Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203333393131.roa
File: 3231332e3133392e37372e302f32342d3234203d3e203333393131.roa (raw, json)
Hash identifier: XRPCW8NdXMzodXITTrIv/Jq4AC4Xjtcd6hFxWQNHcy0=
Subject key identifier: A2:5B:EA:06:81:E9:A1:33:B4:9B:27:87:BC:C4:EA:8C:A1:9F:CB:56
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 418D548B689946E5B4CC47F12FB9A6EC1B575040
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203333393131.roa
Signing time: Thu 29 Feb 2024 14:48:14 +0000
ROA not before: Thu 29 Feb 2024 14:43:14 +0000
ROA not after: Thu 27 Feb 2025 14:48:14 +0000
asID: 33911
IP address blocks: 213.139.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 11:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:8d:54:8b:68:99:46:e5:b4:cc:47:f1:2f:b9:a6:ec:1b:57:50:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 29 14:43:14 2024 GMT
Not After : Feb 27 14:48:14 2025 GMT
Subject: CN=A25BEA0681E9A133B49B2787BCC4EA8CA19FCB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:30:06:99:59:f4:df:f1:87:4d:37:c7:99:
1d:59:83:5b:a3:98:8e:ef:22:36:54:7f:b4:3e:d1:
31:28:66:86:f1:c3:5d:f4:89:19:f8:31:d5:cc:a5:
25:7a:12:29:9a:32:eb:c0:d6:a3:8b:16:f6:57:28:
0c:c7:a9:2d:f0:2e:31:82:53:73:d8:b4:38:7c:ad:
36:f9:ed:41:26:0f:06:0a:c1:82:2f:1c:43:b9:64:
17:c6:da:79:a6:7c:8f:aa:a4:1a:f4:a0:51:8c:9f:
2c:d3:05:d3:3b:58:c2:69:54:b4:48:a4:cb:89:b0:
dd:85:d3:79:f4:10:1a:98:fc:6c:dc:55:57:6d:97:
a2:b8:47:d9:f9:b0:35:e9:39:0c:c7:15:e0:b6:47:
e1:a5:e3:4d:de:af:af:d8:58:5b:ec:ba:bc:c2:5d:
22:83:17:f9:a8:06:28:81:5f:f0:74:a6:6f:0c:eb:
bd:ef:0c:61:d2:27:53:71:5b:da:85:8f:49:b6:6f:
c9:93:d2:2a:49:23:4a:df:a4:86:89:49:87:bd:34:
01:1b:f2:2b:ac:62:50:46:5c:f5:bb:f0:14:18:8b:
8a:7a:fd:58:58:bb:7c:7a:02:49:42:3a:84:7a:d8:
59:fc:59:88:a7:0d:60:e3:ea:0c:b0:65:40:16:3a:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:EA:06:81:E9:A1:33:B4:9B:27:87:BC:C4:EA:8C:A1:9F:CB:56
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203333393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:99:64:ac:33:6c:b4:2c:c3:ee:72:f2:79:43:bf:0c:54:51:
ba:49:9e:cd:17:4b:63:cd:2c:78:19:81:f8:4d:e8:66:72:58:
0e:9e:21:7c:56:36:ae:ed:e5:2a:57:93:24:8f:43:2b:40:c1:
19:69:e0:8b:cd:ff:08:df:98:18:29:bd:eb:ce:42:c4:9d:7f:
e3:bb:00:cf:ed:e9:7d:f6:e8:e4:9d:6d:fe:3a:ae:ee:bf:49:
f7:d4:a7:7f:41:3c:69:63:64:64:80:92:2f:cc:1f:5d:20:d4:
e2:ef:66:6c:d7:ab:ba:78:de:5b:1d:76:e9:96:ba:99:20:b9:
99:7d:fd:88:e7:f7:f8:92:84:b5:4f:4e:ae:27:bf:aa:26:a5:
b8:64:0c:65:7d:e4:3b:0d:b6:37:6c:a7:0b:99:3e:11:6d:d9:
98:f0:56:a2:e0:92:2a:6a:d1:e7:1a:25:b3:5c:88:c9:66:79:
7f:f4:7a:b4:94:f8:d5:03:c7:91:c3:07:3f:ab:ab:a7:27:1e:
0a:f4:25:10:1e:75:79:9c:5b:34:e4:35:43:51:26:9b:50:0a:
df:63:9c:65:29:20:49:87:cc:fa:77:fe:c6:15:a8:d3:bf:1e:
8b:fb:c0:0c:e6:af:10:5e:bf:22:37:64:1f:55:02:96:32:1f:
9f:b5:18:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:55 2025 by rpki-client