Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e2037303239.roa
File: 3231332e352e3132382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: nZbIqPvYAix197tkTunuJtqLsPJHQjt7y6uuN7gShAg=
Subject key identifier: 08:40:E7:11:71:4A:EB:9F:8D:46:E2:DC:95:C1:5A:64:A4:AB:B3:5C
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 1DC65A224FDE2D36C247C9AC8F980A244A45AE94
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e2037303239.roa
Signing time: Sun 04 Aug 2024 18:07:54 +0000
ROA not before: Sun 04 Aug 2024 18:02:54 +0000
ROA not after: Sun 03 Aug 2025 18:07:54 +0000
asID: 7029
IP address blocks: 213.5.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c6:5a:22:4f:de:2d:36:c2:47:c9:ac:8f:98:0a:24:4a:45:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 4 18:02:54 2024 GMT
Not After : Aug 3 18:07:54 2025 GMT
Subject: CN=0840E711714AEB9F8D46E2DC95C15A64A4ABB35C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:ee:3f:55:26:ea:52:59:bf:ce:3c:d9:51:
25:9b:30:29:13:0d:b7:f5:cf:f6:99:76:0b:e8:e3:
9e:70:ae:c1:f9:ef:bb:fb:89:9b:c4:f7:43:95:e5:
e3:46:4c:bd:d8:f8:ae:5a:83:bc:72:1f:fc:89:e8:
81:52:62:0e:f4:bf:d7:41:5d:5f:22:19:46:f8:13:
57:7f:d4:a0:a3:14:dc:57:0b:50:69:66:62:6f:f6:
48:6b:a0:ab:d3:bf:ed:10:89:61:53:6f:90:eb:b6:
fa:30:81:cc:5d:29:7e:64:e9:2b:41:b1:98:bc:6b:
89:e1:03:88:a2:14:fb:98:e9:03:b1:3a:8e:cf:61:
4a:8b:4a:5a:cb:e1:d7:b6:a1:e7:78:d6:2a:48:75:
92:ec:8c:fc:3b:ce:b5:8b:c7:35:8f:f3:85:33:cc:
01:b1:a9:2b:90:48:76:3c:ce:1f:27:de:af:0c:2a:
9c:e3:fb:b3:32:dd:33:2e:8b:5d:84:a4:f0:06:40:
42:fc:16:58:30:71:62:46:8c:dc:e7:02:3c:ca:29:
57:9c:ff:55:eb:98:cd:9d:67:fb:15:ef:a2:c8:43:
40:59:b5:9b:49:72:d3:e3:f0:be:19:53:da:d2:a5:
0a:35:83:9a:81:7c:47:70:26:28:5b:7c:79:57:ee:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:40:E7:11:71:4A:EB:9F:8D:46:E2:DC:95:C1:5A:64:A4:AB:B3:5C
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d4:ee:49:23:61:23:64:ac:7b:0e:3d:f8:ac:da:59:17:9a:
ee:e4:96:e5:23:c5:13:92:bc:ae:b3:47:23:c3:5e:73:39:b8:
bc:95:82:57:34:9e:3c:25:1e:ab:53:fd:d2:3c:0e:2d:38:73:
4d:24:0b:01:4a:1e:c0:e1:fa:8a:d4:19:cf:c8:49:bb:0e:20:
fc:8b:dd:8a:ff:7a:a8:b7:33:c5:cc:b3:c8:b5:96:84:c7:d2:
cb:4a:4b:f5:41:b9:81:69:6c:bd:89:44:f9:c2:aa:27:a7:7d:
61:06:8a:87:ef:e6:26:20:dc:93:3d:91:04:48:f5:45:64:0d:
dd:f1:e7:0b:8b:2e:0d:0f:08:31:f2:c9:d1:4d:0b:5c:df:46:
51:be:11:4e:51:76:d4:0e:35:35:0e:c8:bd:8c:91:0a:96:01:
c8:62:7c:94:99:aa:e3:33:1d:3b:fa:a2:79:a6:e5:c8:5d:6f:
f2:ea:dd:32:87:13:bb:c3:24:62:16:54:66:c9:aa:1d:fd:30:
45:9c:d8:a1:3e:02:07:38:4c:ef:70:a5:d2:d5:4e:49:3a:c8:
8f:9d:49:76:72:b3:30:76:e3:33:6c:e9:b6:32:60:4c:d4:e9:
61:39:93:cc:30:3a:5c:3d:d1:de:8c:54:ce:f8:03:3d:93:66:
05:e0:43:1c
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 4 01:40:25 2024 by rpki-client on console-ams.rpki-client.org