5:3f:b2:68:c7:67:
40:1e:7e:70:3a:b5:3e:b0:a8:01:1a:01:61:86:bf:
ea:fc:cc:c6:29:af:2c:52:93:79:80:ca:d1:e0:41:
08:81:0e:00:07:c5:57:2e:61:ce:29:44:05:d0:13:
75:f7:45:8f:19:97:a5:9a:8c:56:33:fb:86:17:7b:
8e:6d:e5:6d:a3:01:ab:68:10:a1:a9:d5:1f:eb:c8:
d4:91:94:dd:0d:4c:e5:69:70:c7:9a:f6:c5:67:c6:
f5:2c:32:1f:c5:33:13:36:c1:b0:2b:56:0c:39:03:
6e:90:6e:aa:0a:e7:50:a5:93:48:54:01:13:20:ef:
ff:4e:cf:12:21:83:cc:18:61:8b:56:fd:e5:28:3a:
14:47:37:79:51:11:88:cd:f0:85:3e:94:d4:cf:d5:
a8:05:3b:53:5d:dc:37:fd:6d:53:ac:57:1a:3f:96:
54:94:d7:c8:f0:dd:8b:85:8a:c7:52:39:20:db:47:
39:10:a7:97:e5:e4:aa:21:55:c6:2f:ed:a1:23:6d:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6A:68:80:5A:A5:08:2D:42:8A:52:EA:69:98:A2:AA:3B:11:80:35
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.74.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5b:7a:f8:97:0a:10:56:6d:e5:f4:40:9f:2b:b6:f4:94:c8:
9a:e3:68:bf:3a:c6:ef:37:ac:d4:2b:64:5c:22:e0:f6:b6:b3:
17:28:03:92:61:16:4a:fe:9f:bb:25:8f:1b:e0:94:1b:7b:cc:
b7:27:38:01:a2:28:35:3d:28:13:f2:a4:5c:db:d5:ef:81:1a:
72:3e:72:32:55:aa:6d:ec:8f:75:13:3f:25:e7:23:b4:f2:8e:
79:7a:dd:f7:6a:ba:77:97:12:e9:7b:54:6b:e4:90:b6:d6:be:
17:a6:fd:32:7d:06:38:ba:59:71:e0:95:d7:40:88:d6:23:8b:
68:05:90:71:f4:1a:66:e8:9c:4d:aa:bc:49:5d:39:f5:98:ae:
b2:59:f6:06:7b:31:92:27:0a:4b:ff:79:dc:d2:b6:a4:48:70:
10:01:67:e7:e5:37:ea:19:7f:aa:55:e3:9c:ff:c2:c8:7e:30:
30:09:f6:fe:e1:55:79:d2:fa:01:76:5b:70:bd:63:10:54:de:
0e:da:ca:fd:d4:f5:ca:bc:9c:47:8e:72:43:df:82:b6:4b:e4:
8b:5a:e9:e5:d3:dd:24:7b:de:9d:59:b5:2a:4c:0c:c5:c5:cc:
2a:55:be:26:4d:59:7a:f6:e0:c4:4a:da:d2:38:de:a3:33:31:
ab:6f:05:09
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEzIDlpDg7JfKHzXR8MnKgF/dXcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNDAyMjUwOTM1NTNaFw0yNTAyMjMwOTQwNTNaMDMxMTAvBgNV
BAMTKDMxNkE2ODgwNUFBNTA4MkQ0MjhBNTJFQTY5OThBMkFBM0IxMTgwMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPu/jr6daJx28UzHwpqzQIWdA
6maULJyadZXJeMFwKL0sj9NRPwE3sNATTpiwIPvVPqDIldU/smjHZ0AefnA6tT6w
qAEaAWGGv+r8zMYpryxSk3mAytHgQQiBDgAHxVcuYc4pRAXQE3X3RY8Zl6WajFYz
+4YXe45t5W2jAatoEKGp1R/ryNSRlN0NTOVpcMea9sVnxvUsMh/FMxM2wbArVgw5
A26QbqoK51Clk0hUARMg7/9OzxIhg8wYYYtW/eUoOhRHN3lREYjN8IU+lNTP1agF
O1Nd3Df9bVOsVxo/llSU18jw3YuFisdSOSDbRzkQp5fl5KohVcYv7aEjbZS1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMWpogFqlCC1CilLqaZiiqjsRgDUwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1YtKMA0GCSqGSIb3DQEBCwUAA4IBAQBNW3r4lwoQVm3l9ECfK7b0lMia42i/Osbv
N6zUK2RcIuD2trMXKAOSYRZK/p+7JY8b4JQbe8y3JzgBoig1PSgT8qRc29XvgRpy
PnIyVapt7I91Ez8l5yO08o55et33arp3lxLpe1Rr5JC21r4Xpv0yfQY4ullx4JXX
QIjWI4toBZBx9Bpm6JxNqrxJXTn1mK6yWfYGezGSJwpL/3nc0rakSHAQAWfn5Tfq
GX+qVeOc/8LIfjAwCfb+4VV50voBdltwvWMQVN4O2sr91PXKvJxHjnJD34K2S+SL
Wunl090ke96dWbUqTAzFxcwqVb4mTVl69uDEStrSON6jMzGrbwUJ
-----END CERTIFICATE-----
Generated at Mon Mar 25 02:29:56 2024 by rpki-client on console-ams.rpki-client.org