Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e37382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KwC7xt60ddPeMwoDTlaq4ILnpce4jqcbWDqypfPTyaA=
Subject key identifier: 97:09:19:99:68:53:66:4E:1B:01:0F:9E:AE:C4:EC:C9:F4:9A:1C:EE
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 0AE32A10CD4164220A02A52EECC4EF84CD700C6E
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e20383334.roa
Signing time: Tue 13 Aug 2024 00:01:04 +0000
ROA not before: Mon 12 Aug 2024 23:56:04 +0000
ROA not after: Tue 12 Aug 2025 00:01:04 +0000
asID: 834
IP address blocks: 213.139.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 13:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e3:2a:10:cd:41:64:22:0a:02:a5:2e:ec:c4:ef:84:cd:70:0c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Aug 12 23:56:04 2024 GMT
Not After : Aug 12 00:01:04 2025 GMT
Subject: CN=970919996853664E1B010F9EAEC4ECC9F49A1CEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:2e:06:75:2b:a1:63:33:3d:c0:7e:9c:d8:
4e:2a:fd:fc:c8:29:9d:66:4c:f0:7d:92:fe:1f:de:
3e:f9:0b:f4:23:5b:20:e9:4d:5b:7e:3a:57:58:50:
cc:0c:2e:9b:68:5d:92:0f:66:f5:89:1d:b0:fd:d2:
b8:c9:2c:48:09:c3:fc:2a:89:d1:f3:af:9a:8e:e2:
a7:85:4d:17:f5:38:86:8d:b5:9f:2e:b1:bb:f6:37:
ff:89:71:b8:c2:5d:c2:20:34:6d:f6:10:46:f9:6b:
42:ce:91:11:61:4b:f3:ef:06:35:12:b7:16:3d:da:
e3:c0:ae:45:d0:1e:a1:33:33:55:31:f6:21:dd:d1:
61:5f:7d:29:9d:ba:ca:c3:1a:4f:4f:5c:7b:06:9b:
59:fb:f7:73:6c:38:ed:70:f5:04:7d:df:e9:3d:33:
39:85:4f:55:b2:f8:6b:01:0b:33:c8:44:58:f4:d4:
67:11:1e:b9:27:83:08:a1:e2:31:1c:75:21:b0:c4:
56:61:f4:d9:e4:1f:98:ef:38:b8:d8:e5:d0:45:41:
fe:d1:17:3e:dc:f1:1d:bc:eb:15:c5:12:c6:fb:9a:
c6:0f:b8:28:da:59:79:ce:72:38:7c:b4:85:70:e9:
ad:14:58:f7:40:16:69:41:91:a1:50:18:ed:50:9e:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:09:19:99:68:53:66:4E:1B:01:0F:9E:AE:C4:EC:C9:F4:9A:1C:EE
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:55:4c:e5:98:72:6e:15:6c:59:6d:d7:66:ca:95:10:aa:de:
0d:6d:71:f1:0e:c8:59:96:03:d8:e7:16:76:1f:00:80:12:09:
6e:fd:a9:17:78:e5:57:07:c5:29:9c:84:cc:d5:4b:11:67:3f:
0c:ca:2a:62:d0:9f:e2:05:04:03:3c:a7:89:b2:fd:c7:77:1a:
35:c8:89:9c:f3:87:58:6b:c8:06:32:65:f1:8b:43:d5:63:7d:
67:98:0e:0b:53:e5:80:3a:8f:af:10:26:42:7e:48:a6:73:e4:
e3:a2:11:f9:94:6b:80:74:f2:72:30:81:e4:77:9d:8c:41:e0:
a2:35:dd:37:69:6e:84:b0:a3:74:dc:ac:da:83:20:fc:70:62:
04:20:07:3c:2b:60:3e:7c:81:d5:c6:97:22:94:95:7d:5f:a8:
da:b4:63:2f:a3:f9:19:c8:dc:31:2b:76:bb:bd:69:79:e8:9b:
07:f3:b5:d7:02:71:dd:b7:a3:f9:bd:7e:3b:15:ce:90:f9:20:
48:8a:45:a0:ec:9e:2b:2b:1d:27:d9:a3:6c:20:61:18:58:36:
45:0b:22:7f:ea:c3:1b:de:ff:25:ec:35:ad:f3:c9:47:c1:c0:
e5:84:85:9a:af:49:8c:62:33:63:8d:75:06:aa:cb:c8:be:c6:
da:7b:6e:dc
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUCuMqEM1BZCIKAqUu7MTvhM1wDG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNDA4MTIyMzU2MDRaFw0yNTA4MTIwMDAxMDRaMDMxMTAvBgNV
BAMTKDk3MDkxOTk5Njg1MzY2NEUxQjAxMEY5RUFFQzRFQ0M5RjQ5QTFDRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxi4GdSuhYzM9wH6c2E4q/fzI
KZ1mTPB9kv4f3j75C/QjWyDpTVt+OldYUMwMLptoXZIPZvWJHbD90rjJLEgJw/wq
idHzr5qO4qeFTRf1OIaNtZ8usbv2N/+JcbjCXcIgNG32EEb5a0LOkRFhS/PvBjUS
txY92uPArkXQHqEzM1Ux9iHd0WFffSmdusrDGk9PXHsGm1n793NsOO1w9QR93+k9
MzmFT1Wy+GsBCzPIRFj01GcRHrkngwih4jEcdSGwxFZh9NnkH5jvOLjY5dBFQf7R
Fz7c8R286xXFEsb7msYPuCjaWXnOcjh8tIVw6a0UWPdAFmlBkaFQGO1QniZ/AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUlwkZmWhTZk4bAQ+ersTsyfSaHO4wHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADVi04w
DQYJKoZIhvcNAQELBQADggEBAKFVTOWYcm4VbFlt12bKlRCq3g1tcfEOyFmWA9jn
FnYfAIASCW79qRd45VcHxSmchMzVSxFnPwzKKmLQn+IFBAM8p4my/cd3GjXIiZzz
h1hryAYyZfGLQ9VjfWeYDgtT5YA6j68QJkJ+SKZz5OOiEfmUa4B08nIwgeR3nYxB
4KI13TdpboSwo3TcrNqDIPxwYgQgBzwrYD58gdXGlyKUlX1fqNq0Yy+j+RnI3DEr
dru9aXnomwfztdcCcd23o/m9fjsVzpD5IEiKRaDsnisrHSfZo2wgYRhYNkULIn/q
wxve/yXsNa3zyUfBwOWEhZqvSYxiM2ONdQaqy8i+xtp7btw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:13 2025 by rpki-client