Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32332d3234203d3e203231383539.roa
File: 3231332e3133392e37362e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier: Dn778v8iDQiRzziY9kVmSXcgff7S/VsYk2Rg4hbKHP8=
Subject key identifier: 07:E6:38:C3:C3:88:FC:CC:5C:D9:D5:36:70:F4:5C:26:CC:D1:2D:3A
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 2206AAA6A6141EF7307E64F0E06A467BBBEA4D84
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32332d3234203d3e203231383539.roa
Signing time: Mon 08 Jan 2024 06:31:00 +0000
ROA not before: Mon 08 Jan 2024 06:26:00 +0000
ROA not after: Mon 06 Jan 2025 06:31:00 +0000
asID: 21859
IP address blocks: 213.139.76.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:06:aa:a6:a6:14:1e:f7:30:7e:64:f0:e0:6a:46:7b:bb:ea:4d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 8 06:26:00 2024 GMT
Not After : Jan 6 06:31:00 2025 GMT
Subject: CN=07E638C3C388FCCC5CD9D53670F45C26CCD12D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:7f:33:3f:e2:b0:f9:11:3b:42:53:e7:eb:
b8:50:4c:30:97:be:c5:b7:bb:82:77:f7:4a:66:53:
dc:51:eb:49:f4:99:a2:61:f5:a2:9d:58:fd:ca:04:
9d:20:59:b7:38:65:5d:1a:fd:b2:a5:f5:a3:7f:32:
4a:17:61:b5:d5:1c:b8:8c:e1:95:4d:04:fc:83:fc:
33:f0:86:b9:19:1d:a4:aa:d8:d4:27:98:8c:df:9d:
c2:ec:29:34:a0:c9:2d:e0:40:ec:9b:dd:be:c6:d4:
62:85:18:7e:ac:7d:98:70:77:db:bf:4d:4d:6d:3b:
80:7c:6e:07:2e:eb:13:75:84:11:b3:9b:90:e5:de:
78:dc:d6:76:1a:f2:e6:26:2b:8e:c0:44:79:a4:df:
7c:e2:71:c0:0a:4c:c2:68:77:e7:f1:17:04:64:91:
43:8f:05:f3:1f:d9:a8:a1:6c:c4:80:8a:4e:59:03:
be:c6:a9:fc:d3:ee:39:80:7d:b3:4b:a1:99:a8:2e:
35:3a:c4:b9:57:50:b3:26:23:39:99:2d:7e:71:30:
1a:63:5b:90:94:40:76:59:96:8d:95:c0:ef:d4:45:
27:63:0d:8d:ad:ce:49:fe:30:8c:03:ad:fb:c1:17:
b5:c2:49:0e:8d:58:32:0e:a4:d5:42:fd:e0:d9:68:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E6:38:C3:C3:88:FC:CC:5C:D9:D5:36:70:F4:5C:26:CC:D1:2D:3A
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32332d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.76.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:6a:dc:f3:36:81:c7:22:a6:44:9b:24:7d:8c:8a:ea:d6:b1:
2d:9a:81:9a:92:6e:b3:07:54:bb:db:d1:4b:df:24:ce:17:da:
88:b7:01:e9:7e:ee:47:91:ca:ca:c4:f0:31:c8:4d:9f:16:36:
32:78:55:28:47:f8:77:d9:1b:ba:e7:f2:90:f0:32:68:90:09:
0d:40:b7:15:2f:92:fc:40:4d:0f:f9:6d:2b:8c:4e:19:ec:24:
dc:24:d7:f6:8b:f6:5b:d6:7a:47:e0:43:93:fc:89:b7:79:12:
f8:93:9e:74:fe:ef:b9:57:8c:34:18:ce:40:43:5c:f6:bf:0a:
a7:b7:b4:61:ec:3e:13:76:56:c9:e2:1b:81:10:94:75:61:15:
1c:54:0d:98:74:8a:7f:44:16:e5:e9:4e:ed:5f:b8:2c:bf:b5:
f5:39:8d:eb:17:72:ed:a3:4d:5f:7a:5e:01:6f:0f:e6:aa:f6:
bc:86:58:7c:b0:90:c0:21:26:bc:c7:19:e8:d3:25:0c:c1:d9:
20:f6:67:a6:ea:e4:a3:97:ff:d9:44:15:f2:93:4f:1c:2b:7e:
77:a2:87:31:d5:40:1b:66:25:16:ea:a5:91:b0:ff:30:2f:46:
d4:76:af:0e:39:87:cb:2f:74:cf:d4:91:84:d0:16:69:6a:13:
74:7e:0b:8c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIgaqpqYUHvcwfmTw4GpGe7vqTYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNDAxMDgwNjI2MDBaFw0yNTAxMDYwNjMxMDBaMDMxMTAvBgNV
BAMTKDA3RTYzOEMzQzM4OEZDQ0M1Q0Q5RDUzNjcwRjQ1QzI2Q0NEMTJEM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyH8zP+Kw+RE7QlPn67hQTDCX
vsW3u4J390pmU9xR60n0maJh9aKdWP3KBJ0gWbc4ZV0a/bKl9aN/MkoXYbXVHLiM
4ZVNBPyD/DPwhrkZHaSq2NQnmIzfncLsKTSgyS3gQOyb3b7G1GKFGH6sfZhwd9u/
TU1tO4B8bgcu6xN1hBGzm5Dl3njc1nYa8uYmK47ARHmk33ziccAKTMJod+fxFwRk
kUOPBfMf2aihbMSAik5ZA77GqfzT7jmAfbNLoZmoLjU6xLlXULMmIzmZLX5xMBpj
W5CUQHZZlo2VwO/URSdjDY2tzkn+MIwDrfvBF7XCSQ6NWDIOpNVC/eDZaLOBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUB+Y4w8OI/Mxc2dU2cPRcJszRLTowHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3
MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
1YtMMA0GCSqGSIb3DQEBCwUAA4IBAQCdatzzNoHHIqZEmyR9jIrq1rEtmoGakm6z
B1S729FL3yTOF9qItwHpfu5HkcrKxPAxyE2fFjYyeFUoR/h32Ru65/KQ8DJokAkN
QLcVL5L8QE0P+W0rjE4Z7CTcJNf2i/Zb1npH4EOT/Im3eRL4k550/u+5V4w0GM5A
Q1z2vwqnt7Rh7D4TdlbJ4huBEJR1YRUcVA2YdIp/RBbl6U7tX7gsv7X1OY3rF3Lt
o01fel4Bbw/mqva8hlh8sJDAISa8xxno0yUMwdkg9mem6uSjl//ZRBXyk08cK353
oocx1UAbZiUW6qWRsP8wL0bUdq8OOYfLL3TP1JGE0BZpahN0fguM
-----END CERTIFICATE-----
Generated at Thu Feb 8 01:40:40 2024 by rpki-client on console-ams.rpki-client.org