Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e203631333137.roa
File: 3231322e32332e3231392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: zHAKtUxw738u4hdz+DD0tIxiSuNgWUyW77WnvaVAYTU=
Subject key identifier: 2F:B1:A8:16:82:A6:48:01:07:F5:1D:6D:B5:1E:43:50:D0:18:50:0A
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 79E3C0FC36B8B58B6009B51F5F95349BB493551F
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e203631333137.roa
Signing time: Fri 01 Dec 2023 07:18:28 +0000
ROA not before: Fri 01 Dec 2023 07:13:28 +0000
ROA not after: Fri 29 Nov 2024 07:18:28 +0000
asID: 61317
IP address blocks: 212.23.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e3:c0:fc:36:b8:b5:8b:60:09:b5:1f:5f:95:34:9b:b4:93:55:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Dec 1 07:13:28 2023 GMT
Not After : Nov 29 07:18:28 2024 GMT
Subject: CN=2FB1A81682A6480107F51D6DB51E4350D018500A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:3e:ca:3a:13:47:48:dc:40:ae:61:1d:e6:
9d:a2:d2:6e:58:42:f7:7c:2c:59:ee:12:d6:be:2f:
cd:1a:33:55:a8:ee:61:3c:bc:e1:ce:39:f9:ae:a3:
5a:d5:a2:64:dc:e6:19:fa:9f:dd:de:a4:4f:55:4c:
57:39:56:b2:35:8d:ca:15:cb:56:cd:6f:d6:b8:86:
47:bf:7b:a3:ca:95:91:ff:0f:e7:93:0a:52:47:7b:
dc:fe:fb:5a:4c:4c:4f:61:dd:46:28:c6:84:43:ee:
fe:9f:6d:27:92:61:35:e0:de:1c:1c:6e:92:0b:17:
92:4f:01:aa:29:7c:97:f8:4e:8c:11:87:0d:09:7b:
a3:be:98:ba:eb:46:be:1d:6d:25:93:04:fd:04:53:
66:cc:53:05:a9:12:0a:25:be:8c:19:33:4d:f8:36:
77:c4:8b:a6:3e:61:17:65:68:02:30:77:9a:c5:0f:
54:5c:33:1b:44:9e:94:55:be:88:f2:da:30:ba:07:
ec:58:eb:36:2d:cc:69:3b:79:83:63:08:7e:78:75:
77:d4:ec:f2:21:f2:05:c8:b2:33:84:ab:a0:80:be:
bc:38:ec:36:2e:e1:f2:72:41:e7:87:13:37:04:22:
d1:14:6a:32:00:b2:53:eb:9e:81:8b:17:80:63:17:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:A8:16:82:A6:48:01:07:F5:1D:6D:B5:1E:43:50:D0:18:50:0A
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.219.0/24
Signature Algorithm: sha256WithRSAEncryption
56:68:13:27:06:cb:78:72:bb:90:b1:77:56:7a:bd:1f:4c:d0:
e1:bd:96:1c:bb:67:d2:d0:10:d2:11:ce:09:6e:c3:86:f2:36:
c3:e2:bb:89:d0:e3:a8:f2:c2:77:28:a6:c3:ac:89:9b:c3:5b:
fd:dd:42:8f:ea:99:36:4a:fd:c3:26:b7:9e:f5:5f:56:04:ca:
64:e1:58:59:82:0c:6a:75:c6:3c:c3:7c:05:13:f5:f6:91:f8:
8a:19:49:21:4c:80:85:b2:28:73:cb:87:42:06:19:9b:3d:0f:
df:98:eb:fa:74:27:94:2f:bb:de:00:8b:2b:95:33:e0:b7:a1:
af:b5:82:ad:be:89:86:f7:84:75:c3:20:f9:f5:96:77:9f:de:
7e:f9:0e:7c:62:e6:6f:d1:ec:6b:87:33:09:22:74:c7:d2:ec:
41:71:d2:0a:b6:1c:95:d6:a4:a7:d9:a7:99:70:8c:55:5c:93:
e1:15:6e:bb:2f:68:dd:c6:16:4b:e8:90:0e:21:9c:d5:83:9a:
53:e1:d9:0f:f4:69:b7:51:b9:c3:a9:0c:24:7f:50:cb:38:f9:
16:1a:a5:08:a2:9e:12:bf:ee:fa:85:85:5c:38:96:b7:89:63:
d6:62:a4:30:32:6e:56:f3:22:f0:b0:4c:85:53:1e:11:52:db:
d3:0c:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 23:45:44 2023 by rpki-client on console-ams.rpki-client.org