Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32342d3234203d3e20323136303538.roa
File: 3231332e3133392e37362e302f32342d3234203d3e20323136303538.roa (raw, json)
Hash identifier: Rlkvr98P7zPXjHNscQiQv0E5wsmxmOFXES2hZvs/+FU=
Subject key identifier: 32:36:BA:A5:BA:CB:8E:0A:F1:DC:F1:88:9B:E5:14:07:EC:F4:C9:F0
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 7769F86FDC90CAFB7778BC98959B25ABB8A19C68
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32342d3234203d3e20323136303538.roa
Signing time: Wed 21 Feb 2024 13:55:56 +0000
ROA not before: Wed 21 Feb 2024 13:50:56 +0000
ROA not after: Wed 19 Feb 2025 13:55:56 +0000
asID: 216058
IP address blocks: 213.139.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 15:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:69:f8:6f:dc:90:ca:fb:77:78:bc:98:95:9b:25:ab:b8:a1:9c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 21 13:50:56 2024 GMT
Not After : Feb 19 13:55:56 2025 GMT
Subject: CN=3236BAA5BACB8E0AF1DCF1889BE51407ECF4C9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:e2:60:63:3a:c6:5e:28:b4:8a:8a:7a:e3:
cb:5e:b0:4b:0c:63:6d:aa:86:c4:d0:3b:ac:60:74:
a8:db:9b:54:02:25:d3:73:0a:4f:eb:dd:0b:8e:79:
e2:f1:dc:39:b3:c2:f3:1d:9c:7e:c7:a0:92:aa:19:
1d:05:a8:d8:f1:30:47:be:bc:3e:b9:31:60:a2:c9:
34:7c:02:60:70:9e:b2:8f:fb:7d:e2:ef:a1:af:4e:
e5:f5:3a:86:d9:cb:f8:0d:56:e5:78:c7:55:d2:20:
9b:05:31:07:5b:cc:dc:04:f0:09:40:17:2f:ff:76:
60:51:cb:81:67:10:09:22:45:3d:ee:5a:52:cd:94:
9e:49:01:72:a5:84:c7:97:27:31:d6:3b:e1:a8:54:
23:f7:9d:7d:dc:0f:95:9c:4b:a8:aa:e7:91:0c:c4:
19:67:2c:0e:3c:41:20:4e:90:f9:02:5a:8a:92:1a:
27:fb:f3:e1:22:5d:e0:64:b4:cf:29:d0:64:e4:3e:
87:c5:41:08:87:bd:aa:6b:be:b6:a1:e4:06:40:4b:
b1:ac:22:bb:96:dc:00:6a:a2:d0:75:e5:9d:05:42:
89:1b:8f:a0:a6:af:33:6b:2d:db:f6:25:09:8b:8d:
37:ad:33:f1:dd:4c:4c:74:70:c8:b6:53:79:fa:64:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:36:BA:A5:BA:CB:8E:0A:F1:DC:F1:88:9B:E5:14:07:EC:F4:C9:F0
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32342d3234203d3e20323136303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:55:ec:66:a3:c0:35:d6:ac:85:dc:11:63:26:70:94:be:d2:
6e:6c:ac:33:d3:c4:96:96:38:7a:f9:5c:3c:2c:32:d0:6f:1c:
d1:02:bc:19:49:68:1f:a4:b1:d4:09:86:55:83:c7:20:3b:6c:
87:54:c8:8d:d5:0b:eb:64:12:70:42:26:f5:34:dc:61:62:02:
b3:07:2f:38:8f:a8:2c:39:63:1c:ed:3d:bd:51:1f:75:3c:b2:
84:e5:19:e6:98:58:b8:a1:52:ce:a9:2e:b1:87:6d:95:09:8e:
d3:b5:d7:c6:37:84:99:71:80:26:34:10:da:ef:88:80:f9:05:
27:5e:22:38:74:ea:7e:aa:27:a9:c6:08:90:a4:25:db:33:4e:
eb:b2:dc:91:94:1c:b6:6b:ef:55:e0:8b:c0:fd:55:a2:22:75:
bf:ba:85:a6:fc:a0:5e:63:af:e1:e4:fa:ac:7c:ff:65:83:e8:
fa:c4:77:c8:45:fc:ba:7f:06:e6:14:5d:8f:0e:f5:25:7f:7b:
1e:0d:1b:a8:90:d6:24:7c:b0:85:61:e1:cf:c8:99:8c:d6:ee:
99:e6:d3:3f:c3:bf:ed:56:06:ce:23:67:c9:56:45:aa:56:71:
d0:7a:49:76:ba:77:8a:cc:19:6b:8a:a0:39:17:2e:27:31:84:
dc:60:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 17:44:38 2024 by rpki-client on console-fra.rpki-client.org