Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e203231383539.roa
File: 3231332e3133392e37352e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: DTR6j00hJUYeLrfkxcxCIa6zzpcPY5gNuSJNroXr8fk=
Subject key identifier: 46:AC:54:DD:A4:41:4A:32:20:3C:8E:DD:EA:3E:CC:51:6B:9B:19:52
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 13097E76233D030C95E471CC19F103663E2055BE
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e203231383539.roa
Signing time: Fri 09 Aug 2024 07:02:27 +0000
ROA not before: Fri 09 Aug 2024 06:57:27 +0000
ROA not after: Fri 08 Aug 2025 07:02:27 +0000
asID: 21859
IP address blocks: 213.139.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:09:7e:76:23:3d:03:0c:95:e4:71:cc:19:f1:03:66:3e:20:55:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Aug 9 06:57:27 2024 GMT
Not After : Aug 8 07:02:27 2025 GMT
Subject: CN=46AC54DDA4414A32203C8EDDEA3ECC516B9B1952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:c7:3e:9d:b4:5a:e2:b1:7a:ce:d9:d0:4d:
d1:05:53:bf:7b:04:99:77:6e:22:8a:f0:f0:79:fb:
8d:ec:18:f3:c3:96:8e:5a:4c:83:d5:a2:aa:c1:61:
99:74:91:17:00:ee:0d:fd:83:f7:d8:2c:9b:76:ce:
81:16:65:6c:a7:0f:08:0b:ae:90:4d:13:41:bc:2b:
1a:2a:ed:36:50:99:4c:b2:e5:58:9c:56:ea:1f:6e:
bd:59:cf:20:97:a4:a3:f1:5d:0c:34:51:3b:23:cc:
70:4b:e8:36:7a:c8:52:79:76:60:4b:5f:18:11:85:
ab:00:a2:50:3d:d0:14:04:df:98:da:43:47:45:f6:
11:db:82:f7:72:d1:2c:68:fb:8e:95:3f:43:e0:5c:
b0:2f:9f:69:15:36:41:24:ef:d7:58:82:9d:ff:ff:
8a:33:52:48:d6:5f:d3:0e:c6:6c:8c:97:45:32:0c:
6c:23:41:2a:1e:a8:b2:d2:25:91:ae:37:e6:81:2b:
d4:cc:b1:dd:ee:d8:cf:b9:6a:c4:d1:34:38:f5:bb:
7f:06:84:7f:a7:f2:c6:e9:6a:34:3c:ae:35:45:fc:
d2:c3:8f:be:ab:63:1d:3f:27:8b:75:bf:05:fc:10:
3e:cc:8e:70:ff:6f:76:47:b8:1a:ff:41:3e:b2:e9:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:54:DD:A4:41:4A:32:20:3C:8E:DD:EA:3E:CC:51:6B:9B:19:52
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f3:9b:f2:49:17:9d:69:da:4b:d7:45:a3:a4:17:40:a3:f1:
c5:ad:85:1d:b5:48:1b:1d:d7:67:db:fd:60:06:1e:d0:24:51:
91:91:95:4a:6b:30:e6:93:a0:8c:eb:fb:46:1d:18:c0:0b:90:
49:68:4b:eb:ab:1f:c5:b1:52:e3:33:c2:db:4f:3f:15:0b:46:
6f:5e:a1:18:df:24:32:40:b1:c3:7b:cb:48:d2:3e:af:fd:26:
2c:ef:b3:00:f7:b6:dc:b7:50:a2:da:84:af:95:19:04:9c:81:
e2:a7:fd:ec:74:ae:c8:7e:31:c4:88:3c:28:af:52:1f:95:89:
2e:dc:a0:92:90:8f:4d:15:84:a0:b6:94:c0:f5:c0:5b:b0:87:
bb:af:05:bb:5b:f6:8c:1e:93:30:75:73:c9:c8:ea:71:ac:7d:
d1:f0:b8:10:05:2a:d8:84:41:56:ae:0c:2c:5b:25:3d:43:82:
9e:1d:72:06:88:0a:89:bf:28:ad:c3:ad:2b:60:9b:0f:bf:75:
ed:7e:f9:c3:34:ff:a3:ce:c3:89:19:ef:87:79:85:43:35:5d:
d0:2a:1b:17:e4:93:73:b4:dd:12:86:e4:4f:22:ee:41:c4:80:
b5:7a:31:e2:5d:a2:36:db:c5:0b:bc:5b:75:21:8e:27:f6:95:
5f:ea:92:98
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 9 01:49:09 2024 by rpki-client on console-ams.rpki-client.org