Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32322d3234203d3e20383334.roa
File: 3231332e3133392e37362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: ixm3C4i8ZATsSy1aCYHgjJl9BG5S3yjGzpY1P1JuL4g=
Subject key identifier: 97:F1:BA:FA:03:6E:A5:8F:EF:2A:45:94:42:C7:31:32:DE:C0:4D:1A
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 79C07D91BC88AE4CD17E93CCADFF634DF8630411
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32322d3234203d3e20383334.roa
Signing time: Thu 08 Feb 2024 00:04:55 +0000
ROA not before: Wed 07 Feb 2024 23:59:55 +0000
ROA not after: Thu 06 Feb 2025 00:04:55 +0000
asID: 834
IP address blocks: 213.139.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 13:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c0:7d:91:bc:88:ae:4c:d1:7e:93:cc:ad:ff:63:4d:f8:63:04:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 7 23:59:55 2024 GMT
Not After : Feb 6 00:04:55 2025 GMT
Subject: CN=97F1BAFA036EA58FEF2A459442C73132DEC04D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:00:ce:56:8f:a0:47:fd:0e:f3:bf:83:7e:
8a:6b:70:f3:e7:b1:34:b8:0a:4b:4f:22:d7:57:6e:
d6:59:75:db:d6:0d:ad:3a:9f:89:82:8f:31:63:6e:
fe:a9:30:79:22:fe:97:47:15:6a:74:ef:fd:74:b5:
07:0b:36:37:4f:e0:62:83:b0:d8:b8:2e:c1:3c:cc:
95:0f:ba:2f:4b:c1:9e:00:85:c0:b0:89:ac:4f:93:
1c:ac:47:f4:d6:6a:62:8f:13:4f:53:79:4f:0b:66:
3b:7c:ef:0b:6c:05:08:2f:e5:5a:cc:a5:dc:df:e1:
18:aa:1b:7d:b9:a3:69:7a:9b:37:9e:f8:2a:be:a3:
fc:25:26:0a:97:6b:ba:27:cb:dc:35:cd:6d:ac:b0:
09:57:1f:89:9b:b8:39:d6:b6:40:f6:b1:03:a0:81:
d8:20:58:28:4e:78:b5:20:8c:a3:3d:3e:de:02:a8:
6e:0b:3e:a8:62:72:c4:44:93:54:e8:b8:f4:57:2e:
43:eb:e9:e2:57:81:11:6d:1e:b2:ed:a5:90:bc:74:
bc:71:de:6f:96:cb:b2:72:f7:37:0e:cb:84:a8:91:
ef:f1:14:54:27:1f:21:59:c2:85:f1:74:52:28:e2:
c7:48:0a:31:2b:6b:5e:f7:17:9d:b5:0a:36:73:25:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:BA:FA:03:6E:A5:8F:EF:2A:45:94:42:C7:31:32:DE:C0:4D:1A
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.76.0/22
Signature Algorithm: sha256WithRSAEncryption
12:36:2c:fa:3a:ed:6a:6c:e5:c5:8d:af:c9:d7:11:ab:80:a7:
61:60:3e:20:ca:af:49:c1:21:3f:12:25:58:0b:d0:fd:7b:65:
83:4a:79:39:c1:78:a4:99:b8:35:ee:e9:5a:d3:61:b1:30:17:
e4:29:3d:f7:c3:72:39:4d:e8:6b:1a:80:56:85:c6:45:70:10:
b9:0b:6b:a2:29:cf:6a:ef:ed:77:26:3d:60:56:fe:15:cf:fd:
e7:82:e3:a3:61:79:18:c8:96:d2:3b:8d:2c:1c:dd:3d:5c:43:
cb:4d:f0:f1:9b:21:69:6a:47:9a:a8:3e:9d:0a:77:ad:63:ee:
c6:9c:70:36:83:0d:95:1e:0b:29:11:05:2a:af:a4:fa:a7:b4:
cf:fb:93:f2:fc:37:68:cc:a3:ff:7c:e8:db:a0:b9:dd:aa:ae:
33:06:25:6c:ef:39:ed:23:23:29:b8:d5:2d:58:b4:bb:c9:28:
d9:1b:af:9f:d1:b9:05:12:53:da:58:ba:5a:8a:ad:e9:dc:d1:
ed:5b:2f:43:ce:f1:7a:d4:1c:fc:5f:24:59:79:f5:d3:ee:a5:
01:a3:2d:3f:d4:d3:59:6d:de:f5:d6:65:c9:10:84:8f:5e:fa:
da:58:0e:b4:2f:66:9c:69:da:93:e1:9d:e2:81:cd:3f:10:d4:
91:cf:f4:32
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUecB9kbyIrkzRfpPMrf9jTfhjBBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNDAyMDcyMzU5NTVaFw0yNTAyMDYwMDA0NTVaMDMxMTAvBgNV
BAMTKDk3RjFCQUZBMDM2RUE1OEZFRjJBNDU5NDQyQzczMTMyREVDMDREMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4QDOVo+gR/0O87+DfoprcPPn
sTS4CktPItdXbtZZddvWDa06n4mCjzFjbv6pMHki/pdHFWp07/10tQcLNjdP4GKD
sNi4LsE8zJUPui9LwZ4AhcCwiaxPkxysR/TWamKPE09TeU8LZjt87wtsBQgv5VrM
pdzf4RiqG325o2l6mzee+Cq+o/wlJgqXa7ony9w1zW2ssAlXH4mbuDnWtkD2sQOg
gdggWChOeLUgjKM9Pt4CqG4LPqhicsREk1TouPRXLkPr6eJXgRFtHrLtpZC8dLxx
3m+Wy7Jy9zcOy4Soke/xFFQnHyFZwoXxdFIo4sdICjEra173F521CjZzJZ2JAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUl/G6+gNupY/vKkWUQscxMt7ATRowHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALVi0ww
DQYJKoZIhvcNAQELBQADggEBABI2LPo67Wps5cWNr8nXEauAp2FgPiDKr0nBIT8S
JVgL0P17ZYNKeTnBeKSZuDXu6VrTYbEwF+QpPffDcjlN6GsagFaFxkVwELkLa6Ip
z2rv7XcmPWBW/hXP/eeC46NheRjIltI7jSwc3T1cQ8tN8PGbIWlqR5qoPp0Kd61j
7saccDaDDZUeCykRBSqvpPqntM/7k/L8N2jMo/986Nugud2qrjMGJWzvOe0jIym4
1S1YtLvJKNkbr5/RuQUSU9pYulqKrenc0e1bL0PO8XrUHPxfJFl59dPupQGjLT/U
01lt3vXWZckQhI9e+tpYDrQvZpxp2pPhneKBzT8Q1JHP9DI=
-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:43 2024 by rpki-client on console-ams.rpki-client.org