Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203231383539.roa
File: 3231332e3133392e37372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: wu9LtRPoENB2cIuIVw2XRVBFjfpT6Vd5h0H+2UNzpkc=
Subject key identifier: F9:6B:06:89:CA:8C:EA:9B:EC:33:61:23:E8:98:40:0B:F3:3E:9D:63
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 6608FD63CE819D77BF78E6AAC9C271833F3771A1
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203231383539.roa
Signing time: Wed 25 Sep 2024 07:11:54 +0000
ROA not before: Wed 25 Sep 2024 07:06:54 +0000
ROA not after: Wed 24 Sep 2025 07:11:54 +0000
asID: 21859
IP address blocks: 213.139.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:08:fd:63:ce:81:9d:77:bf:78:e6:aa:c9:c2:71:83:3f:37:71:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 25 07:06:54 2024 GMT
Not After : Sep 24 07:11:54 2025 GMT
Subject: CN=F96B0689CA8CEA9BEC336123E898400BF33E9D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:36:15:06:12:39:a4:e0:eb:c8:d8:e2:79:
18:ee:1b:8f:68:68:14:83:cf:02:4e:aa:d3:d9:9f:
5b:ac:92:20:6d:f2:ee:51:f9:24:0b:c1:d6:4b:1c:
6a:3b:82:ea:1e:04:be:1f:16:4d:09:3c:a5:55:6d:
1e:9b:fe:35:4e:bf:7e:07:05:9d:70:50:50:d7:1e:
ff:50:f8:ea:2d:a2:83:7c:48:d9:6f:d4:ac:d1:1e:
bb:c6:e1:30:2c:01:0f:00:38:05:55:80:a6:38:e7:
92:15:e8:9f:2a:5b:32:33:a2:13:5a:33:b2:be:72:
aa:a8:a9:c8:55:58:f2:26:58:56:83:a5:b0:17:00:
a0:a6:f0:1d:86:e9:5c:ed:a0:4d:fe:80:5f:2c:50:
95:58:28:22:a7:66:8a:4b:1c:bf:34:98:1c:20:68:
93:73:ac:09:67:62:9d:2d:8c:15:63:3f:fd:84:a1:
7f:d7:5e:a3:91:bf:bf:1e:3c:38:24:21:c6:43:fd:
65:13:57:47:64:ba:d6:4e:3b:19:d5:d0:eb:d8:58:
2b:34:90:70:ec:88:fc:fd:b5:e2:73:c4:10:6e:9b:
8f:0c:e9:5d:50:92:b1:e0:d7:cd:ae:d0:5d:46:9f:
46:4b:4f:38:ff:a0:3c:0c:eb:de:89:50:4a:c7:44:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6B:06:89:CA:8C:EA:9B:EC:33:61:23:E8:98:40:0B:F3:3E:9D:63
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.77.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2f:f9:26:cb:05:17:6e:e4:ac:93:eb:76:f2:13:e6:59:6a:
08:36:6a:fe:a2:55:d0:2a:c7:3d:52:71:5f:4f:68:a7:34:fd:
66:39:e0:cb:08:21:7d:7d:1f:53:7f:ad:99:4f:13:89:ee:9f:
69:9b:db:4e:88:6f:32:72:35:53:a5:43:45:ac:2e:50:3f:9b:
25:65:4e:e5:d0:e5:cc:10:38:45:b5:d9:10:db:ef:ad:b7:07:
a4:d6:16:98:15:8d:0f:71:c8:b5:34:08:48:74:a9:1f:28:d6:
e5:4b:1f:83:7c:fa:c6:c1:e2:f6:db:7e:da:fa:50:17:85:54:
48:fa:46:f7:de:0e:92:72:4a:50:a9:cf:12:20:c2:1e:52:0e:
82:68:70:f3:1a:09:31:64:7b:7f:dc:03:97:3c:fa:3e:b8:a5:
0f:ea:13:72:a3:21:19:1a:f6:72:85:37:fe:95:9e:52:db:dd:
0d:37:fa:a7:e9:38:ee:fa:a4:4f:0f:7a:d5:b6:88:49:8c:55:
8c:58:3f:47:0f:79:eb:e7:60:1e:26:31:ef:9b:89:bd:fe:3c:
67:f0:db:f3:3c:86:dd:77:d9:d5:6e:3f:51:19:93:3f:c8:27:
4e:8b:7e:e5:43:37:3d:0f:a8:31:5d:b6:80:45:4f:42:7b:84:
0a:df:4a:6a
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 25 01:46:47 2024 by rpki-client on console-ams.rpki-client.org