Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203230343733.roa
File: 3231332e3133392e37372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: N9chjMivZUxigtP8CjQSy4/kpn2UB0reoT1DBQ3A20U=
Subject key identifier: 95:A3:10:53:79:88:7F:2F:2C:DA:BC:86:9F:EC:15:53:27:DA:24:74
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 48D8225862D311AA5D6FFFDE2C526EDF41A54F88
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203230343733.roa
Signing time: Wed 27 Nov 2024 12:59:55 +0000
ROA not before: Wed 27 Nov 2024 12:54:55 +0000
ROA not after: Wed 26 Nov 2025 12:59:55 +0000
asID: 20473
IP address blocks: 213.139.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Mar 2025 00:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d8:22:58:62:d3:11:aa:5d:6f:ff:de:2c:52:6e:df:41:a5:4f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Nov 27 12:54:55 2024 GMT
Not After : Nov 26 12:59:55 2025 GMT
Subject: CN=95A3105379887F2F2CDABC869FEC155327DA2474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:fa:85:bd:8b:7d:bc:bb:46:b6:34:e2:1d:
b7:21:98:fd:57:45:b8:b0:73:3c:ed:5d:9f:f4:20:
1e:6c:ce:a8:43:5e:d6:d6:7f:c4:2e:40:fd:b9:2d:
00:b2:df:4a:b2:0a:76:4b:2f:ec:4b:e5:75:87:ee:
a7:c0:95:1a:fc:cc:bb:1f:bd:57:20:9d:21:a2:30:
3c:ee:df:e3:e5:d0:98:c8:75:b1:7e:df:15:e9:82:
1b:73:a9:1a:0d:e0:c3:a8:ad:d9:15:66:0c:69:d8:
b5:c7:6f:06:0b:13:08:58:ae:a5:50:de:31:ee:75:
17:8c:0f:ad:ce:5d:e5:b7:e6:b0:71:2a:97:3f:51:
af:6f:1c:a5:c3:c1:85:b8:f4:0e:bf:99:e1:ca:6a:
a5:78:63:f7:f3:44:f6:3c:55:14:ec:17:44:80:ca:
41:12:de:fa:32:10:40:73:4c:7d:21:7c:47:bd:ef:
1b:31:de:0a:d8:0b:24:2a:39:d0:44:3c:bd:e8:31:
4d:a5:c1:55:34:72:1b:fa:71:88:8b:c3:6f:c5:bc:
cd:cc:58:90:02:22:a8:3e:8c:ac:b3:0c:ea:07:6c:
c9:50:5d:df:5f:27:f7:13:93:ca:0d:21:d1:6b:6e:
1d:b8:26:be:d9:59:c6:af:1a:7f:97:b2:68:9c:47:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:10:53:79:88:7F:2F:2C:DA:BC:86:9F:EC:15:53:27:DA:24:74
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.77.0/24
Signature Algorithm: sha256WithRSAEncryption
28:25:88:b0:2c:34:3d:3b:37:bc:a0:e2:13:a3:20:41:c8:4f:
4b:09:27:83:eb:5f:4d:1c:23:1e:19:81:fd:09:6f:e2:d9:d8:
93:26:e2:87:06:a5:86:80:6d:00:e8:5a:31:99:fb:1e:a3:8d:
78:3a:34:78:ed:d5:90:e4:e1:04:82:5c:4d:2b:eb:f6:a2:33:
4f:74:8a:5b:af:9f:09:53:cd:33:32:4f:95:c4:cc:3e:49:c2:
e2:a9:c1:81:a3:d4:e2:0d:7b:21:1c:2c:1b:29:7e:80:4c:2e:
5b:51:70:0c:e6:d2:87:20:bb:50:6b:51:39:f8:86:c3:ef:44:
97:2b:e4:01:93:d0:44:ae:e8:4d:74:3c:90:fe:0a:b4:68:3d:
7b:6c:ff:57:31:02:c3:49:64:fc:2a:6c:85:ee:88:1f:fe:8e:
6d:8d:0f:eb:a4:d0:77:ce:6a:e2:c8:96:75:f7:06:61:b0:f6:
be:63:49:74:08:26:77:7b:4e:cf:96:2b:06:c1:58:37:df:43:
56:a2:aa:b3:6c:56:bd:f2:d8:a6:67:08:e2:dd:3d:f3:ef:aa:
b2:36:a2:3b:56:ae:a0:09:c7:0a:6a:bd:f2:40:2a:f7:42:a7:
a7:77:5b:9b:e0:63:53:5b:da:4e:ae:2c:ea:ec:d0:1b:ef:3e:
56:df:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:09 2025 by rpki-client