Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38352e302f32342d3234203d3e203232383232.roa
File: 3231332e3133392e38352e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier: 8G/T+k4bDNYOGgIr5YvTE2IcbvQF4X2hJmwDd1E4iLY=
Subject key identifier: B0:B8:6F:F0:4E:3D:A1:22:F8:0C:75:EF:01:D9:A9:92:D2:CA:67:27
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 647C3936EF9F3CFAB8BE8E46656CAF527499C630
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38352e302f32342d3234203d3e203232383232.roa
Signing time: Wed 12 Apr 2023 11:27:12 +0000
ROA not before: Wed 12 Apr 2023 11:22:12 +0000
ROA not after: Wed 10 Apr 2024 11:27:12 +0000
asID: 22822
IP address blocks: 213.139.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7c:39:36:ef:9f:3c:fa:b8:be:8e:46:65:6c:af:52:74:99:c6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 12 11:22:12 2023 GMT
Not After : Apr 10 11:27:12 2024 GMT
Subject: CN=B0B86FF04E3DA122F80C75EF01D9A992D2CA6727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:19:a1:90:3f:00:b2:59:6c:68:07:98:34:8c:
ab:8b:6a:0d:a1:ff:d4:5f:3a:e8:2c:4c:2f:a7:47:
86:ea:c8:d3:31:6a:bc:64:23:d9:51:a4:67:21:d0:
d9:b2:73:ed:3c:53:67:93:9a:fe:44:21:d1:69:eb:
87:41:95:38:2d:0b:75:d9:b7:d2:a9:cb:b8:54:9d:
ee:b9:b6:80:ee:35:70:9e:9c:53:db:cf:51:d5:cc:
f2:13:5f:86:69:0c:8c:3f:73:92:dd:de:05:e8:b9:
8a:b8:03:99:80:73:24:e3:85:dd:98:92:7e:21:5a:
66:bb:3a:45:0e:f4:f1:1f:2b:38:ef:db:6a:05:c8:
51:42:11:39:5d:56:d8:d4:5b:ba:51:63:20:bb:0a:
1f:94:42:a9:47:6d:35:33:c9:9d:ce:ab:77:cb:38:
1d:fc:b2:70:f9:0e:3c:0e:dc:91:82:4c:0a:95:26:
dc:0d:a5:b3:2c:4d:7d:09:d4:83:02:7e:c4:28:5d:
3a:2c:c1:c4:39:a8:16:f4:75:0a:57:34:64:be:23:
2b:57:1c:6e:11:0c:5c:c5:ce:60:36:53:8c:46:a5:
23:56:e7:b3:88:e4:58:55:3d:95:04:b9:e6:17:bc:
66:89:f8:93:08:aa:25:d7:18:83:89:71:26:37:a0:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B8:6F:F0:4E:3D:A1:22:F8:0C:75:EF:01:D9:A9:92:D2:CA:67:27
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38352e302f32342d3234203d3e203232383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.85.0/24
Signature Algorithm: sha256WithRSAEncryption
71:97:b4:cd:e3:0b:c4:22:4a:71:1a:03:17:51:37:10:b2:51:
21:06:15:07:de:27:d2:d5:13:4d:be:b4:7f:35:28:80:81:3a:
12:a1:f1:2c:de:19:76:94:59:06:e6:6b:d8:76:63:42:08:3d:
6b:a0:88:e8:0a:e5:ed:2e:dd:24:d7:1a:f4:dd:a0:57:b4:7f:
10:7a:09:d3:29:43:d8:0f:ab:fd:64:8f:66:04:61:f1:50:c1:
6f:2b:ac:9e:dd:12:da:be:5c:27:05:12:57:2f:8c:0e:fb:f9:
30:fa:cb:20:f4:8a:9d:ed:4b:b7:dc:0d:51:3d:d3:27:5e:d0:
d8:89:a9:06:0d:52:7e:44:d0:08:0a:41:ac:4b:04:af:8b:3a:
8d:a7:f0:8f:f2:0f:ef:31:38:f4:04:36:b8:f4:3b:02:ef:5f:
4f:57:5c:c9:2a:f0:6a:41:5e:84:e4:1f:d1:01:c7:83:25:66:
66:58:a7:02:fa:49:df:71:df:fa:93:8f:95:86:1a:07:84:7e:
9b:5c:44:de:3c:5f:eb:7e:db:0c:21:a2:bd:db:32:89:c5:cf:
4a:cd:7e:3a:ad:1c:ea:ea:5f:42:a5:f4:cc:3a:78:a5:f9:8b:
ec:20:10:45:33:dd:58:59:db:50:4f:98:41:e8:fc:98:3d:76:
78:44:16:0f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZHw5Nu+fPPq4vo5GZWyvUnSZxjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yMzA0MTIxMTIyMTJaFw0yNDA0MTAxMTI3MTJaMDMxMTAvBgNV
BAMTKEIwQjg2RkYwNEUzREExMjJGODBDNzVFRjAxRDlBOTkyRDJDQTY3MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvGaGQPwCyWWxoB5g0jKuLag2h
/9RfOugsTC+nR4bqyNMxarxkI9lRpGch0Nmyc+08U2eTmv5EIdFp64dBlTgtC3XZ
t9Kpy7hUne65toDuNXCenFPbz1HVzPITX4ZpDIw/c5Ld3gXouYq4A5mAcyTjhd2Y
kn4hWma7OkUO9PEfKzjv22oFyFFCETldVtjUW7pRYyC7Ch+UQqlHbTUzyZ3Oq3fL
OB38snD5DjwO3JGCTAqVJtwNpbMsTX0J1IMCfsQoXToswcQ5qBb0dQpXNGS+IytX
HG4RDFzFzmA2U4xGpSNW57OI5FhVPZUEueYXvGaJ+JMIqiXXGIOJcSY3oGyXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUsLhv8E49oSL4DHXvAdmpktLKZycwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM4
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzgzMjMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1YtVMA0GCSqGSIb3DQEBCwUAA4IBAQBxl7TN4wvEIkpxGgMXUTcQslEhBhUH3ifS
1RNNvrR/NSiAgToSofEs3hl2lFkG5mvYdmNCCD1roIjoCuXtLt0k1xr03aBXtH8Q
egnTKUPYD6v9ZI9mBGHxUMFvK6ye3RLavlwnBRJXL4wO+/kw+ssg9Iqd7Uu33A1R
PdMnXtDYiakGDVJ+RNAICkGsSwSvizqNp/CP8g/vMTj0BDa49DsC719PV1zJKvBq
QV6E5B/RAceDJWZmWKcC+knfcd/6k4+VhhoHhH6bXETePF/rftsMIaK92zKJxc9K
zX46rRzq6l9CpfTMOnil+YvsIBBFM91YWdtQT5hB6PyYPXZ4RBYP
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org