Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38362e302f32342d3234203d3e203232383232.roa
File: 3231332e3133392e38362e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier: njOGtgw0Wvjj+/F4jrkr5ZnH2pC/EHb9LtEXxCRC1qw=
Subject key identifier: 5C:71:B8:16:E3:45:B0:FB:FC:6A:93:0A:F8:39:83:3B:B1:FE:37:FA
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 605125F2ADD8494DD2255864BFFDB29115085315
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38362e302f32342d3234203d3e203232383232.roa
Signing time: Wed 12 Apr 2023 11:27:12 +0000
ROA not before: Wed 12 Apr 2023 11:22:12 +0000
ROA not after: Wed 10 Apr 2024 11:27:12 +0000
asID: 22822
IP address blocks: 213.139.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:51:25:f2:ad:d8:49:4d:d2:25:58:64:bf:fd:b2:91:15:08:53:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 12 11:22:12 2023 GMT
Not After : Apr 10 11:27:12 2024 GMT
Subject: CN=5C71B816E345B0FBFC6A930AF839833BB1FE37FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:07:60:cb:9a:1b:fc:3f:a8:0e:1d:01:e8:
84:b3:a4:69:64:a4:9a:01:b6:6b:75:0a:75:2d:6a:
93:b1:ea:e5:58:80:f2:7d:f6:65:f7:c8:bc:f3:74:
d8:20:e2:a4:87:3b:29:b2:77:3a:c4:16:46:17:e4:
ad:86:8f:76:9c:45:34:c0:97:a1:81:64:30:35:a3:
27:99:91:c2:d9:a5:e0:23:19:76:9b:cc:54:72:f0:
63:ff:f0:02:de:da:49:a9:c2:8f:5f:ee:08:2c:d2:
92:d5:66:f9:e1:e9:55:f5:34:35:f2:9a:9a:81:23:
82:aa:e2:6b:20:18:b0:19:34:b8:21:59:27:3d:6c:
c9:3a:de:4a:e8:27:7b:d4:39:fe:fd:5a:e1:fb:50:
a1:35:d2:e3:27:d3:ca:a7:a8:21:4a:47:43:b0:87:
0c:d8:76:c2:fe:25:b1:d6:95:93:4f:80:ed:38:f3:
c0:b5:7f:9e:92:6c:d9:34:f6:5a:42:4d:ad:b1:f8:
52:f2:4b:3d:a3:43:86:39:94:54:51:60:ea:1a:0f:
55:1e:a4:14:69:6c:bc:37:f1:64:50:ba:c9:59:ed:
8b:c8:2e:e9:37:a8:6f:43:50:fa:19:33:a2:44:86:
ce:b3:2e:78:80:cb:ff:3a:24:52:5b:5b:e9:ae:7e:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:71:B8:16:E3:45:B0:FB:FC:6A:93:0A:F8:39:83:3B:B1:FE:37:FA
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38362e302f32342d3234203d3e203232383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.86.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f3:89:eb:a0:c2:d7:74:24:b1:49:13:3a:5d:9c:76:08:b8:
68:54:4c:d6:fc:12:02:e3:3f:68:c2:de:50:2e:fa:cc:0f:c6:
26:71:be:44:fa:ed:ac:f6:05:33:c1:b4:80:69:1a:00:c9:f3:
1a:e9:4b:6f:c0:61:0f:cc:92:72:66:cf:70:8b:16:b4:2d:fe:
0f:89:e1:5c:54:92:19:8d:9f:c1:e2:77:d5:74:98:4c:2c:af:
60:be:d6:00:6a:de:c3:73:6c:af:90:90:c5:7a:af:56:c4:aa:
1b:c0:01:a8:4b:65:0f:c0:7a:e3:91:fa:82:a9:25:dd:d6:ab:
3a:69:be:1a:54:c4:28:7d:cf:66:c5:9f:15:70:62:3c:61:03:
06:61:7f:17:68:25:bc:72:27:47:fa:15:b4:09:26:11:e9:7b:
2a:bd:95:a8:d7:00:17:e4:52:31:c5:87:ae:5d:56:c6:96:02:
ec:9e:f3:23:61:2b:5c:99:15:59:43:88:0f:10:44:f9:60:4d:
89:eb:6b:48:c6:c7:b0:32:82:0b:43:85:0b:71:89:f3:5e:05:
c0:6f:b1:86:18:d5:a4:30:c5:83:7d:81:ca:81:ad:5d:dc:ab:
e4:b5:79:a4:b7:29:33:16:d9:f3:e2:dc:61:aa:06:d6:0c:4c:
29:07:09:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org