Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32332d3234203d3e20383334.roa
File: 3231332e3133392e37362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 2KY06NsBWrQtg6/a8rCVCofLWq45G9bHnUowwMqEj54=
Subject key identifier: 85:60:20:6D:3A:46:07:60:EC:19:B2:D4:23:A2:3B:AB:15:64:0C:A0
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 6EADC31229B344BE29574F1367383B209D2CA2D7
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32332d3234203d3e20383334.roa
Signing time: Wed 14 Feb 2024 13:32:54 +0000
ROA not before: Wed 14 Feb 2024 13:27:54 +0000
ROA not after: Wed 12 Feb 2025 13:32:54 +0000
asID: 834
IP address blocks: 213.139.76.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 13:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ad:c3:12:29:b3:44:be:29:57:4f:13:67:38:3b:20:9d:2c:a2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 14 13:27:54 2024 GMT
Not After : Feb 12 13:32:54 2025 GMT
Subject: CN=8560206D3A460760EC19B2D423A23BAB15640CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:87:25:4e:0a:39:f4:54:a5:3b:b6:6a:5d:c0:
4c:87:83:7a:49:be:bc:12:de:67:0f:33:d5:ca:d8:
3d:73:f7:8d:01:3f:06:9c:4d:89:d0:19:c5:07:78:
a3:40:3c:67:fb:a6:20:02:7d:48:3b:14:53:14:e0:
d5:59:4b:41:46:70:55:e1:28:2e:2e:a4:55:b0:39:
78:3a:2e:dd:80:a6:ef:5b:41:00:2d:13:29:53:5c:
57:b8:87:b7:0d:ec:77:ff:ee:df:c9:10:f4:a8:d8:
b5:42:18:e0:37:f1:fd:8a:1d:7c:ef:e3:e1:e2:5f:
be:44:04:79:a1:c9:57:53:cf:bc:50:67:b5:67:b5:
3d:ac:c3:9b:be:4a:3b:86:90:a6:06:98:0b:4c:71:
99:0e:13:e8:a3:83:6c:66:b2:cc:9e:9b:3c:c1:cf:
62:56:c1:a7:af:7c:e9:98:74:41:4b:79:6d:e0:30:
bb:c3:37:32:38:50:b6:c9:6f:af:09:4a:2f:4b:44:
97:97:16:fd:42:43:28:c5:29:7b:18:4a:8f:16:a8:
91:53:e8:b5:82:a6:f3:5b:fc:cd:78:11:48:22:e1:
5d:ef:ac:89:fe:9e:9a:4a:42:68:e1:3e:4f:2a:08:
6f:a4:8d:78:64:38:6a:3a:84:9e:50:1c:03:ec:c1:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:60:20:6D:3A:46:07:60:EC:19:B2:D4:23:A2:3B:AB:15:64:0C:A0
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.76.0/23
Signature Algorithm: sha256WithRSAEncryption
56:fa:dd:14:ff:01:f7:75:35:04:ee:fe:40:6d:8c:b1:76:0c:
05:b4:ba:09:0a:4c:f2:4f:c4:05:71:ad:93:4f:a8:a3:97:df:
cb:0b:ca:82:74:cf:e5:7a:69:7c:0a:47:3b:99:3a:6a:2a:7b:
c1:44:a7:a2:a8:bc:a1:04:9a:66:17:b7:d1:d8:81:5c:6a:50:
96:dd:6e:e9:ae:77:50:74:c3:32:49:f4:57:17:ee:3f:f6:e5:
ad:bc:ed:c5:38:51:d7:5a:6c:34:5e:25:38:c0:23:67:c0:85:
82:39:9a:0b:9b:be:a0:0a:7b:33:11:e6:ea:62:9b:8a:32:05:
2c:f9:e7:6b:cf:d6:51:7b:28:17:94:6b:8e:73:ea:83:46:ee:
3a:e6:58:48:8c:2d:f1:6f:f4:22:a8:30:43:0d:52:5e:f9:59:
f7:6d:a2:ee:a2:47:d5:34:9c:cd:b4:7f:93:1d:56:17:47:ff:
ee:bc:50:54:4e:78:80:8a:be:49:c9:d1:ef:d7:c7:3e:c3:5a:
e5:d1:25:25:86:5c:dc:24:3e:da:aa:71:14:9f:43:d4:07:fb:
5a:81:62:fc:63:ab:56:98:11:d4:6c:17:37:ae:f5:34:d2:61:
5b:58:78:07:75:b5:11:6f:9e:c5:93:2e:52:02:9e:ba:03:d5:
a3:0d:c7:df
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUbq3DEimzRL4pV08TZzg7IJ0sotcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNDAyMTQxMzI3NTRaFw0yNTAyMTIxMzMyNTRaMDMxMTAvBgNV
BAMTKDg1NjAyMDZEM0E0NjA3NjBFQzE5QjJENDIzQTIzQkFCMTU2NDBDQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDshyVOCjn0VKU7tmpdwEyHg3pJ
vrwS3mcPM9XK2D1z940BPwacTYnQGcUHeKNAPGf7piACfUg7FFMU4NVZS0FGcFXh
KC4upFWwOXg6Lt2Apu9bQQAtEylTXFe4h7cN7Hf/7t/JEPSo2LVCGOA38f2KHXzv
4+HiX75EBHmhyVdTz7xQZ7VntT2sw5u+SjuGkKYGmAtMcZkOE+ijg2xmssyemzzB
z2JWwaevfOmYdEFLeW3gMLvDNzI4ULbJb68JSi9LRJeXFv1CQyjFKXsYSo8WqJFT
6LWCpvNb/M14EUgi4V3vrIn+nppKQmjhPk8qCG+kjXhkOGo6hJ5QHAPswR1FAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUhWAgbTpGB2DsGbLUI6I7qxVkDKAwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3
MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHVi0ww
DQYJKoZIhvcNAQELBQADggEBAFb63RT/Afd1NQTu/kBtjLF2DAW0ugkKTPJPxAVx
rZNPqKOX38sLyoJ0z+V6aXwKRzuZOmoqe8FEp6KovKEEmmYXt9HYgVxqUJbdbumu
d1B0wzJJ9FcX7j/25a287cU4UddabDReJTjAI2fAhYI5mgubvqAKezMR5upim4oy
BSz552vP1lF7KBeUa45z6oNG7jrmWEiMLfFv9CKoMEMNUl75Wfdtou6iR9U0nM20
f5MdVhdH/+68UFROeICKvknJ0e/Xxz7DWuXRJSWGXNwkPtqqcRSfQ9QH+1qBYvxj
q1aYEdRsFzeu9TTSYVtYeAd1tRFvnsWTLlICnroD1aMNx98=
-----END CERTIFICATE-----
Generated at Wed Feb 21 19:06:54 2024 by rpki-client on console-ams.rpki-client.org