Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32332d3234203d3e2037303138.roa
File: 3231332e3133392e37362e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: OV2nWxBFSk9WncM/ZEyEDfqUTRda+CfFQIu2mLPQC3w=
Subject key identifier: 2C:2F:15:74:6C:01:6B:32:BB:72:5B:92:69:65:E7:84:F9:1E:EA:42
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 0D5AC9BA65BF12AF79F9DFBB520D2A25131FF935
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32332d3234203d3e2037303138.roa
Signing time: Thu 30 Nov 2023 20:27:11 +0000
ROA not before: Thu 30 Nov 2023 20:22:11 +0000
ROA not after: Thu 28 Nov 2024 20:27:11 +0000
asID: 7018
IP address blocks: 213.139.76.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:5a:c9:ba:65:bf:12:af:79:f9:df:bb:52:0d:2a:25:13:1f:f9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Nov 30 20:22:11 2023 GMT
Not After : Nov 28 20:27:11 2024 GMT
Subject: CN=2C2F15746C016B32BB725B926965E784F91EEA42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:12:1d:42:3b:6c:54:c2:7f:b7:ed:61:93:
c5:2f:76:d3:9e:50:a6:97:ce:c8:7d:4a:21:81:9a:
c5:9a:f5:fe:99:09:be:11:20:b5:89:4e:6c:91:0c:
a9:e6:6b:30:60:a5:fc:94:57:76:ff:c7:1c:4e:55:
cf:2b:32:7e:e2:0f:f5:c4:bf:71:75:9c:fe:8e:8e:
99:5f:c6:09:62:0e:a7:31:34:21:cc:ae:2b:5b:9d:
94:ce:07:02:9c:57:7c:51:c2:4e:cf:6a:81:60:1a:
ae:eb:e5:dd:d8:d4:f1:94:39:cf:67:9c:63:cb:90:
6c:aa:1b:98:4b:3b:0f:56:25:ff:06:6b:19:b9:a5:
47:67:07:7b:fc:34:92:af:c2:25:7d:d0:8b:97:cc:
84:66:21:22:98:c5:42:59:9f:bc:f5:1d:6f:fa:df:
49:9b:7a:38:64:ba:9c:99:9f:db:c0:fe:5a:0b:bb:
2a:1d:ca:09:8a:b6:a5:22:d4:b9:2d:51:d2:81:5d:
4f:0a:79:51:7c:e4:7e:5f:bc:94:3e:05:09:07:76:
27:62:6a:19:96:5e:ba:44:e3:bf:7e:c6:e6:c2:b3:
65:d6:5b:93:93:65:87:af:13:17:30:dd:46:17:ac:
0b:89:f6:b6:f9:cc:7f:ab:da:fa:26:62:1c:b9:2c:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:15:74:6C:01:6B:32:BB:72:5B:92:69:65:E7:84:F9:1E:EA:42
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.76.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:9f:dd:ce:04:59:54:87:77:f0:27:69:81:09:f2:1c:ee:21:
df:ab:14:2f:c8:5a:c7:a2:29:81:2e:da:c1:75:20:5d:86:c7:
be:84:b4:9c:a7:5a:e4:ce:63:bb:d2:36:40:b4:c9:33:45:c1:
9b:1a:56:5f:eb:a6:f2:00:dd:45:e0:2c:29:a5:b3:a8:4f:bf:
f2:a3:aa:9d:2e:35:5b:f9:56:40:60:b2:b7:b2:7f:3c:ce:35:
ba:89:bf:fc:31:ab:58:8e:c7:1c:1a:8b:31:39:94:74:e9:f2:
5a:ec:ab:c6:3f:56:c5:22:07:8b:bd:3e:a0:3a:ec:0b:21:ac:
3e:63:a4:a5:1f:a3:c7:6d:00:ab:92:fa:a2:46:c2:a4:f4:8d:
22:6b:50:20:ee:6d:65:ec:2d:74:23:1e:2b:2f:a1:74:04:93:
89:64:4f:c2:11:60:72:36:34:cd:70:fe:0b:57:70:22:29:1d:
ee:47:13:22:a4:37:de:93:8d:bd:d0:cd:11:7d:81:33:a1:e6:
98:9d:f7:38:e4:cc:18:3d:1f:dc:ef:fd:06:57:38:35:54:a9:
4b:8f:a5:af:a8:7b:e1:3c:e7:6d:82:58:3e:11:15:ad:c8:96:
cf:8c:51:d1:f4:08:37:cc:26:37:88:ab:dc:92:66:77:cf:a2:
aa:35:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 01:45:49 2023 by rpki-client on console-ams.rpki-client.org