Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32332d3234203d3e2037303138.roa
File: 3231332e3133392e37382e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: U6fvjeznXfcRUuc9ZaPLolW0bv0ZXKtQO3KDdeYeImE=
Subject key identifier: 03:B8:D5:2E:C9:16:20:0A:3A:10:FB:7D:65:60:09:77:1E:C2:80:8C
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 1133C79E2BAAD610775D7D1989E7DFFA64E5DDF7
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32332d3234203d3e2037303138.roa
Signing time: Thu 30 Nov 2023 20:27:12 +0000
ROA not before: Thu 30 Nov 2023 20:22:12 +0000
ROA not after: Thu 28 Nov 2024 20:27:12 +0000
asID: 7018
IP address blocks: 213.139.78.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:33:c7:9e:2b:aa:d6:10:77:5d:7d:19:89:e7:df:fa:64:e5:dd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Nov 30 20:22:12 2023 GMT
Not After : Nov 28 20:27:12 2024 GMT
Subject: CN=03B8D52EC916200A3A10FB7D656009771EC2808C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:e8:bb:c0:ad:44:18:5c:fa:02:de:ef:00:
57:e1:d7:18:86:d1:dc:b3:f2:9a:89:ae:04:73:66:
bc:cb:bb:25:b4:79:26:85:ef:98:c9:f2:89:7e:34:
ef:76:43:24:81:7d:33:d6:f5:79:b2:32:ff:c8:e8:
32:a3:fb:82:85:10:ef:ba:f1:1c:49:f0:71:0e:ca:
97:ec:8f:b2:95:25:65:1d:01:43:6b:12:fc:a6:54:
d2:39:ca:ff:d5:4b:e1:11:3d:45:ed:7b:f7:d2:df:
e2:1a:7d:93:33:94:0e:0e:04:36:aa:be:6c:10:e7:
b3:04:21:c4:e7:6a:d2:2b:7e:68:94:6e:ae:c0:33:
65:ca:21:b3:f7:43:7f:d6:d9:8e:19:10:ad:f7:39:
47:30:6e:ba:2a:00:87:76:51:bd:71:07:66:46:ca:
39:dd:00:58:9f:6d:f7:6c:e0:18:52:c2:05:3e:bc:
8b:00:51:af:75:d9:6f:70:41:31:c0:9e:12:6a:ce:
0d:b0:7a:f0:31:6e:a0:cf:8e:7e:08:7f:26:ab:3f:
51:c0:76:cb:ce:da:ce:a5:12:cf:19:9f:80:7a:2e:
1b:a4:d7:a8:ed:ee:9e:6f:91:eb:d2:35:7a:14:b0:
c6:6d:1d:76:64:ae:73:72:ef:69:c6:0f:c2:27:c2:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B8:D5:2E:C9:16:20:0A:3A:10:FB:7D:65:60:09:77:1E:C2:80:8C
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.78.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:2c:f1:4e:79:0e:26:d6:e1:72:94:d2:76:1e:ee:2f:65:27:
ad:3e:3e:b7:49:11:42:68:64:fa:ab:1c:d8:f5:7d:d7:c5:64:
9d:79:e7:06:04:43:19:db:73:ad:73:6c:e1:d7:c8:d5:61:2f:
7a:e9:71:d8:ad:0c:26:08:47:3a:bc:56:52:e3:e7:a5:a5:5e:
30:96:9c:79:76:a7:8b:7c:83:2b:83:cb:59:a2:76:c0:3f:54:
96:a5:53:f0:fb:1d:f3:c1:06:ce:ae:2f:6f:c9:04:cb:80:2e:
de:40:65:f7:75:c9:48:9e:1d:10:a3:1e:4a:56:14:50:56:a8:
58:8b:d9:68:0b:ef:0f:79:f8:54:b0:1f:f2:63:ed:4a:80:c7:
8e:d3:82:7f:43:43:57:e2:bf:88:ea:6f:bc:e6:22:39:e1:2a:
88:c6:96:7d:34:2f:f0:29:d8:b6:e4:c7:7d:e3:f4:d3:97:d8:
e6:1a:81:99:eb:13:9b:75:c0:73:6d:71:8a:f0:b8:09:1d:9b:
73:96:59:f7:43:5a:53:7d:46:fe:c5:dc:c6:b8:3d:ee:1f:19:
aa:95:b0:b8:59:ab:7c:6e:2b:82:de:6a:5e:92:a7:23:72:2f:
f2:14:7f:67:fc:ad:47:3c:0e:5a:14:86:21:3b:2e:0e:42:c8:
1a:3f:7c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 01:44:31 2023 by rpki-client on console-fra.rpki-client.org