Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e203433343331.roa
File: 3231332e3133392e37382e302f32342d3234203d3e203433343331.roa (raw, json)
Hash identifier: e77LNHKdxTd7r1dbviVil+GaJurrJAN5hauLKmKkiqI=
Subject key identifier: DD:E1:7A:B1:2C:37:CE:5A:06:62:C7:BE:3D:C5:75:A7:02:EA:38:34
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 7881B10B1DE0E3ED966857983481A2E4A768E498
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e203433343331.roa
Signing time: Tue 07 Feb 2023 14:53:41 +0000
ROA not before: Tue 07 Feb 2023 14:48:41 +0000
ROA not after: Tue 06 Feb 2024 14:53:41 +0000
asID: 43431
IP address blocks: 213.139.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:81:b1:0b:1d:e0:e3:ed:96:68:57:98:34:81:a2:e4:a7:68:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 7 14:48:41 2023 GMT
Not After : Feb 6 14:53:41 2024 GMT
Subject: CN=DDE17AB12C37CE5A0662C7BE3DC575A702EA3834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:b1:b0:01:d0:b8:1c:d4:9d:d8:b1:de:8a:
56:4f:24:ad:cc:fd:cd:46:96:90:50:0f:3d:ab:2b:
40:bc:06:45:52:98:0a:ec:4e:fe:3f:f6:82:e7:b0:
fe:a5:7c:3d:e7:ba:b4:cd:52:dd:c5:41:db:18:92:
aa:61:8d:63:52:71:da:4f:43:78:b7:40:b6:82:9a:
41:af:e7:5d:13:96:61:4f:3d:8b:28:01:19:9e:b2:
79:81:b5:28:11:d1:81:c5:fd:2d:06:9d:ce:97:fe:
e8:73:5e:2f:66:a3:b6:3d:e1:45:a4:2f:a9:5e:b6:
54:ee:93:a4:ce:39:0b:d5:6b:3f:43:b5:f6:77:f2:
d4:98:55:63:d9:f4:22:cb:60:92:76:05:33:42:a5:
87:63:70:ce:72:63:86:26:99:79:dc:d6:6d:90:9a:
e7:16:43:da:9d:5f:64:a9:4d:39:7b:04:f6:17:bf:
f2:3f:79:a7:e2:65:fe:4f:34:35:0c:1c:8b:f7:db:
6c:ba:eb:58:12:88:b8:30:38:28:b4:8a:f6:2b:6e:
c6:10:61:1d:a6:f0:ad:19:54:24:b5:87:69:ae:89:
86:b4:7f:29:1b:da:0c:1e:60:06:4b:79:29:64:0e:
51:36:8c:a6:1d:d4:83:8d:46:81:b8:fd:f6:4b:4c:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:7A:B1:2C:37:CE:5A:06:62:C7:BE:3D:C5:75:A7:02:EA:38:34
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e203433343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f1:cb:6e:3d:a2:b4:90:c1:db:38:01:54:28:b9:9c:d4:7c:
86:c9:98:ee:cf:d6:e9:40:9d:96:e8:b7:44:a1:f7:e4:fc:5f:
03:4e:a2:3e:fd:b3:e2:ad:7e:02:6e:7d:d7:ba:28:42:0f:eb:
05:39:11:f7:4a:ad:3f:7f:5b:d3:00:10:84:c9:ef:d7:e5:a2:
b0:56:9b:23:bf:01:69:ed:b8:81:3d:5e:4a:62:e2:47:55:49:
61:8d:10:b9:b0:2d:ed:79:30:b0:2a:93:71:af:33:8d:dd:1e:
df:7c:88:f5:50:24:05:b2:80:70:ff:78:03:3a:78:51:27:d2:
60:ed:50:d4:81:df:82:d8:a4:6f:6e:e5:ed:fe:3e:3b:f5:fa:
c1:e0:e2:87:98:5e:55:e7:7b:aa:95:11:f0:78:f9:7e:cf:b1:
09:91:80:b0:ec:7b:5a:77:32:34:9e:a6:87:8c:e3:4d:b7:7d:
35:38:e6:ef:20:17:94:c5:f0:3d:13:16:17:96:d4:f3:80:78:
9b:97:d4:0e:51:dc:1e:00:dd:5b:35:f7:ca:ce:01:e6:57:e1:
59:99:36:b8:2b:9f:10:68:86:97:01:84:3e:bf:2e:20:16:d3:
5e:96:a1:fd:e9:65:92:6a:57:53:e6:20:25:90:e6:2f:5b:32:
e8:09:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org