Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20323130363937.roa
File: 3231332e352e3132382e302f32342d3234203d3e20323130363937.roa (raw, json)
Hash identifier: HBbKxcWUMASCwZCkCYhBqBs/q2/Mx6cX5+DteyaUjns=
Subject key identifier: 90:CD:72:A5:06:B6:6D:05:CE:52:8D:A7:F2:D8:87:CB:66:B7:FA:B7
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 32C643484C35CE93C91530390712411CE0022AB9
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20323130363937.roa
Signing time: Tue 26 Sep 2023 02:02:38 +0000
ROA not before: Tue 26 Sep 2023 01:57:38 +0000
ROA not after: Tue 24 Sep 2024 02:02:38 +0000
asID: 210697
IP address blocks: 213.5.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 10:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c6:43:48:4c:35:ce:93:c9:15:30:39:07:12:41:1c:e0:02:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 26 01:57:38 2023 GMT
Not After : Sep 24 02:02:38 2024 GMT
Subject: CN=90CD72A506B66D05CE528DA7F2D887CB66B7FAB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:18:18:75:6c:c6:6b:da:c7:2d:d9:b6:82:
e8:d0:4b:d0:60:26:b9:57:28:76:13:d6:d3:c0:8d:
53:a7:b7:08:49:5e:2e:c4:99:36:8d:b4:bd:46:ba:
28:2e:1c:e6:09:b7:b3:92:5f:2e:7f:2c:e1:1b:ee:
5b:9c:02:24:bf:f7:d0:05:8b:fe:ef:0b:e0:a6:22:
61:4a:b6:76:de:bb:6f:e3:1c:a6:d3:87:66:51:ae:
29:63:51:3c:c7:2b:52:db:57:0b:a5:4e:af:a1:23:
2c:f3:4e:b8:90:54:f0:ee:bd:4b:98:93:3a:53:2e:
15:92:75:af:25:ca:f6:13:07:74:a1:5c:d6:21:8a:
5d:11:60:dd:05:90:15:31:2b:a4:b2:67:5e:30:78:
2a:f0:ef:7c:1f:83:a0:27:b6:48:76:06:a0:7c:e9:
1f:19:f4:9b:d1:a7:15:b0:22:93:05:51:bd:ac:55:
1d:69:02:05:36:67:81:f3:96:25:63:27:66:34:21:
9a:ec:c4:73:31:97:93:12:9a:3d:d2:ad:d8:e3:8d:
73:69:83:2e:49:69:37:98:82:09:e9:12:ea:48:73:
29:37:9f:27:cd:34:fc:1e:73:ab:c0:e5:f2:04:53:
3d:89:2c:13:fe:59:96:03:d2:a6:9f:ef:56:56:46:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CD:72:A5:06:B6:6D:05:CE:52:8D:A7:F2:D8:87:CB:66:B7:FA:B7
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20323130363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.128.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:23:de:f4:8d:21:31:c2:9c:48:49:a6:4e:35:fe:29:25:c9:
24:52:de:12:53:56:d2:87:7b:2e:0b:61:11:b3:85:d2:d0:2f:
ed:8f:8e:bc:b1:5c:1e:09:8b:0b:d3:ef:0b:99:92:1e:a5:e4:
6d:94:f0:ab:3f:77:d5:8d:67:cb:26:29:c4:f8:ae:56:08:69:
4e:56:50:23:e6:86:35:90:1c:f7:ce:5e:0e:e3:56:7a:21:ed:
a0:e8:df:39:a6:2a:99:a4:2d:34:d2:7c:c6:43:e5:8d:05:c7:
4d:af:91:1b:99:73:97:b9:fd:43:df:84:24:b5:86:37:b2:ed:
b1:4e:1f:90:a6:5a:92:96:65:41:af:d9:b2:45:e3:e7:ed:73:
6c:30:ee:f3:35:c3:54:58:85:3e:6e:2c:62:86:41:e9:70:58:
73:44:95:fd:47:eb:c4:a1:67:36:7b:b2:54:45:b9:90:a3:32:
8c:64:bb:24:a3:69:a6:88:5a:1f:92:c4:cf:b8:07:9f:6e:2e:
2b:42:98:c9:be:89:b1:27:59:b7:6e:6b:56:0b:99:37:c8:2b:
d9:a2:54:40:8a:ff:2f:ce:91:e4:9d:18:1a:4e:aa:68:bd:b8:
b4:28:4b:4f:00:ec:b4:be:fc:22:cd:7c:cf:7c:5c:ef:6b:dc:
36:14:42:c6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUMsZDSEw1zpPJFTA5BxJBHOACKrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yMzA5MjYwMTU3MzhaFw0yNDA5MjQwMjAyMzhaMDMxMTAvBgNV
BAMTKDkwQ0Q3MkE1MDZCNjZEMDVDRTUyOERBN0YyRDg4N0NCNjZCN0ZBQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOhgYdWzGa9rHLdm2gujQS9Bg
JrlXKHYT1tPAjVOntwhJXi7EmTaNtL1GuiguHOYJt7OSXy5/LOEb7lucAiS/99AF
i/7vC+CmImFKtnbeu2/jHKbTh2ZRriljUTzHK1LbVwulTq+hIyzzTriQVPDuvUuY
kzpTLhWSda8lyvYTB3ShXNYhil0RYN0FkBUxK6SyZ14weCrw73wfg6Antkh2BqB8
6R8Z9JvRpxWwIpMFUb2sVR1pAgU2Z4HzliVjJ2Y0IZrsxHMxl5MSmj3SrdjjjXNp
gy5JaTeYggnpEupIcyk3nyfNNPwec6vA5fIEUz2JLBP+WZYD0qaf71ZWRtX3AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUkM1ypQa2bQXOUo2n8tiHy2a3+rcwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzIzMTMzMmUzNTJlMzEzMjM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMwMzYzOTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1QWAMA0GCSqGSIb3DQEBCwUAA4IBAQCcI970jSExwpxISaZONf4pJckkUt4SU1bS
h3suC2ERs4XS0C/tj468sVweCYsL0+8LmZIepeRtlPCrP3fVjWfLJinE+K5WCGlO
VlAj5oY1kBz3zl4O41Z6Ie2g6N85piqZpC000nzGQ+WNBcdNr5EbmXOXuf1D34Qk
tYY3su2xTh+QplqSlmVBr9myRePn7XNsMO7zNcNUWIU+bixihkHpcFhzRJX9R+vE
oWc2e7JURbmQozKMZLsko2mmiFofksTPuAefbi4rQpjJvomxJ1m3bmtWC5k3yCvZ
olRAiv8vzpHknRgaTqpovbi0KEtPAOy0vvwizXzPfFzva9w2FELG
Generated at Thu Feb 1 13:28:32 2024 by rpki-client on console-ams.rpki-client.org