Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38392e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e38392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hNUzPjh8H0tvE4PYLMSGWBghJvHe9oE84PQJLfXhJmc=
Subject key identifier: D2:B3:B1:53:67:CF:F6:EB:E6:21:94:CC:B5:A1:AE:C4:7F:8C:3B:1E
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 25976CC1939341478253D7E4C4BEE9F6D8ABFC8D
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38392e302f32342d3234203d3e20383334.roa
Signing time: Wed 25 Jan 2023 13:01:36 +0000
ROA not before: Wed 25 Jan 2023 12:56:36 +0000
ROA not after: Wed 24 Jan 2024 13:01:36 +0000
asID: 834
IP address blocks: 213.139.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:97:6c:c1:93:93:41:47:82:53:d7:e4:c4:be:e9:f6:d8:ab:fc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 25 12:56:36 2023 GMT
Not After : Jan 24 13:01:36 2024 GMT
Subject: CN=D2B3B15367CFF6EBE62194CCB5A1AEC47F8C3B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:b6:95:f9:b7:2c:08:fb:08:b5:25:68:d8:
20:dd:40:47:eb:dd:99:02:a0:8b:ef:f9:e4:ba:35:
62:5a:e2:28:99:cc:3e:5b:61:36:8b:d2:31:86:34:
51:a2:88:74:a2:81:18:a8:80:80:5e:a3:22:c0:b5:
17:3c:b1:40:6a:ca:dd:c3:72:5e:7b:fc:6e:74:36:
24:83:92:73:b4:d8:6d:7f:97:73:86:0e:0e:5a:83:
e1:5b:a7:56:51:44:fc:f4:13:2e:0f:e4:30:fd:29:
1e:92:0b:64:84:15:2b:78:fd:ae:2b:98:1b:ce:6c:
5a:e1:4b:cc:f0:da:07:6e:1a:c5:6f:b8:fb:c7:c0:
ce:82:2c:a0:7c:88:b0:82:2d:a0:cc:31:6b:e3:8d:
65:bc:4e:77:7b:0f:16:e4:bb:2f:c5:ee:86:f1:7a:
92:be:07:1d:f6:53:a8:ea:24:d6:dc:19:c2:59:61:
45:c6:d8:ca:e6:db:c5:2c:b6:7a:a9:7a:e2:97:89:
77:a7:0d:25:d0:43:ec:6a:f3:fd:b9:13:33:04:fb:
01:49:08:e3:e6:60:a8:4c:51:09:d7:9e:b6:fb:38:
6e:70:c2:85:69:ee:a1:b0:fc:5f:ec:dd:b5:24:fa:
de:79:18:e7:2c:50:97:b0:4f:36:26:cc:1d:f3:17:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B3:B1:53:67:CF:F6:EB:E6:21:94:CC:B5:A1:AE:C4:7F:8C:3B:1E
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:14:e7:db:29:76:a8:7e:38:f4:2f:80:c1:d9:68:03:46:04:
61:58:7e:73:76:12:20:06:2b:5c:f5:42:68:1c:41:1e:3f:c6:
d7:23:62:1b:93:70:ea:8f:97:ec:22:d2:49:b1:17:57:47:03:
28:19:63:0f:43:55:2c:68:a8:96:3a:55:a6:16:6f:21:9b:8f:
8b:47:31:24:79:8f:84:d4:b6:e8:72:01:9f:3a:50:d5:40:7f:
71:2f:a1:f4:7a:2b:d7:c7:17:68:00:ee:da:58:bd:99:3b:ee:
61:33:a7:65:1a:79:cc:a1:58:e7:9f:69:c9:82:37:68:d4:f5:
ad:3f:10:d3:71:49:92:52:e6:87:32:bc:a1:1c:4d:9d:99:4a:
db:a3:27:c7:cd:a9:0a:28:49:1b:3f:dc:00:92:c6:b2:96:49:
34:1b:09:19:64:03:dd:91:3c:60:37:21:7c:e5:0e:9c:ad:83:
51:4e:03:ef:a2:20:fd:f9:da:1a:8d:7a:28:72:74:29:14:c6:
d5:f7:64:c9:9a:3c:8e:f2:3c:49:d7:8a:49:cd:ba:2d:7f:23:
3f:fa:e1:2f:86:c8:18:6f:2b:43:a7:76:e1:79:f7:24:35:55:
c5:f3:ff:fd:80:00:7b:93:15:5d:70:71:32:99:af:66:81:d1:
ae:4d:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org