Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38342e302f32342d3234203d3e203232383232.roa
File: 3231332e3133392e38342e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier: l/JvwfwmkJKssnib8we1kIPibDJvbpZArCT8XCX11ls=
Subject key identifier: C3:D9:3D:B7:B4:B8:57:D6:63:49:19:2E:61:43:E0:D8:9A:32:E5:9D
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 0F9CB4F8D20B614A54A44D627E48F8538E372808
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38342e302f32342d3234203d3e203232383232.roa
Signing time: Wed 12 Apr 2023 11:27:13 +0000
ROA not before: Wed 12 Apr 2023 11:22:13 +0000
ROA not after: Wed 10 Apr 2024 11:27:13 +0000
asID: 22822
IP address blocks: 213.139.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9c:b4:f8:d2:0b:61:4a:54:a4:4d:62:7e:48:f8:53:8e:37:28:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 12 11:22:13 2023 GMT
Not After : Apr 10 11:27:13 2024 GMT
Subject: CN=C3D93DB7B4B857D66349192E6143E0D89A32E59D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:9a:08:04:d3:5e:85:37:ca:1e:7a:69:3b:
6d:54:c2:32:be:97:ff:04:cc:c7:96:81:c1:1e:0a:
c5:c4:74:e3:53:5e:f4:72:3d:07:4d:54:12:eb:5b:
d2:a8:93:a3:1c:46:3c:29:cb:9d:e7:82:0a:04:af:
3a:bb:66:dd:a5:2c:cd:b3:c5:1b:96:f4:09:77:e2:
72:c3:b6:91:1f:31:48:e1:4f:a5:65:95:24:bb:a9:
e9:ef:cc:e8:e4:5b:52:ec:02:f9:e6:48:b0:51:e8:
74:f1:f4:7e:1a:32:2f:db:ec:ec:61:cd:f2:ad:00:
e9:fd:0f:aa:be:7d:23:95:ef:87:0a:90:0a:57:14:
43:aa:7f:16:d5:e9:83:24:0e:69:e2:9d:68:bf:9e:
5d:9a:18:81:0b:bc:5d:b6:5d:73:20:c6:19:b7:a9:
37:f0:d7:54:4d:76:f5:b5:e2:14:1a:07:50:5e:47:
fa:c5:69:26:d8:2e:eb:53:0b:bf:30:3d:82:d3:26:
17:c3:ff:c6:c7:52:b1:ec:1b:a8:6e:be:4f:aa:6d:
1a:65:57:5d:d5:e3:ed:31:be:ae:f0:c1:ba:68:e9:
d4:3f:95:6c:4f:74:62:43:8f:47:0c:68:51:26:b4:
42:21:a5:a0:b2:28:08:15:a8:8e:30:01:7d:24:e7:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:3D:B7:B4:B8:57:D6:63:49:19:2E:61:43:E0:D8:9A:32:E5:9D
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38342e302f32342d3234203d3e203232383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9f:6a:5c:3c:3b:e1:cc:c8:f4:e5:54:b2:4d:b0:d3:0d:7a:
f0:3f:21:06:0d:1d:77:4f:48:3c:ed:69:0c:b2:5b:f5:59:bb:
b9:37:2d:a1:89:7d:ee:15:02:b3:5a:1a:ba:e3:b2:a4:92:40:
3a:a3:64:8f:b9:cd:d8:73:ca:e9:6d:c8:d9:64:d2:eb:26:6f:
ab:37:06:0b:d1:a5:14:64:64:59:a5:24:57:c1:8d:bd:ff:c8:
b4:94:60:15:66:62:70:0d:9a:58:be:79:05:1e:01:69:00:00:
70:87:60:c6:75:be:6d:9f:bc:cb:3b:fe:11:75:40:0f:79:7d:
d7:c2:35:91:4c:fe:b7:aa:e3:e7:c4:9f:7d:ef:a7:d4:ff:26:
6a:4f:a9:3d:1a:6b:ac:eb:ce:61:bc:a9:0c:fe:cc:38:d2:51:
ab:cd:e7:5c:5f:bf:17:1e:8d:1a:07:90:f0:43:65:dc:45:23:
e9:50:0f:d5:0d:19:77:55:7a:ec:c7:a6:b4:d1:63:04:1b:68:
6c:7c:c4:83:c1:c2:bf:e5:10:fc:ce:e8:3e:05:b9:91:19:81:
15:f0:08:28:5f:3f:1f:2f:1b:0d:c5:60:48:81:ae:f6:f5:63:
b9:93:4c:f8:7c:6a:8a:c1:7f:e1:7d:09:db:80:4d:ef:b1:96:
9a:9d:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org