Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38372e302f32342d3234203d3e203232383232.roa
File: 3231332e3133392e38372e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier: iiZlyx8CGVdtioy2lZ1bL5juIq+3x2ozi1Glzd1IGxs=
Subject key identifier: A8:D1:3F:08:12:49:76:42:12:0D:46:9F:35:5C:4B:BE:65:B4:FE:3C
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 289712C89549471748E6A0A8303EFEBBA3F1C2B0
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38372e302f32342d3234203d3e203232383232.roa
Signing time: Wed 12 Apr 2023 11:27:11 +0000
ROA not before: Wed 12 Apr 2023 11:22:11 +0000
ROA not after: Wed 10 Apr 2024 11:27:11 +0000
asID: 22822
IP address blocks: 213.139.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:97:12:c8:95:49:47:17:48:e6:a0:a8:30:3e:fe:bb:a3:f1:c2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 12 11:22:11 2023 GMT
Not After : Apr 10 11:27:11 2024 GMT
Subject: CN=A8D13F0812497642120D469F355C4BBE65B4FE3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:1c:60:b2:39:6d:d1:fc:ea:6c:24:bc:37:
f3:e2:f3:8f:a0:08:1f:d1:0b:2e:65:9b:d3:b5:7d:
11:1c:37:e2:bc:ed:8b:82:6c:c9:df:da:ee:5c:26:
6d:35:07:2d:27:c5:0f:4d:4c:7f:fb:9f:62:cf:5f:
ce:08:f4:3f:99:52:89:83:6d:e3:b3:3a:33:56:ca:
3b:67:31:0e:71:cc:a0:b8:3e:e6:9b:a2:19:69:f3:
bd:04:89:77:6a:7a:15:72:f7:b0:6c:f9:9c:77:b4:
25:0e:59:bc:d8:63:ca:1c:36:d2:2d:bf:56:33:12:
3e:7b:6d:b6:a2:a7:9f:4d:55:79:26:0a:9a:4a:54:
1a:b8:59:a2:16:d8:f0:a1:5d:c1:31:fa:09:98:75:
98:e3:df:9f:9b:f8:1b:59:13:f7:d1:31:bc:61:21:
fd:ce:07:94:14:63:51:f5:cb:5e:73:57:db:59:fc:
35:4d:fc:f1:1a:5e:fa:01:18:e5:23:9e:24:f2:c1:
20:93:d7:40:e7:90:cb:0d:04:6f:85:d8:af:7b:a7:
52:25:d6:31:ee:17:02:92:bf:af:5b:16:d1:25:61:
fa:cb:f1:92:5d:39:c6:ce:4f:a5:cf:2d:49:b6:b7:
94:fc:11:f8:4b:72:3e:da:8a:60:32:2b:c5:b9:6a:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:3F:08:12:49:76:42:12:0D:46:9F:35:5C:4B:BE:65:B4:FE:3C
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38372e302f32342d3234203d3e203232383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:15:c8:88:aa:4b:7e:37:3e:5a:a2:be:d9:ab:14:2d:44:11:
b6:9a:a7:19:e5:dd:99:b2:07:50:0c:07:e8:1e:2d:45:68:0e:
d6:20:98:02:85:52:c6:0d:6f:45:d2:01:08:98:b6:46:59:62:
13:6c:15:df:69:23:ee:36:3e:90:de:74:1b:95:f0:b2:4d:f7:
8c:5d:99:c2:0d:99:40:e3:b6:b5:6d:36:cd:39:97:a6:86:fe:
08:90:3e:94:28:16:5d:c9:da:8f:e0:31:14:48:89:de:91:4f:
e2:31:d4:db:e7:47:b9:d1:1e:51:24:e7:e6:8f:7c:9a:39:ed:
02:72:34:32:2c:cd:18:34:67:70:4c:a0:fe:0a:b0:6d:65:9a:
11:cc:45:e6:b4:d3:e0:4c:02:86:74:47:81:c8:90:54:3c:18:
23:82:0c:1f:2c:af:89:5e:dd:ce:13:5f:07:ba:45:cb:52:f8:
d1:73:09:b0:46:c1:77:d2:e9:3d:5b:54:0c:a1:8e:4a:65:7d:
f4:b6:2d:ef:36:e2:d6:b2:d1:fa:e9:20:d8:a9:ff:48:a8:ab:
82:97:9c:40:12:b4:86:f0:df:76:0d:20:a3:5c:6d:bc:29:64:
6f:6a:37:85:4a:2a:63:25:a2:29:50:0f:3f:91:3c:aa:80:33:
e5:88:f3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org