Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323135363232.roa
File: 3231332e3133392e37392e302f32342d3234203d3e20323135363232.roa (raw, json)
Hash identifier: hs9qfY67kbyawWpk+3d8O6Bg/yGvHGIcxxeZXeHruRA=
Subject key identifier: 6B:CF:61:99:61:C9:63:61:F6:40:B5:62:D7:BD:2A:3F:78:20:D3:7C
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 4F2CA6003DC585E4F0645B0F37B90839ECC882C7
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323135363232.roa
Signing time: Sun 15 Dec 2024 02:43:00 +0000
ROA not before: Sun 15 Dec 2024 02:38:00 +0000
ROA not after: Sun 14 Dec 2025 02:43:00 +0000
asID: 215622
IP address blocks: 213.139.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:2c:a6:00:3d:c5:85:e4:f0:64:5b:0f:37:b9:08:39:ec:c8:82:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Dec 15 02:38:00 2024 GMT
Not After : Dec 14 02:43:00 2025 GMT
Subject: CN=6BCF619961C96361F640B562D7BD2A3F7820D37C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:f1:8a:28:14:97:87:46:a7:df:85:49:75:
24:20:c4:4d:29:d1:07:03:06:d2:84:e0:8a:f8:2c:
8a:4b:cd:4e:3a:52:f5:7e:c6:06:4f:dc:c0:5a:66:
4e:59:49:c5:78:86:e2:0a:27:5e:93:e8:72:73:52:
9c:79:27:c2:a4:30:ef:ba:d0:e8:cc:5c:e9:2c:e9:
55:80:ff:27:62:3e:7d:58:96:32:57:77:51:c6:20:
a4:52:96:db:5d:94:ba:74:ba:c9:74:71:09:a4:7a:
db:5c:3b:8a:92:e3:cd:d0:1e:92:70:19:71:a5:93:
27:c6:c7:97:35:e2:8c:98:bc:70:09:b9:e0:c7:fb:
2d:ad:42:66:16:ec:66:8e:3b:61:c2:3a:73:84:59:
6b:05:bb:28:bc:00:e5:8d:74:2f:15:09:1a:86:4a:
28:90:16:04:3b:33:45:c1:bf:e8:2a:dc:cd:47:4f:
29:2e:65:40:82:dd:54:fa:96:b5:53:94:c0:7a:7e:
a1:c8:de:5e:da:1c:bb:14:07:9f:fb:b9:b7:e8:f7:
04:28:b4:79:9a:6f:d7:bd:1f:51:e0:c0:1f:b9:28:
3c:01:f7:73:8b:be:37:ae:c8:43:7b:ec:f5:ad:6e:
6a:2c:6d:f9:d9:de:ae:ca:e6:10:08:c2:d0:32:f9:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CF:61:99:61:C9:63:61:F6:40:B5:62:D7:BD:2A:3F:78:20:D3:7C
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323135363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:00:fc:8b:c0:bd:dd:a2:46:52:91:f5:49:53:31:48:24:8b:
07:41:ff:5c:3a:53:0e:66:5b:1e:1e:67:53:c9:13:f5:e8:fd:
2c:3d:36:71:b0:73:58:4e:34:1c:ba:1c:8d:8f:cf:72:77:b6:
d6:0f:cc:26:38:ca:5e:34:6b:dd:b8:ce:e3:e9:09:90:ed:76:
ca:88:1d:60:15:cd:cd:3a:0f:b1:cf:46:e7:79:80:15:06:0b:
d2:51:91:da:fd:69:5a:df:db:45:26:b3:69:04:19:04:6b:06:
54:9e:b3:0d:61:1e:e6:4e:7b:3f:3a:7b:91:c5:2d:3f:5b:6a:
03:71:01:2b:cd:77:bf:e5:f4:37:3d:18:1a:b5:6b:db:ff:8c:
6c:28:46:1a:55:1d:07:0c:25:62:d3:ea:87:de:7d:dc:3f:83:
d9:5e:8b:ff:fe:1b:c0:88:f8:e9:e2:e9:7e:c5:5f:fb:1a:11:
fc:ee:09:98:ed:74:a6:3f:21:5c:d1:96:03:aa:8c:62:c3:6e:
1c:83:16:67:52:5f:e8:04:52:d1:1e:e2:0d:c4:f3:39:bd:af:
a9:86:25:47:a6:02:46:0c:6d:3e:63:57:2f:d8:5c:ea:e2:55:
05:26:68:fb:70:f2:0f:67:63:67:e8:10:d2:7b:36:c0:b2:76:
61:01:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:16:55 2025 by rpki-client