Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Ohhk7kMPnVdQEh6208Co5GFqn5G6kIJSAMlexldqMtE=
Subject key identifier: B4:B3:C5:33:AC:CD:F2:7D:44:B3:20:38:BD:91:73:67:2C:87:F9:8E
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 2316EFFEF2ADDE386CE0956AD5C6D966F31DF2C6
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e20383334.roa
Signing time: Wed 25 Jan 2023 13:01:48 +0000
ROA not before: Wed 25 Jan 2023 12:56:48 +0000
ROA not after: Wed 24 Jan 2024 13:01:48 +0000
asID: 834
IP address blocks: 213.139.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:16:ef:fe:f2:ad:de:38:6c:e0:95:6a:d5:c6:d9:66:f3:1d:f2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 25 12:56:48 2023 GMT
Not After : Jan 24 13:01:48 2024 GMT
Subject: CN=B4B3C533ACCDF27D44B32038BD9173672C87F98E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:d1:f5:33:44:ab:ef:e1:67:e9:00:30:8b:
b9:61:0c:5e:a9:e8:8d:7a:3f:5b:11:e8:50:6e:d8:
d7:f9:44:af:02:0f:fd:fa:6f:5a:ab:4e:02:0b:2d:
4f:00:30:4e:bb:0d:2b:c8:33:88:59:8d:46:cb:25:
ee:a2:aa:a5:55:92:e7:62:6d:5d:d3:e1:2c:68:84:
b8:1d:3c:0f:61:ce:de:aa:76:5b:ca:a3:64:ab:9b:
b9:df:10:57:fd:07:2f:98:8c:9d:7a:1f:f0:85:de:
ce:b3:0f:57:bd:76:95:9f:68:c5:7a:7b:92:0c:6b:
17:32:13:79:6b:3d:23:cb:c0:a6:70:74:8f:64:d3:
2a:4b:d5:1f:4f:af:d2:43:bd:8d:b5:87:a4:28:5d:
05:49:28:24:b7:81:ef:89:23:75:fd:1f:af:f0:ae:
ad:fa:cb:41:c7:98:60:df:79:ea:ba:93:4a:53:bc:
8e:c1:59:80:67:fd:0d:3f:a2:c2:0f:94:c9:84:d2:
c8:27:8b:b5:a0:f7:36:a2:1c:45:c4:e4:57:1d:44:
62:76:22:f9:d5:54:40:17:f6:02:8f:e6:2d:49:56:
85:5e:6b:b7:a6:47:74:a0:ef:44:5b:11:33:44:71:
60:b3:45:07:f2:7d:88:28:fb:de:9d:82:1c:12:ae:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:C5:33:AC:CD:F2:7D:44:B3:20:38:BD:91:73:67:2C:87:F9:8E
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:aa:12:50:6c:2f:5f:2b:0d:25:60:5d:d3:68:22:3b:0e:aa:
11:af:3e:a0:1f:c4:34:ea:a5:d8:79:de:f5:19:93:94:9f:23:
43:8e:d2:61:5a:8c:0a:bd:68:f3:74:90:31:ac:a2:d8:9f:73:
00:1f:08:fa:88:c5:1f:4f:ce:53:5c:72:29:55:91:4b:fd:81:
af:d2:76:0f:7b:cb:a2:c8:3f:d1:36:88:cd:ff:2e:26:60:64:
99:4e:30:4b:89:07:07:96:5a:63:f4:da:fa:87:58:bb:c1:b7:
f7:23:f2:e4:e9:16:fb:9c:c1:1f:8e:2f:47:00:70:08:bf:20:
50:e1:62:73:8a:fd:c3:cd:9c:db:f1:e1:26:3f:29:4d:00:ef:
de:7d:72:ae:ff:05:01:f8:1c:3e:ee:dd:ac:ff:e7:08:56:58:
c9:08:98:5f:2a:50:94:43:f3:13:51:98:9a:fc:98:6e:6d:5c:
14:2d:08:3f:95:3f:57:34:1c:7b:6d:ae:08:0b:e1:5e:3b:2e:
5f:07:72:af:1c:8d:30:a4:a2:29:c2:8a:31:9c:84:a6:23:92:
5e:a0:eb:df:7b:fe:63:a5:63:f3:a2:6f:57:3c:16:29:d0:7f:
77:02:00:56:ae:01:54:de:98:e3:53:79:6a:de:89:f8:46:a3:
76:9a:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org