Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38382e302f32342d3234203d3e203630373231.roa
File: 3231332e3133392e38382e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: 7Ufz2vXpSNun8ItNTm6lJvZ4gpMCKiO74idI/kPUJ6Q=
Subject key identifier: 16:71:28:CF:1B:55:BC:7E:29:EF:BA:61:EF:B9:6F:24:17:B0:62:6C
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 7B1E95073B9DBE6C79ED1F22319E10447D4A02F5
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38382e302f32342d3234203d3e203630373231.roa
Signing time: Mon 20 Mar 2023 16:44:00 +0000
ROA not before: Mon 20 Mar 2023 16:39:00 +0000
ROA not after: Mon 18 Mar 2024 16:44:00 +0000
asID: 60721
IP address blocks: 213.139.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:1e:95:07:3b:9d:be:6c:79:ed:1f:22:31:9e:10:44:7d:4a:02:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Mar 20 16:39:00 2023 GMT
Not After : Mar 18 16:44:00 2024 GMT
Subject: CN=167128CF1B55BC7E29EFBA61EFB96F2417B0626C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:35:0f:31:1e:45:0e:29:3b:ed:a8:df:18:
85:cc:05:64:86:f7:d1:a0:0b:13:a7:a3:b9:34:56:
27:37:f8:4e:03:65:7e:0b:c5:ac:c9:49:7f:fb:95:
bd:29:31:a6:07:75:0f:e5:72:1d:d5:73:94:bf:b1:
35:7b:e4:0e:1e:9e:b3:0d:d4:3d:70:e6:a4:4e:2e:
eb:21:81:32:ee:8c:0b:bc:fc:4a:d4:71:94:3d:26:
88:86:7c:ff:7a:0f:e6:59:3f:b4:f6:cd:be:eb:94:
d1:6f:c4:10:ea:62:b9:e4:b1:99:bb:2b:b1:40:ce:
a5:82:12:9c:59:a7:b9:ac:e2:03:97:38:c1:eb:f0:
0e:4a:d0:76:6a:d0:f2:8b:0a:04:2f:ac:8d:95:17:
73:bf:2b:9c:35:4d:6d:39:80:c9:27:89:08:a3:a5:
81:92:ab:0a:46:6a:72:a9:ce:6f:2f:d6:b1:4e:cf:
81:62:b7:6f:d9:34:56:c0:79:7f:d8:7e:ec:0d:0e:
e2:28:5d:68:89:5f:ee:d5:7b:0d:97:7d:5d:6f:27:
8e:f5:d3:78:c4:3d:ba:48:da:13:52:01:0e:be:b7:
f6:2b:0b:ea:a3:c4:23:6f:50:a9:3e:f8:33:d9:1e:
a0:7c:b4:42:e8:f3:30:5c:96:1d:ca:52:40:84:ea:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:71:28:CF:1B:55:BC:7E:29:EF:BA:61:EF:B9:6F:24:17:B0:62:6C
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38382e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e6:d5:47:dd:a9:c1:ac:d5:65:d2:3d:1f:2b:8c:38:bf:88:
bb:c2:bd:a5:3a:64:f2:9d:f8:ef:e3:19:0a:02:75:fb:bf:22:
69:ea:2a:4d:6a:eb:d5:fc:27:4e:86:d6:9a:df:9e:8b:a1:52:
a3:6d:69:77:c3:8a:e2:d8:ef:f8:5c:9f:6a:3c:e1:fb:85:be:
ba:c5:5d:fd:7f:2a:35:e3:5e:27:44:69:4f:77:b4:0d:38:f0:
9a:c7:99:79:2b:db:79:fd:d2:e8:61:07:05:e3:3e:af:11:59:
96:30:63:7f:92:8a:33:ca:97:9e:f3:85:ba:28:28:3a:a5:45:
54:d0:51:43:a3:be:bb:4e:a4:dd:3b:07:6d:d9:fe:6d:9e:b0:
69:b5:d6:98:2b:b1:45:6c:d9:e1:e8:22:75:79:45:85:3e:98:
57:a2:48:cf:9e:b1:fe:b8:0a:e6:1d:89:23:2d:86:d2:42:4f:
94:1e:5f:01:44:ab:d5:68:5a:69:76:1a:b8:71:ca:98:20:18:
4e:73:3e:8e:f2:7d:4f:4c:ba:9b:d1:65:62:09:5c:63:c0:07:
76:25:50:a8:8c:18:00:72:e2:68:f9:4b:47:23:e4:e4:d3:3b:
b1:85:62:b0:0d:16:5d:79:7e:6a:cb:44:2e:f4:a8:48:b6:ad:
cb:97:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org