Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203430393735.roa
File: 3231332e3133392e37372e302f32342d3234203d3e203430393735.roa (raw, json)
Hash identifier: 4ZMaAlkeCiwdQ7NEFPnyf0yJdqAJjqU8o76zWNH6FUQ=
Subject key identifier: E0:B4:CF:1E:09:8E:DC:66:F1:83:29:91:0B:C4:0B:25:18:FB:06:9E
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 3E82E32E7CCAB7C80F10E870ACE9E4256BA8F866
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203430393735.roa
Signing time: Fri 01 Mar 2024 11:58:51 +0000
ROA not before: Fri 01 Mar 2024 11:53:51 +0000
ROA not after: Fri 28 Feb 2025 11:58:51 +0000
asID: 40975
IP address blocks: 213.139.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:82:e3:2e:7c:ca:b7:c8:0f:10:e8:70:ac:e9:e4:25:6b:a8:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Mar 1 11:53:51 2024 GMT
Not After : Feb 28 11:58:51 2025 GMT
Subject: CN=E0B4CF1E098EDC66F18329910BC40B2518FB069E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:55:84:2a:1c:07:a8:bc:94:c3:ca:e1:13:
5e:58:0c:1a:d2:4a:67:62:41:31:ef:96:42:43:0b:
c6:a2:46:df:2f:8b:e3:52:fa:82:0b:f1:c8:f1:95:
b4:84:f9:18:b5:41:66:28:ff:c0:4a:30:7e:c9:ea:
1d:96:77:c9:77:92:47:d4:35:f3:d9:db:57:60:97:
5f:4a:33:55:b2:8a:82:25:76:eb:6d:f6:9d:ab:8f:
8c:49:cc:63:93:5d:b5:62:0b:b4:9b:b5:98:36:83:
78:88:61:b3:54:2d:9a:9b:c6:f3:fa:ff:25:f8:a9:
97:dc:26:b4:1b:11:f0:f8:4e:98:93:cd:7c:bc:5a:
f8:70:89:97:41:af:29:83:74:8d:72:f8:0f:2c:5c:
2a:b9:ce:0b:13:91:78:95:95:c6:81:59:ec:48:5a:
0c:6f:d2:bd:88:9f:ed:83:40:cb:4e:68:21:6e:0d:
ac:74:2e:0d:e4:37:55:34:8e:c6:c5:b7:48:b9:ba:
a9:6e:c3:81:78:cf:fc:ce:09:b7:74:43:6a:96:bf:
c3:39:cd:fc:ac:3d:08:b6:4f:c5:0f:a9:a3:af:d8:
6b:f2:b2:b5:6b:3c:1e:a0:2e:61:c7:1b:93:41:dc:
06:84:60:e2:e8:5d:96:9f:16:a4:00:81:56:37:91:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:CF:1E:09:8E:DC:66:F1:83:29:91:0B:C4:0B:25:18:FB:06:9E
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37372e302f32342d3234203d3e203430393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:99:15:1b:ef:22:dd:30:5d:b1:43:36:35:09:18:ac:31:7d:
24:5c:fd:3b:8d:43:44:3e:b9:f9:af:b1:3a:19:41:b3:09:d1:
f3:ca:db:ca:67:06:76:a5:82:0d:d8:66:2e:26:a4:cd:9e:7b:
c6:24:bb:f4:62:56:26:a6:3b:77:47:c4:ba:c1:ad:d0:8a:09:
c9:b1:65:d9:c7:db:53:c5:ce:f4:90:76:56:78:87:ba:c5:e0:
dd:ec:c8:8e:19:21:22:b5:2b:74:70:7e:48:57:bc:9b:64:25:
f1:43:43:1f:6c:87:f4:25:ed:5c:c8:90:29:6c:7f:cb:6f:0d:
da:a7:1a:3a:69:5f:9a:e0:dc:7c:cd:fa:ac:9b:ab:b6:a4:db:
a7:02:13:25:76:59:3b:44:81:dc:9f:9e:c5:78:3b:31:65:b0:
e6:c1:39:fc:4d:1b:cb:66:13:df:05:c2:40:ed:2e:98:4c:4f:
f6:a4:49:84:44:91:81:d0:dd:87:22:f1:d5:35:0a:01:7e:15:
ca:ff:68:3c:eb:ee:1c:a9:93:94:58:16:c6:2b:a7:20:e9:44:
86:6c:dd:a3:42:c5:3e:56:3c:4e:36:98:02:65:ee:04:9e:f2:
dc:77:9c:79:9f:1e:74:42:80:ae:d2:18:71:e5:02:e8:35:d3:
80:be:f8:bb
-----BEGIN CERTIFICATE-----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Generated at Fri Mar 22 10:08:31 2024 by rpki-client on console-fra.rpki-client.org