Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20383334.roa
File: 3231332e352e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KIAJ0mlDLVasmfsXAXqdKcS22ueAeHVfcvyyhkJxAAo=
Subject key identifier: 0E:42:47:D7:95:38:0F:A6:78:19:81:B6:83:5B:5D:48:E7:9A:B8:7F
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 743B13A4696C8AEEA5CB06E4A64EB8943B6D8495
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20383334.roa
Signing time: Wed 04 Sep 2024 00:03:19 +0000
ROA not before: Tue 03 Sep 2024 23:58:19 +0000
ROA not after: Wed 03 Sep 2025 00:03:19 +0000
asID: 834
IP address blocks: 213.5.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 07:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3b:13:a4:69:6c:8a:ee:a5:cb:06:e4:a6:4e:b8:94:3b:6d:84:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 3 23:58:19 2024 GMT
Not After : Sep 3 00:03:19 2025 GMT
Subject: CN=0E4247D795380FA6781981B6835B5D48E79AB87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:c2:4c:d9:9e:dc:0a:24:83:45:74:53:f0:
fc:6b:d0:0c:59:5d:7f:ad:51:d8:9b:f4:b2:57:80:
02:ed:53:5a:3a:a9:f5:b9:90:90:d4:3d:ac:df:d4:
2a:ca:47:2b:5f:e7:09:60:8e:4e:13:c8:0b:1b:98:
66:aa:c3:7e:d4:a7:01:26:22:f0:c8:7e:41:67:73:
06:8f:44:05:9c:c1:30:f2:80:d7:4e:0f:8e:72:cc:
5f:a0:d2:97:b6:da:35:38:8f:95:88:d3:55:0f:95:
ec:7e:21:5c:9a:58:03:b1:19:4f:4b:3f:2e:21:bf:
29:13:70:19:ea:f5:35:3d:d1:10:f9:d8:f7:5d:96:
32:17:69:ec:7c:21:e8:ef:ea:69:e5:e5:2e:ee:6e:
c8:c5:b6:27:ba:92:8f:f9:3e:e2:b0:32:84:a7:35:
32:27:18:b0:bc:31:24:e1:5b:90:d0:5a:e7:de:6f:
32:ac:4f:9d:37:af:ea:f5:ae:26:6b:95:7f:15:80:
10:02:76:5e:70:71:10:86:23:99:0a:da:90:8a:5b:
3c:3f:46:74:d6:cd:7f:99:b1:f9:c1:d5:52:a7:1a:
d9:61:c5:ef:b3:22:db:e3:93:77:bd:8e:74:1d:a6:
b3:f4:69:cf:52:23:68:01:db:cf:e3:4c:5d:f9:a7:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:42:47:D7:95:38:0F:A6:78:19:81:B6:83:5B:5D:48:E7:9A:B8:7F
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.128.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a2:91:5c:5a:c2:e2:4f:c9:e1:3a:f7:50:45:b5:27:01:db:
c8:b3:e2:8a:61:f5:5c:c3:71:dd:58:a7:de:94:ed:3f:81:79:
16:2c:ef:c8:45:81:07:60:61:b2:41:8f:62:4f:60:e7:3f:5d:
c0:d6:e9:79:da:bb:a5:23:4d:fe:1a:ad:d6:47:c1:e0:b4:eb:
1d:0a:d7:da:7c:0e:9e:37:36:68:ff:d2:dc:ba:0b:bb:7e:ed:
32:c1:bf:9e:59:b0:42:e2:59:d3:89:c6:07:9c:b9:a5:19:7b:
fa:18:c5:03:f0:79:93:cc:d3:74:23:a2:bb:c1:cd:78:86:d9:
4c:cc:f9:b7:30:9e:56:61:67:da:b3:85:77:97:62:f8:3b:81:
69:29:7e:9f:65:db:3e:74:d6:28:a6:1b:0a:f7:92:ad:a3:7a:
58:fd:38:a9:71:0c:e3:e0:dc:07:9b:dc:a8:c5:bd:79:e2:42:
fd:b2:bf:4d:e8:a2:25:fe:a0:9b:26:a6:72:0c:dc:71:bf:1e:
15:35:7f:79:3a:7f:4b:aa:c3:5b:b0:58:bf:43:74:72:a1:82:
0a:9b:cd:ce:b6:45:81:c7:82:3a:c4:23:5c:0f:60:c5:cc:57:
62:38:de:92:67:56:d3:4d:a3:8e:df:1b:bf:f4:f7:e2:81:63:
39:0f:73:c9
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 5 10:01:33 2024 by rpki-client on console-ams.rpki-client.org