Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38382e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e38382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: BMu2De3YXnK8S0poRgsDlE3k4I+wR/sfW5jtzakmoYw=
Subject key identifier: FA:DC:24:B4:EF:0D:EB:B2:4B:35:D7:A3:67:6F:23:AA:0B:D0:BD:8A
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 7439FFB73906D45434209316B30F968E775F1F2F
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38382e302f32342d3234203d3e20383334.roa
Signing time: Fri 28 Apr 2023 11:20:36 +0000
ROA not before: Fri 28 Apr 2023 11:15:36 +0000
ROA not after: Fri 26 Apr 2024 11:20:36 +0000
asID: 834
IP address blocks: 213.139.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:39:ff:b7:39:06:d4:54:34:20:93:16:b3:0f:96:8e:77:5f:1f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 28 11:15:36 2023 GMT
Not After : Apr 26 11:20:36 2024 GMT
Subject: CN=FADC24B4EF0DEBB24B35D7A3676F23AA0BD0BD8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:44:60:c5:33:ac:55:77:42:11:ce:da:ac:7a:
94:8e:32:8c:dc:e3:73:d8:72:25:2f:05:e0:41:4a:
65:4a:44:69:ea:e8:86:56:3b:58:e2:3f:2c:36:19:
ab:2c:72:68:34:bc:37:02:49:ef:48:53:1c:59:17:
64:47:65:5e:60:53:00:9a:b4:7d:ad:73:7e:f2:f5:
42:d4:7c:a0:dd:1d:99:8f:8a:6e:4e:1f:4d:54:11:
3e:98:1f:69:94:37:fb:98:4d:b9:d3:86:a5:2c:85:
28:68:8a:99:92:a0:84:33:4b:dc:29:51:23:6c:06:
dc:d7:ea:37:5b:51:58:ec:cb:2e:c7:55:76:e3:19:
29:2c:0e:4f:d7:d0:5d:7f:b7:ae:67:54:0e:db:c5:
da:1f:f6:c1:23:40:a4:fa:c9:5d:ff:e7:00:c7:5b:
00:b2:25:13:ed:a0:22:d0:b4:09:e6:b2:39:3b:3d:
27:c8:9d:4c:61:11:12:01:81:38:dc:c8:e2:e9:b0:
30:85:3b:46:b2:8b:93:9e:25:7d:4c:06:3e:37:8e:
1f:6e:ae:ae:94:4c:75:40:96:06:f7:39:50:4f:56:
a1:0e:05:59:ed:5f:9d:9b:6d:5b:f3:90:25:60:8d:
a9:12:58:f3:c6:2b:b4:86:fe:67:31:94:07:2b:d5:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:24:B4:EF:0D:EB:B2:4B:35:D7:A3:67:6F:23:AA:0B:D0:BD:8A
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:45:dc:b1:cf:ac:a2:66:03:56:63:8f:91:0a:0c:14:bf:75:
a2:f8:f1:52:e7:18:13:cf:94:66:3b:1d:93:b8:88:32:0c:d0:
44:cf:f1:75:45:ce:2a:9b:b8:8d:69:9c:3c:b0:04:00:36:72:
6c:41:7a:4d:9d:b0:de:e4:df:d8:bd:f6:5d:a5:a4:b6:4e:c6:
6c:5f:83:72:73:fc:a5:4c:51:46:0a:c4:65:98:a2:28:18:c1:
b1:9b:e1:c6:f0:b1:63:00:73:22:e6:27:68:42:ac:e0:34:ca:
07:f6:74:ae:f0:2c:96:be:df:35:e4:45:06:cd:fd:3b:88:4c:
75:cd:77:44:bc:0b:22:b9:94:ab:53:57:3a:ed:cc:9b:ef:ed:
05:77:5b:24:a5:5a:eb:fb:be:b7:60:a3:e2:fd:ca:65:1f:1e:
31:cd:59:53:c9:78:d6:c7:c9:5f:0e:ec:bb:0f:0e:fd:4a:92:
7a:ee:6c:33:ae:30:5f:f6:d4:9b:ed:c1:72:88:c1:0f:23:13:
0c:11:c5:09:8f:46:7b:bf:90:aa:91:bf:b3:b6:c5:65:1c:74:
f7:c8:ab:87:0b:2d:21:a0:d2:33:4d:f8:c0:2f:f4:20:b9:a3:
82:53:0e:0e:ca:ed:9c:5f:65:b6:66:17:17:fa:5f:30:57:10:
a4:1e:59:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org