Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38372e302f32342d3234203d3e20323039373337.roa
File: 3231332e3133392e38372e302f32342d3234203d3e20323039373337.roa (raw, json)
Hash identifier: j8vm8se2BzKI714LJWVENrYET3pVIOc7OQ6vGedeWas=
Subject key identifier: E2:FD:54:FD:86:D9:BC:CD:CB:EE:73:91:9D:5A:57:95:94:FA:62:B5
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 1ECF67CEE08D36882126F7DBAA86CEFD5EDBCDDA
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38372e302f32342d3234203d3e20323039373337.roa
Signing time: Wed 25 Jan 2023 13:03:02 +0000
ROA not before: Wed 25 Jan 2023 12:58:02 +0000
ROA not after: Wed 24 Jan 2024 13:03:02 +0000
asID: 209737
IP address blocks: 213.139.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:cf:67:ce:e0:8d:36:88:21:26:f7:db:aa:86:ce:fd:5e:db:cd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 25 12:58:02 2023 GMT
Not After : Jan 24 13:03:02 2024 GMT
Subject: CN=E2FD54FD86D9BCCDCBEE73919D5A579594FA62B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:ac:2d:41:c7:ba:81:a6:23:89:53:9d:41:
b9:af:fd:7d:c2:e5:37:54:f3:5f:a0:3a:ce:b8:3c:
45:e5:a4:f9:49:30:01:44:6c:6f:87:71:a3:f0:a4:
fb:7a:41:54:c9:01:68:3d:7c:57:3b:07:26:c9:f1:
50:6d:8c:8d:52:9f:13:59:56:ca:21:1b:0b:6d:88:
4a:6d:92:a7:3b:a5:6f:19:75:5d:a3:92:37:d1:05:
bd:03:16:d2:9a:22:03:bc:e6:31:49:e5:74:d5:9d:
c1:79:4c:97:46:0d:b1:86:fa:53:d6:b9:d7:3e:a2:
d6:21:0b:1d:0e:7b:45:b8:04:59:e3:e4:92:20:b5:
f3:e6:70:95:29:f9:71:ef:41:48:13:33:51:e4:0d:
6b:7e:06:ac:70:2d:04:f1:cf:11:5b:6b:25:5a:7a:
be:c7:2d:90:ab:ab:4e:e8:93:bb:24:ce:9b:2a:6d:
0e:eb:f1:e5:f5:80:d2:2b:d3:07:c5:2f:30:26:73:
bf:6a:ec:64:00:b9:3f:4b:f8:a4:8e:fe:13:d3:68:
b2:c6:b0:ce:47:2f:c9:05:61:b3:81:15:37:bd:9e:
b8:6a:b2:03:d5:50:3f:5d:85:c9:fd:28:6c:a4:13:
93:b1:24:3a:58:9d:35:56:07:82:d5:93:86:82:82:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:54:FD:86:D9:BC:CD:CB:EE:73:91:9D:5A:57:95:94:FA:62:B5
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38372e302f32342d3234203d3e20323039373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.87.0/24
Signature Algorithm: sha256WithRSAEncryption
90:85:42:7b:6d:07:06:96:17:93:ef:ed:5b:c2:64:63:e3:9a:
0f:8a:80:9d:e2:90:0c:0e:33:0a:ca:5e:0e:1e:aa:c9:67:14:
af:e6:74:c7:32:1d:12:49:b2:a0:cd:87:fb:82:66:a7:72:fc:
e8:37:5f:42:a1:46:c3:70:34:39:19:08:8e:4b:8b:9e:f9:9a:
e0:cb:d0:83:2c:e7:0d:41:86:f0:8f:bc:af:5a:ae:2b:d1:8e:
ee:b4:04:68:db:0d:d9:bd:68:e5:a6:f3:bd:fc:e4:0d:05:7c:
2e:48:10:3c:54:d0:cb:b6:6f:20:cb:88:73:d8:35:4d:e8:05:
39:d3:5f:67:8c:c1:b0:94:cf:67:b2:43:d1:4b:07:b9:b8:72:
0d:66:a9:2a:7d:70:0e:c6:bb:28:f6:0a:11:bd:2c:61:46:6e:
12:19:35:8b:c8:90:be:f4:ab:a9:aa:a7:25:10:4e:96:cd:7b:
8a:51:88:85:fd:fb:80:fd:b6:41:3b:b2:46:dd:8a:80:b2:4e:
96:b2:e3:8a:f9:0c:5b:b6:7a:7d:74:d2:31:5d:63:b3:81:89:
cb:7b:c0:fa:9d:fe:b3:6e:0f:60:1a:8f:30:bd:49:75:6f:4e:
44:65:99:19:ac:df:01:09:f4:82:74:3f:d8:a1:0a:65:4e:d8:
64:bd:63:94
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHs9nzuCNNoghJvfbqobO/V7bzdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yMzAxMjUxMjU4MDJaFw0yNDAxMjQxMzAzMDJaMDMxMTAvBgNV
BAMTKEUyRkQ1NEZEODZEOUJDQ0RDQkVFNzM5MTlENUE1Nzk1OTRGQTYyQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS1qwtQce6gaYjiVOdQbmv/X3C
5TdU81+gOs64PEXlpPlJMAFEbG+HcaPwpPt6QVTJAWg9fFc7BybJ8VBtjI1SnxNZ
VsohGwttiEptkqc7pW8ZdV2jkjfRBb0DFtKaIgO85jFJ5XTVncF5TJdGDbGG+lPW
udc+otYhCx0Oe0W4BFnj5JIgtfPmcJUp+XHvQUgTM1HkDWt+BqxwLQTxzxFbayVa
er7HLZCrq07ok7skzpsqbQ7r8eX1gNIr0wfFLzAmc79q7GQAuT9L+KSO/hPTaLLG
sM5HL8kFYbOBFTe9nrhqsgPVUD9dhcn9KGykE5OxJDpYnTVWB4LVk4aCghmjAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU4v1U/YbZvM3L7nORnVpXlZT6YrUwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM4
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzNzMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADVi1cwDQYJKoZIhvcNAQELBQADggEBAJCFQnttBwaWF5Pv7VvCZGPjmg+KgJ3i
kAwOMwrKXg4eqslnFK/mdMcyHRJJsqDNh/uCZqdy/Og3X0KhRsNwNDkZCI5Li575
muDL0IMs5w1BhvCPvK9arivRju60BGjbDdm9aOWm87385A0FfC5IEDxU0Mu2byDL
iHPYNU3oBTnTX2eMwbCUz2eyQ9FLB7m4cg1mqSp9cA7Guyj2ChG9LGFGbhIZNYvI
kL70q6mqpyUQTpbNe4pRiIX9+4D9tkE7skbdioCyTpay44r5DFu2en100jFdY7OB
ict7wPqd/rNuD2AajzC9SXVvTkRlmRms3wEJ9IJ0P9ihCmVO2GS9Y5Q=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org