Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e37342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cCun8TlttOcFu3keWooVFNdP8o/lfqir5WhO8aH3q4Y=
Subject key identifier: 86:7B:E5:2F:B1:48:7B:AC:CD:BE:9E:11:D1:7F:26:73:92:54:CC:4E
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 660BFD0F920563B3D75FCC9D52E4CB2996040084
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32342d3234203d3e20383334.roa
Signing time: Mon 25 Mar 2024 00:00:31 +0000
ROA not before: Sun 24 Mar 2024 23:55:31 +0000
ROA not after: Mon 24 Mar 2025 00:00:31 +0000
asID: 834
IP address blocks: 213.139.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 00:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:0b:fd:0f:92:05:63:b3:d7:5f:cc:9d:52:e4:cb:29:96:04:00:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Mar 24 23:55:31 2024 GMT
Not After : Mar 24 00:00:31 2025 GMT
Subject: CN=867BE52FB1487BACCDBE9E11D17F26739254CC4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:a9:43:38:3e:e2:2f:ba:4f:77:85:cc:c2:
0a:71:c0:a1:ac:32:9c:fd:d8:6d:54:6d:b8:0d:f9:
89:4b:71:e8:50:f3:92:e4:03:35:fb:90:1c:a9:9f:
10:99:2f:9c:7d:f3:49:5d:9e:04:3f:aa:27:c6:35:
56:d2:25:01:68:0f:ff:e2:83:b2:2d:32:d8:b6:26:
64:af:89:82:32:c5:b9:cb:55:58:fa:5e:4d:ba:1a:
17:b0:95:a2:54:93:7e:2a:c9:28:d2:f2:4c:b0:fc:
78:65:05:c9:58:5a:fb:31:8d:8e:0a:26:c3:f1:ae:
a2:da:12:c1:80:d2:06:18:58:7f:ee:c8:1e:28:9f:
fb:48:c1:30:4e:fa:4a:24:d5:e2:f5:a3:93:da:c1:
32:78:25:67:82:7a:f3:38:c5:f8:e3:69:e0:bb:bb:
bb:16:b5:2b:a2:0c:53:e6:77:fc:4c:c2:d9:22:6a:
30:fe:3c:b6:a6:02:06:cd:40:89:42:63:73:b8:71:
74:0c:5f:0a:11:42:5e:d7:a2:47:dc:73:f8:3d:47:
e6:52:ab:23:ce:37:ce:96:b5:53:22:42:d3:d4:2f:
3a:04:f4:1e:d5:e3:19:08:60:0e:4d:c6:6a:c3:ea:
ef:4b:e2:d0:b8:45:01:d4:02:3d:00:a7:e5:55:60:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:E5:2F:B1:48:7B:AC:CD:BE:9E:11:D1:7F:26:73:92:54:CC:4E
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.74.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0d:8b:73:fd:54:f7:c5:6e:a8:0c:7b:65:1c:bf:32:65:a3:
80:6f:be:4d:49:52:9f:1c:d2:1d:d4:4d:99:e0:8b:69:90:6d:
78:58:95:fb:26:b9:96:7d:83:ab:1c:9a:1b:46:9c:52:0f:14:
05:c3:09:80:95:67:4f:20:32:8b:63:20:73:56:85:b5:0d:7e:
cb:5d:d1:38:93:ce:87:8f:ea:9b:5d:33:79:27:f7:ae:f6:b8:
45:8a:30:56:b2:b0:5d:58:5f:dc:d9:53:ed:51:f2:ad:00:61:
84:c1:ca:9a:20:19:ff:da:47:57:e5:37:94:92:90:8c:e9:df:
53:d5:51:76:57:92:14:57:21:84:99:da:41:b7:e7:93:62:36:
85:36:e7:ff:2a:f6:f8:8a:28:e2:7b:48:17:03:69:bc:2b:2b:
47:0a:e9:59:a9:af:aa:40:5f:b1:d8:90:3f:bc:06:71:a5:71:
43:76:aa:dc:fc:dd:40:e5:79:23:d4:48:a4:2c:c1:c0:e1:eb:
6f:ae:79:d5:73:fc:bd:28:a5:57:39:42:17:a5:75:d1:57:9f:
49:7b:d3:5e:85:38:36:57:fe:0b:82:67:67:22:a6:78:e8:55:
54:d7:c6:b4:26:6d:7f:27:57:d9:5c:e6:1c:f1:05:78:d1:69:
e8:86:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 03:58:00 2024 by rpki-client on console-ams.rpki-client.org