Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323133373330.roa
File: 3231332e3133392e37392e302f32342d3234203d3e20323133373330.roa (raw, json)
Hash identifier: vAEVOcVcTwUrNh1eD+hgYfP27JnVVDzUFQs1sa3MEww=
Subject key identifier: BC:5D:15:53:AC:9A:B4:93:BA:C1:84:B7:DF:A0:9A:A4:56:D8:F8:77
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 361D47251E22F2E28E7399F5EE8ED5F0F07C8A21
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323133373330.roa
Signing time: Sat 14 Dec 2024 07:04:37 +0000
ROA not before: Sat 14 Dec 2024 06:59:37 +0000
ROA not after: Sat 13 Dec 2025 07:04:37 +0000
asID: 213730
IP address blocks: 213.139.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Dec 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:1d:47:25:1e:22:f2:e2:8e:73:99:f5:ee:8e:d5:f0:f0:7c:8a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Dec 14 06:59:37 2024 GMT
Not After : Dec 13 07:04:37 2025 GMT
Subject: CN=BC5D1553AC9AB493BAC184B7DFA09AA456D8F877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:34:42:6f:53:9b:f6:d1:8e:87:2f:12:14:
8c:31:5f:0d:a0:8f:5f:bb:5a:1e:a8:48:da:f6:a0:
bf:d5:b5:34:4c:bb:6e:24:11:f7:79:43:5c:84:34:
f9:ec:86:56:f1:52:e5:1e:66:a0:f3:1b:28:02:45:
16:bc:9e:63:8a:a5:c3:cf:59:ba:a8:cf:ca:99:c3:
48:4c:79:95:a3:c3:d9:b4:3a:69:1b:79:2f:97:af:
00:68:2a:09:d1:a2:1b:1b:d3:3f:f9:01:c0:a3:1f:
21:ce:f7:20:99:cb:c0:cf:96:98:c0:01:b3:3f:a6:
48:fb:2c:83:50:bb:cb:60:5c:88:35:3f:af:42:21:
7e:f2:ed:45:60:85:81:b0:2f:b2:82:36:2f:f1:10:
69:14:4c:51:45:c7:85:0c:88:7e:1c:f3:e7:53:25:
99:ce:c4:4d:7d:8e:b2:5a:b9:17:1d:01:a8:87:25:
29:a1:72:80:fc:c3:99:f4:b6:49:9f:9f:0e:d9:e4:
84:a4:d9:1c:51:f0:c8:06:15:4e:d6:ca:e4:14:f1:
3d:40:d8:a9:11:d9:e1:0a:df:ac:da:cd:ea:f8:f4:
0d:f4:18:ba:1e:70:09:83:23:7d:74:53:25:d9:6d:
72:9d:6d:00:9a:59:9b:ea:9e:d1:d3:11:77:52:cd:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5D:15:53:AC:9A:B4:93:BA:C1:84:B7:DF:A0:9A:A4:56:D8:F8:77
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323133373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.79.0/24
Signature Algorithm: sha256WithRSAEncryption
16:84:be:99:87:db:66:32:e1:80:6e:ec:ac:22:d1:d1:55:60:
c2:89:b5:07:f6:69:6b:e6:ab:bf:b3:ce:d3:b8:db:1d:88:a4:
a9:d9:51:88:8b:0e:e3:94:d0:7b:08:2f:31:76:60:a7:4f:f1:
4e:69:6d:08:e7:65:03:2d:d7:83:38:9f:ff:c0:2c:0a:e7:ec:
b1:6d:a0:09:0f:94:3d:ba:bd:a3:5c:60:a2:ed:f0:5d:1d:50:
1d:cb:37:4b:61:d0:19:18:96:1d:13:ea:a2:c6:6f:71:83:a4:
0f:a5:0e:74:ac:5a:39:6d:1d:52:b5:73:5d:59:70:20:7f:8e:
d0:6a:e0:11:d2:20:ed:2f:d8:cb:83:fd:43:38:2f:0f:3b:0b:
b6:a0:db:86:bd:c2:fc:1c:5a:df:d2:67:88:5e:e4:11:dc:bc:
97:a8:1e:e9:ba:58:9b:b6:b2:19:51:d4:6f:fc:32:8b:57:d4:
a6:da:65:d6:97:6a:21:a6:fa:29:fe:f4:7f:12:a8:60:7b:ad:
bb:26:7c:ae:74:7b:c2:83:79:c8:fc:c5:45:a8:d4:0f:b6:83:
74:ec:96:4d:24:c4:16:d4:91:c8:71:68:5e:e8:f4:a9:82:b7:
e7:e8:4e:f0:f3:91:96:47:0b:0b:1b:12:08:da:19:3c:ed:7c:
0f:ad:fc:43
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNh1HJR4i8uKOc5n17o7V8PB8iiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNDEyMTQwNjU5MzdaFw0yNTEyMTMwNzA0MzdaMDMxMTAvBgNV
BAMTKEJDNUQxNTUzQUM5QUI0OTNCQUMxODRCN0RGQTA5QUE0NTZEOEY4NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bjRCb1Ob9tGOhy8SFIwxXw2g
j1+7Wh6oSNr2oL/VtTRMu24kEfd5Q1yENPnshlbxUuUeZqDzGygCRRa8nmOKpcPP
Wbqoz8qZw0hMeZWjw9m0OmkbeS+XrwBoKgnRohsb0z/5AcCjHyHO9yCZy8DPlpjA
AbM/pkj7LINQu8tgXIg1P69CIX7y7UVghYGwL7KCNi/xEGkUTFFFx4UMiH4c8+dT
JZnOxE19jrJauRcdAaiHJSmhcoD8w5n0tkmfnw7Z5ISk2RxR8MgGFU7WyuQU8T1A
2KkR2eEK36zazer49A30GLoecAmDI310UyXZbXKdbQCaWZvqntHTEXdSzVpzAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUvF0VU6yatJO6wYS336CapFbY+HcwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzMzNzMzMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADVi08wDQYJKoZIhvcNAQELBQADggEBABaEvpmH22Yy4YBu7Kwi0dFVYMKJtQf2
aWvmq7+zztO42x2IpKnZUYiLDuOU0HsILzF2YKdP8U5pbQjnZQMt14M4n//ALArn
7LFtoAkPlD26vaNcYKLt8F0dUB3LN0th0BkYlh0T6qLGb3GDpA+lDnSsWjltHVK1
c11ZcCB/jtBq4BHSIO0v2MuD/UM4Lw87C7ag24a9wvwcWt/SZ4he5BHcvJeoHum6
WJu2shlR1G/8MotX1KbaZdaXaiGm+in+9H8SqGB7rbsmfK50e8KDecj8xUWo1A+2
g3Tslk0kxBbUkchxaF7o9KmCt+foTvDzkZZHCwsbEgjaGTztfA+t/EM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:17 2025 by rpki-client