Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32332d3234203d3e20323131333733.roa
File: 3231332e3133392e38302e302f32332d3234203d3e20323131333733.roa (raw, json)
Hash identifier: NDZDQiCNWbGW9d+2oLnw2WXsaoGjfLqqRLDoj71M0tA=
Subject key identifier: E1:84:55:9F:83:63:5D:D2:9E:57:20:D2:A1:DE:5F:54:1D:2B:78:5D
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 65297D1591DE6BE6611674B96476530C026EB844
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32332d3234203d3e20323131333733.roa
Signing time: Mon 10 Apr 2023 13:37:07 +0000
ROA not before: Mon 10 Apr 2023 13:32:07 +0000
ROA not after: Mon 08 Apr 2024 13:37:07 +0000
asID: 211373
IP address blocks: 213.139.80.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:29:7d:15:91:de:6b:e6:61:16:74:b9:64:76:53:0c:02:6e:b8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 10 13:32:07 2023 GMT
Not After : Apr 8 13:37:07 2024 GMT
Subject: CN=E184559F83635DD29E5720D2A1DE5F541D2B785D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:12:a2:a3:e4:09:1a:19:78:e1:dc:dc:49:
ee:ee:31:70:30:a0:5d:d4:dc:44:3d:85:b5:f2:a8:
30:8b:8e:11:a0:ec:10:12:03:38:54:78:bf:ec:80:
ea:da:95:0b:05:a8:dd:7f:af:85:ca:f7:b3:bc:0c:
04:86:2d:04:63:91:f4:7d:75:5e:a3:dd:99:8d:cf:
e5:bf:fa:bf:00:ab:10:dc:4c:1b:07:64:f9:43:cf:
d2:0f:bc:8a:a7:67:b5:4d:6b:e5:5c:19:ba:b2:fd:
d9:44:af:99:c3:fb:1b:93:10:f1:fe:54:e6:4e:1a:
34:93:0e:f8:cc:7e:03:f2:7a:42:46:31:0c:e0:13:
bf:21:04:d9:94:70:07:8e:2a:2d:2b:42:de:9a:f9:
f4:80:b9:17:8e:72:7e:0a:5f:e8:5c:68:3f:20:66:
65:98:2a:1b:55:92:1b:b7:54:cf:50:96:28:38:c1:
02:ff:05:9d:e1:c7:9f:a9:46:28:b8:f5:10:d4:fe:
e9:d9:96:07:c6:7b:a7:02:a9:c4:e7:86:96:15:9f:
53:dc:6a:ac:95:fc:2f:c1:4a:77:ff:b6:34:f3:a9:
ee:a4:2a:25:0a:75:8a:3a:95:b7:27:f4:fb:37:56:
2f:12:d7:f3:3a:90:21:12:91:c8:fe:46:d9:14:16:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:84:55:9F:83:63:5D:D2:9E:57:20:D2:A1:DE:5F:54:1D:2B:78:5D
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32332d3234203d3e20323131333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.80.0/23
Signature Algorithm: sha256WithRSAEncryption
99:f1:2c:f9:46:49:8e:67:9d:e0:53:78:08:ce:c7:a5:a5:89:
cc:62:94:ac:85:57:47:96:d3:fc:38:36:34:fe:ea:f3:9a:08:
06:2b:f9:eb:48:48:3e:c0:bd:da:35:a8:e1:59:8c:3f:57:02:
7e:a1:7d:f2:37:a5:1c:31:fb:6e:e5:ed:80:2a:54:48:11:d8:
e1:59:a7:31:bd:38:fa:68:39:2b:8b:24:7a:35:88:07:1b:eb:
9f:00:52:e1:0d:7e:f4:15:3d:0b:1f:b3:20:f3:e4:d9:8c:e7:
8a:45:7a:ab:59:b0:17:46:ec:3f:00:f6:cc:ac:3b:42:6e:b6:
6a:bf:48:4b:99:c9:17:10:9b:43:ab:d2:fd:30:e7:2a:c4:26:
44:3e:60:a4:1b:6f:2b:84:ff:53:a8:8b:eb:fd:5c:96:bf:db:
c2:dd:34:9e:37:a5:2f:94:98:c8:e8:3c:9d:44:9e:10:1b:a7:
a7:58:31:38:82:94:ef:70:01:34:0d:0e:03:8c:08:bc:b9:29:
97:74:e1:04:4a:c5:cf:39:60:f8:c1:ab:26:c4:d1:19:6c:2a:
09:22:e5:e9:09:2f:d6:43:00:93:01:b8:b6:bc:9f:5e:bf:8e:
de:e7:c2:11:01:a4:c1:49:98:13:b3:0a:5a:de:f9:b6:5d:ae:
2a:f4:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org