Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32342d3234203d3e203232383232.roa
File: 3231332e3133392e39302e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier: phHjoFz8rgAw53W/6/N9aCqoEI/y441oMSw7eVIEs4Q=
Subject key identifier: FA:19:05:F6:F4:42:7B:0C:DB:E4:08:01:E8:81:F2:A8:57:36:74:97
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 72B27F2B85CCAAD8920F004D8E7FFA622B7E133A
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32342d3234203d3e203232383232.roa
Signing time: Wed 12 Apr 2023 11:27:11 +0000
ROA not before: Wed 12 Apr 2023 11:22:11 +0000
ROA not after: Wed 10 Apr 2024 11:27:11 +0000
asID: 22822
IP address blocks: 213.139.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b2:7f:2b:85:cc:aa:d8:92:0f:00:4d:8e:7f:fa:62:2b:7e:13:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 12 11:22:11 2023 GMT
Not After : Apr 10 11:27:11 2024 GMT
Subject: CN=FA1905F6F4427B0CDBE40801E881F2A857367497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:09:d4:2b:81:80:f5:9b:54:fb:46:10:88:
45:b9:71:68:1d:7a:0d:33:4e:78:10:e5:3a:c3:d6:
05:33:e9:23:72:66:1f:c8:09:7a:ff:1d:18:af:01:
c5:88:96:6f:e5:fc:48:b5:41:62:ca:0a:e3:b9:82:
5e:cb:0b:61:3f:fe:9f:ed:c5:2d:47:b2:47:e7:8e:
47:a3:25:35:fe:2a:ee:91:c5:f2:b0:16:83:3d:e7:
56:78:b9:dd:76:af:a8:39:34:58:b0:c4:bd:5b:37:
cb:ab:58:54:69:38:7a:6c:94:3f:45:da:cf:31:df:
0c:6e:7a:75:06:55:93:d6:31:86:6e:73:e5:e6:ca:
c7:2f:84:f4:61:e3:16:79:6b:e1:c8:a9:48:c9:1a:
a8:0b:ee:d2:d5:14:ea:ee:3a:bf:92:c8:5e:a3:ae:
3a:47:72:39:ce:78:06:0d:fb:e9:20:38:bc:66:d2:
09:fc:ad:13:b7:92:7b:7d:7e:9c:12:8f:6b:db:5b:
89:0f:25:ec:5e:9d:a6:60:6d:33:fe:88:e9:7a:3c:
1d:4b:bf:2c:c0:12:db:1e:cf:59:b5:0d:a7:d6:da:
f6:a2:53:bb:ed:2d:4b:4f:51:56:8c:24:d2:7e:06:
21:f4:cf:4a:4b:81:04:64:de:a5:32:7f:5a:00:1f:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:05:F6:F4:42:7B:0C:DB:E4:08:01:E8:81:F2:A8:57:36:74:97
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32342d3234203d3e203232383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.90.0/24
Signature Algorithm: sha256WithRSAEncryption
33:14:b0:0c:09:7e:ad:27:09:92:e4:9f:de:7a:eb:fa:e8:12:
cf:34:80:d8:1d:0e:96:d5:b5:f8:ef:6e:af:bc:c3:de:ad:71:
c2:c2:7e:fa:80:fa:62:22:d6:ec:bc:4f:1c:f0:d1:c4:65:e0:
ac:41:ba:11:c9:7b:a7:c3:cb:32:80:78:0e:e8:72:5f:ba:64:
3a:86:3a:a7:63:85:ef:61:1a:fd:80:71:06:89:b2:17:04:e8:
a2:04:a8:7d:db:25:e0:fa:cc:2b:6a:64:be:24:88:17:79:2f:
51:74:c7:b3:df:4b:67:0d:1e:18:cd:44:54:30:11:07:08:72:
fc:12:6d:78:3c:46:14:eb:47:c8:9b:2e:12:61:b7:2a:3c:89:
3b:44:58:f2:b2:a3:38:4b:74:dd:ba:eb:15:6a:1c:e4:2b:51:
8e:a5:00:fe:66:7b:69:d3:1d:75:fe:47:ac:55:ea:94:09:64:
c7:89:ec:14:52:43:4a:41:74:f4:15:33:34:5f:d8:84:20:ae:
02:a8:94:63:8c:e2:13:1d:ae:6f:17:10:9f:12:79:53:4c:3d:
7a:bd:9b:03:08:0a:70:f7:64:71:ce:c6:46:b9:47:e5:18:54:
77:b2:65:c2:45:b1:52:71:35:5e:4e:d2:a6:10:24:4b:7b:36:
6b:be:0b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org