Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e203231383539.roa
File: 3231332e3133392e37382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: HNxd0HMLN6jN6fawZjnI6Yvzkvk2xTbNH8xqW2Aorgo=
Subject key identifier: E2:5B:35:22:29:11:87:00:A4:10:E5:3F:FC:18:2A:1A:32:7E:88:B3
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 532F820C9B4C3513C13A13C0B26F8D7EAFC19294
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e203231383539.roa
Signing time: Sat 06 Jan 2024 09:57:49 +0000
ROA not before: Sat 06 Jan 2024 09:52:49 +0000
ROA not after: Sat 04 Jan 2025 09:57:49 +0000
asID: 21859
IP address blocks: 213.139.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2f:82:0c:9b:4c:35:13:c1:3a:13:c0:b2:6f:8d:7e:af:c1:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 6 09:52:49 2024 GMT
Not After : Jan 4 09:57:49 2025 GMT
Subject: CN=E25B352229118700A410E53FFC182A1A327E88B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:e6:58:dd:a4:fd:76:97:48:f2:b0:81:19:
81:a0:6e:16:6a:3f:b5:3f:28:be:76:76:f6:be:04:
41:c4:1c:2b:37:be:17:a1:f8:ef:11:d4:da:e4:0f:
4a:b8:29:01:32:0f:4e:e9:26:b0:05:54:da:1a:c2:
57:81:a6:55:c8:ae:a8:54:21:26:91:1e:57:b5:14:
d3:d5:c5:0c:6d:6c:fe:77:7f:02:74:34:69:82:6b:
e4:ad:c7:d6:ba:2a:b3:b9:10:1f:d3:56:a8:7d:28:
8c:f8:d2:40:bf:da:b3:92:6c:b5:1f:2c:d2:1e:7c:
8b:5a:b0:91:dc:5a:f2:ed:aa:6a:1c:73:93:d7:10:
3b:52:3d:7b:98:54:5d:0d:b2:ce:d2:60:be:1d:f2:
eb:9a:f2:7d:b4:30:e1:e5:a3:90:f1:46:5d:e1:f9:
e6:24:65:f8:1f:c5:5a:3b:98:05:73:16:23:a2:25:
f6:72:cd:37:ee:0a:f4:92:5b:8a:aa:42:75:aa:a1:
d9:2b:99:ba:ea:be:8a:01:34:5e:cd:ea:a0:78:7d:
24:27:de:66:b7:19:b8:e3:a9:9a:1c:44:a2:b9:e5:
51:91:90:d5:bc:24:df:95:90:b3:2b:0e:74:8f:39:
51:5d:cc:01:80:ef:a9:19:9c:26:fd:bf:86:47:a3:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:35:22:29:11:87:00:A4:10:E5:3F:FC:18:2A:1A:32:7E:88:B3
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cf:40:a2:08:12:4d:91:e3:9f:4c:49:70:9a:6e:83:70:b6:
34:85:72:eb:66:5d:3a:81:8a:cb:ad:e1:6c:8f:47:a2:e3:0f:
09:f4:b3:5a:68:62:99:a2:17:6d:f2:70:3c:ae:b8:5b:fd:87:
aa:6d:9c:9c:09:a8:4c:e1:b1:7e:72:cd:96:49:51:3f:6b:1b:
ab:b0:c3:27:8a:24:5e:0d:c0:68:cc:38:8e:ee:2c:6f:90:ca:
ba:04:fa:11:5f:10:44:61:1c:ee:cb:0e:f2:e7:40:fa:eb:0e:
43:46:c0:f0:51:80:87:92:6e:50:67:50:a7:e2:4c:2e:82:b3:
e9:98:ea:3d:d2:08:8d:1f:8b:62:7e:4b:62:7b:cb:e8:50:18:
94:d6:08:a7:ea:f0:09:26:3a:4d:97:ed:ac:22:21:6b:7a:d5:
8b:27:b5:fd:7b:69:76:7a:cc:2a:79:c5:65:dc:31:dc:d3:0a:
92:ae:41:4f:ea:5d:14:5b:f3:1d:90:b6:b4:d2:62:7f:42:d7:
bf:9d:cb:f6:28:1d:48:5d:27:54:45:e4:dd:cd:e9:f3:49:53:
84:c7:5c:d6:db:a3:d4:30:0a:a8:44:58:7e:84:1b:bb:a6:83:
bc:7e:9b:b0:38:e3:84:94:39:92:ba:5f:12:2e:32:86:64:ff:
61:01:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 04:21:15 2024 by rpki-client on console-ams.rpki-client.org